150.228.105.86📋 Copy

# IP INTELLIGENCE BRIEFING: 150.228.105.86/32

## Executive Summary

Target IP 150.228.105.86 is a low-risk Starlink satellite infrastructure endpoint. No active threat indicators detected. Subnet abuse density is minimal. Routine defensive monitoring recommended.

## Risk Profile

• Overall Risk Score: 25 (Low Risk)
• Reputation: Low Risk
• Abuse Confidence Score: Not applicable
• Blacklist Status: Clean (0/0 lists)
• Campaign Correlation: None detected

## Ownership & Network Classification

• ASN: 14593
• Organization: mnt-us-spacex-1
• Network Name: STARLINK_1127321585390682213_SFIABGR1_IPV4
• RIR: APNIC
• CIDR Block: 150.228.105.0/24
• Network Role: Firewalled / No Services
• Infrastructure Type: Satellite/ISP Edge Network

## Geolocation Intelligence

Multiple geolocation sources indicate conflicting data:

• Primary Location: US (US)
• Regional Indications: Baghdad (IQ)
• Confidence Level: Low (0.35)
• Accuracy Radius: 2,500 km
• Note: Geographic discrepancies are consistent with Starlink's distributed satellite infrastructure and should not be used for definitive location pinning.

## Threat Indicators

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Threat Feeds: Empty
• Malware/Campaign Activity: None observed
• Persistence Duration: 0 days

## Network Services & DNS

• Open Ports: None detected
• TLS Certificate: None
• DNS PTR Record: customer.sfiabgr1.isp.starlink.com
• Forward Resolution: 1 hostname (customer.sfiabgr1.isp.starlink.com)
• Email Authentication: SPF and DMARC configured

## Subnet Analysis (150.228.105.0/24)

• Total Sibling IPs: 19
• Active Siblings: 5
• Threat Siblings: 2 (both low-risk)
• Abuse Density: 0.1053 (10.53%)
• Classification: mostly_clean
• Inherited Risk: 4 (low)
• Risk Distribution: 0 High / 0 Medium / 15 Low / 3 Unassessed

Notable High-Scoring Neighbors:

• 150.228.105.19, .23, .62, .64, .116, .140, .147, .166, .174, .219, .229, .246, .254 (Risk Score: 25)

## Temporal Analysis

• Observation Count: 16 signals
• Ownership Changes: 0
• Threat Persistence: 0 days
• Is Persistently Malicious: False
• Recent Activity: Observations recorded from July 2026 period

## Control Plane & Route Data

• Origin ASN: 14593
• BGP Prefix: 150.228.104.0/23
• Route Stability: False (route changes observed)
• RPKI State: Not assessed
• DNSSEC: Valid
• DNSBL Listings: 1/8 lists (minimal impact)

## Operational Recommendations

1. Monitoring: Standard passive monitoring sufficient. No active threat indicators present.

2. Firewall Rules: No blocking required. If traffic is unexpected, review for misconfiguration rather than malicious origin.

3. Threat Hunting: Subnet-wide abuse density is low. No coordinated attack pattern evident.

4. False Positive Handling: Geographic discrepancies are normal for satellite infrastructure. Do not use for location-based blocking.

## Intelligence Conclusion

IP 150.228.105.86 is a benign Starlink endpoint with no malicious activity. The subnet demonstrates normal operational characteristics for satellite infrastructure. No defensive action required beyond standard logging and observation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.