149.104.22.5📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

Target: 149.104.22.5/32

Classification: Low Risk Infrastructure IP

Date: Current Analysis Cycle

Prepared For: SOC Analyst Operations

---

## EXECUTIVE SUMMARY

IP 149.104.22.5 presents as a low-risk infrastructure address belonging to STARCLOUD GLOBAL PTE. LTD. The IP exhibits no active threat indicators, maintains stable ownership, and shows no evidence of malicious activity. Current risk assessment score: 25/100 (Low Risk). No immediate blocking or filtering actions are recommended.

---

## OWNERSHIP & NETWORK ATTRIBUTES

---

## THREAT ASSESSMENT

Risk Profile: LOW RISK

* Risk Score: 25

* Blacklist Status: Clean (0 blacklists)

* Threat Indicators: None detected

* Known Attacker: No

* Spam Source: No

* Tor Exit Node: No

Control Plane:

* BGP Prefix: 149.104.22.0/24

* Operator Score: 0.1304 (Minimal)

* DNSBL Listings: 1 of 8 lists

* Route Stability: False (minor fluctuation)

---

## NETWORK BEHAVIOR & SERVICES

Service State: Firewalled / No Services

* Open Ports: None detected

* HTTP/HTTPS: No active services

* DNS Resolution: No forward resolution

* PTR Records: None

* TLS/Certificates: None

Network Traceroute:

* Hop Count: 17

* Transit Networks: Comcast, NTT

* Last Hop RTT: 1638.6ms

---

## GEOLOCATION VALIDATION

* Consensus: True

* Validation Status: Geo-plausibility flagged as false (potential inconsistency)

* Historical Discrepancy: One observation reported geolocation as US (39.83, -98.58) with 35% confidence, contradicting primary Hong Kong assignment. Requires monitoring.

---

## HISTORY & TIMELINE

Observation Count: 12 signals recorded

Key Historical Signals:

* Ownership Changes: 0 (stable)

* Threat Persistence Days: 0

* Threat Observation Count: 0

* Is Persistently Malicious: False

Recent Signal Activity:

* Ownership signals observed 2026-07-29

* Geolocation signals observed 2026-07-29

* Operator score signals observed 2026-07-29

---

## NEIGHBORHOOD ANALYSIS

Subnet: 149.104.22.0/24

* Abuse Density: 0

* Total Siblings: 0

* Active Siblings: 0

* Threat Siblings: 0

Risk Distribution:

* High: 0

* Medium: 0

* Low: 0

---

## RELATIONSHIP GRAPH

* Same Network: STARCLOUD-GLOBAL-CGNT-NET-7 (2 relationships)

---

## RECOMMENDED ACTIONS

Current Risk Level: LOW

Recommended Firewall Rules: None

Security Posture: Monitor

Guidance for SOC Analysts:

1. No Immediate Action Required: Current risk score (25) and clean threat profile indicate no active threat.

2. Monitor Geolocation Inconsistency: Track the US vs. HK geolocation discrepancy in observation history.

3. Baseline Normal: Establish this IP as baseline infrastructure if connections originate from this address.

4. Re-evaluate if: Threat indicators emerge, blacklist status changes, or geolocation data becomes inconsistent with operational expectations.

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.