# 148.227.91.29 — IP Intelligence Summary

148.227.91.29 is an IPv4 address operated by Starlink Brazil Serviços de Internet Ltd (AS14593), geolocated to Brasília, Brazil. Its reverse DNS name is customer.brsabra1.isp.starlink.com. As of October 12, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/148.227.91.29
- Last updated: 2026-10-12

## Ownership

- Organization: Starlink Brazil Serviços de Internet Ltd
- Network name: 148.227.91.0 - 148.227.91.255
- Allocated block: 148.227.91.0/24
- ASN: AS14593 (https://ipdebrief.com/asn/14593)
- Regional registry: ARIN

## Location

- City: Brasília
- Region: Federal District
- Country: Brazil
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- customer.brsabra1.isp.starlink.com
- Forward-confirmed: no

## Analyst narrative

\# IP Intelligence Briefing: 148.227.91.29

\## Executive Summary

Target IP 148.227.91.29 is a low-risk infrastructure address assigned to Starlink Brazil Serviços de Internet Ltd (ASN 14593). The IP is associated with the customer hostname customer.brsabra1.isp.starlink.com and is classified as "Firewalled / No Services." Current risk assessment indicates minimal threat activity, though the broader /24 subnet shows moderate abuse density.

\## Ownership and Geolocation

| Attribute | Value |

|-----------|-------|

| **Organization** | Starlink Brazil Serviços de Internet Ltd |

| **ASN** | 14593 |

| **CIDR Block** | 148.227.91.0 - 148.227.91.255 |

| **Country** | Brazil (BR) |

| **City** | Brasília |

| **RIR** | ARIN |

\## Risk Assessment

| Metric | Score | Assessment |

|--------|-------|------------|

| **Overall Risk** | 15 | Low Risk |

| **Abuse Confidence** | Not Available | No data |

| **Blacklist Count** | 0 | Clean |

| **DNSBL Listed** | 1 of 8 | Minor concern |

| **Operator Score** | 0.2174 | Minimal |

\## Threat Indicators

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Known Campaigns:** None identified

\- **Open Ports:** None detected

\- **TLS Certificate:** None

\- **HTTP Title:** None

\## Network Infrastructure

\- **Service Purpose:** Firewalled / No Services

\- **Connection Type:** Infrastructure

\- **Cloud Provider:** No

\- **CDN:** No

\- **VPNs/Proxies:** No

\- **BGP Prefix:** 148.227.88.0/22

\- **Route Stability:** False

\- **RPKI State:** Not assessed

\## Subnet Neighborhood Analysis (148.227.91.0/24)

| Metric | Value |

|--------|-------|

| **Abuse Density** | 0.1579 |

| **Subnet Classification** | mostly_clean |

| **Total Siblings** | 19 |

| **Active Siblings** | 9 |

| **Threat Siblings** | 3 |

**Risk Distribution Among Siblings:**

\- High Risk (40+): 7 IPs (148.227.91.58, 88, 123, 140, 163, 179, 248)

\- Medium Risk (25-39): 4 IPs (148.227.91.30, 220, 224)

\- Low Risk (\<25): 8 IPs (including 148.227.91.29)

\## Historical Observations

**Observation Count:** 16 signals recorded

**Most Recent:** 2026-07-26

**Threat Persistence:** 0 days

**Persistent Malicious Activity:** False

Recent activity includes port scanning signals and operator score assessments. No persistent malicious behavior detected over the observation period.

\## DNS and Email Reputation

\- **PTR Hostname:** customer.brsabra1.isp.starlink.com

\- **Forward Resolution:** Confirmed (1 hostname)

\- **SPF Record:** Present

\- **DMARC Record:** Present

\- **Email Sender Score:** Not assessed

\## Recommended Actions

Based on the low-risk profile and Starlink infrastructure classification, the following actions are recommended:

1. **Firewall Policy:** Permissive rules may be acceptable for legitimate Starlink traffic.

2. **Monitoring:** Include IP in baseline traffic monitoring; no immediate blocking required.

3. **Subnet Context:** Monitor the /24 subnet for correlated activity from the 7 medium/high-risk siblings.

4. **Threat Intelligence:** No immediate threat indicators; continue passive monitoring.

\## Conclusion

IP 148.227.91.29 presents as legitimate Starlink Brazil customer infrastructure with minimal current risk. The subnet shows moderate abuse density with several sibling IPs flagged as medium to high risk. SOC teams should monitor for any behavioral changes from the target IP or correlated activity from neighboring addresses in the 148.227.91.0/24 range.

## Nearby addresses

- 148.227.91.18 (https://ipdebrief.com/148.227.91.18)
- 148.227.91.30 (https://ipdebrief.com/148.227.91.30)
- 148.227.91.31 (https://ipdebrief.com/148.227.91.31)
- 148.227.91.45 (https://ipdebrief.com/148.227.91.45)
- 148.227.91.49 (https://ipdebrief.com/148.227.91.49)
- 148.227.91.50 (https://ipdebrief.com/148.227.91.50)
- 148.227.91.58 (https://ipdebrief.com/148.227.91.58)
- 148.227.91.88 (https://ipdebrief.com/148.227.91.88)
- 148.227.91.102 (https://ipdebrief.com/148.227.91.102)
- 148.227.91.118 (https://ipdebrief.com/148.227.91.118)
- 148.227.91.123 (https://ipdebrief.com/148.227.91.123)
- 148.227.91.132 (https://ipdebrief.com/148.227.91.132)

---

Source: IPDebrief, "148.227.91.29 IP intelligence", https://ipdebrief.com/148.227.91.29, updated 2026-10-12. Assessments are probabilistic.