150.228.224.31📋 Copy

IP INTELLIGENCE BRIEFING

Target IP: 150.228.224.31/32

Classification: Legitimate Infrastructure (Starlink)

Risk Level: Moderate (55/100)

Report Date: 2026-07-29

---

EXECUTIVE SUMMARY

IP address 150.228.224.31 is a Starlink satellite internet infrastructure endpoint located in Metro Manila, Philippines. The IP belongs to SpaceX Services Inc administrator under ASN 14593 (STARLINK_MNLAPHL1_PH). No active malicious indicators detected. Risk score of 55 reflects infrastructure-level classification rather than malicious activity.

---

OWNERSHIP AND NETWORK ATTRIBUTES

---

THREAT INDICATORS ANALYSIS

Current Threat Status: CLEAN

• Blacklist Count: 0
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Active Threat Indicators: None

Network Classification:

• Open Ports: None detected
• Active Services: None detected
• Proxy/Vpn/CDN: No
• Cloud/Hosting: No

---

NEIGHBORHOOD ANALYSIS

Subnet: 150.228.224.0/24

• Total Sibling IPs: 14
• Abuse Density: 0 (0 high-risk neighbors)
• Risk Distribution: 0 high, 3 medium, 10 low risk

Notable neighbors include IPs with risk scores 15-40, consistent with Starlink infrastructure baseline. No correlated malicious activity detected within subnet.

---

OBSERVATION HISTORY (15 Signals)

Temporal Analysis:

• Last Observed: 2026-07-29
• Ownership Changes: 0
• Threat Persistence: None
• Persistently Malicious: No

Key Historical Signals:

• Ownership consistently attributed to SpaceX Services Inc administrator
• Geolocation inferred as Philippines with 0.28 confidence
• Operator score: 0.2174 (Minimal risk operator)
• DNSSEC validation: Valid
• No route changes in 30-day window

---

RELATIONSHIP GRAPH

Detected Relationships (4 total):

1. Same Network: STARLINK_MNLAPHL1_PH

2. DNS Association: customer.mnlaphl1.isp.starlink.com

No external organizational or certificate associations detected.

---

RECOMMENDED ACTIONS

For SOC Teams:

1. Whitelist/Allow: Legitimate Starlink infrastructure; expected in communications

2. Firewall Rules: No blocking required

3. Monitoring: Standard traffic monitoring appropriate

4. False Positive Review: If flagged as malicious, verify against infrastructure baseline

Recommended Firewall Policy:

• Allow inbound/outbound (standard infrastructure)
• No rate limiting required
• No blocking recommended

---

CONCLUSION

IP 150.228.224.31 is confirmed as legitimate Starlink satellite infrastructure. The moderate risk score reflects classification for satellite endpoints rather than malicious activity. No blocking or defensive measures required. Monitor as standard infrastructure traffic.

Analyst Notes: Starlink infrastructure IPs commonly show moderate risk scores due to infrastructure classification. The absence of active services, blacklisting, or threat indicators confirms benign operational status.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.