153.66.149.108
Intelligence Briefing: IP 153.66.149.108
Risk Profile
The IP address registered a Low Risk reputation with a risk score of 25. The asset was classified as a Suspicious Host based on generic threat indicators. While no specific campaigns or known attacker associations were identified, the address appeared on one DNS blacklist out of eight total checks.
Ownership and Geolocation
Registration data linked the address to SpaceX Services, Inc. under ASN 14593 within the 153.66.0.0/15 block. Geolocation consensus placed the host in Charleston, WV, United States. DNS PTR records resolved the address to `customer.ashnvax2.isp.starlink.com`.
Technical Activity
Active port scans detected no open ports or running services, designating the network role as Firewalled / No Services. Behavioral analysis recorded zero incidents, WAF violations, or honeypot hits. The operator score remained minimal at 0.087.
Recommendation
Current analysis suggests low-grade risk indicators. SOC analysts should monitor the address for any changes in behavior or service activity, maintaining a low severity posture.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | SpaceX Services, Inc. |
| ASN | AS14593 |
| Network Name | SS-2296 |
| CIDR Block | 153.66.0.0/15 |
| RIR | APNIC |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | customer.ashnvax2.isp.starlink.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | customer.ashnvax2.isp.starlink.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-15 00:30:46 UTC |
| Last Seen | 2026-09-15 00:30:46 UTC |
| Profile Built | 2026-09-15 00:44:18 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 22 |
Full dossier details are available via our API.