145.224.123.205📋 Copy

# IP Intelligence Briefing: 145.224.123.205/32

Classification: LOW RISK | Date: 2024-12-19

---

## Executive Summary

IP address 145.224.123.205 operates as a Starlink residential endpoint in Kyiv, Ukraine (AS14593). The asset maintains a low-risk profile (risk score: 25/100) with no malicious indicators, blacklist associations, or threat activity observed. Neighborhood analysis confirms a clean subnet classification with zero abuse density.

---

## Technical Profile

Ownership & Classification:

• ASN: 14593 (Starlink)
• Organization: mnt-us-spacex-1
• Netname: STARLINK_1032765810924290144_WRSWPOL1_IPV4
• CIDR Block: 145.224.123.128/25
• Registration: RIR-ripe

Geolocation:

• Country: Ukraine (UA)
• City: Kyiv
• Region: Kyiv City
• Geo Consensus: Validated

Network Services:

• Open Ports: None detected
• Service Status: Firewalled / No Services
• DNS PTR: customer.wrswpol1.isp.starlink.com
• Forward Resolution: 1 hostname confirmed

Threat Indicators:

• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Association: None

---

## Control Plane Analysis

• BGP Prefix: 145.224.122.0/23
• Route Stability: Unstable
• DNSSEC Valid: Yes
• DNSBL Listed: 1 of 8 lists (likely false positive for Starlink infrastructure)
• Operator Score: 0.2174 (Minimal)

---

## Neighborhood Assessment

Subnet: 145.224.123.0/24

• Abuse Density: 0%
• Classification: Clean
• Total Siblings: 3
• Threat Siblings: 0
• Active Siblings: 0

Associated IPs:

• 145.224.123.15 (Risk Score: 0)
• 145.224.123.71 (Risk Score: 0)

---

## Observation History

19 observations tracked across the monitoring period. Recent signals (2026-07-26) confirm:

• Geovalidation: Plausible (claimed location: Kyiv, UA)
• Network Role: Residential/ISP endpoint
• Port Scan Activity: No open services detected
• Ownership Changes: 0 (stable)
• Threat Persistence: 0 days

---

## Intelligence Narrative

The target IP 145.224.123.205 represents a legitimate Starlink residential endpoint deployed in Kyiv, Ukraine. The IP resolves to Starlink infrastructure with proper DNS delegation and exhibits no malicious characteristics. The absence of open ports and services indicates a properly configured residential gateway.

Neighborhood analysis reveals a clean subnet environment with zero abuse density and no correlated threat activity. The single DNSBL listing (of 8 total) is consistent with Starlink's infrastructure footprint rather than malicious attribution.

Historical monitoring shows stable ownership with no threat persistence indicators. The IP has maintained a low-risk classification throughout the observation period.

---

## Recommended Actions

SOC Analyst Guidance: No immediate action required.

1. Traffic Policy: Allow standard traffic; no blocking recommended

2. Monitoring: Continue passive monitoring; no active blocking warranted

3. Threat Hunting: No correlation with known campaigns or attacker infrastructure

4. Firewall Rules: Not recommended at this time

The IP profile aligns with legitimate Starlink residential service usage. No evidence of compromise, abuse, or malicious activity detected.

---

*Generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.