188.92.249.249
INTELLIGENCE BRIEFING: 188.92.249.249
Classification: Low Risk / Clean
Date: Current
Prepared For: SOC Analyst
---
1. EXECUTIVE SUMMARY
IP 188.92.249.249 exhibits a clean threat profile with no active malicious indicators. The address belongs to Starlink satellite infrastructure (ASN 14593) with no detected abuse or threat activity. The IP is classified as Low Risk with a risk score of 0 and zero blacklist entries.
2. INFRASTRUCTURE PROFILE
- ASN: 14593 (Starlink)
- Organization: mnt-us-spacex-1
- Network: STARLINK_1164943631518433367_MDRDESP1_IPV4
- CIDR: 188.92.249.0/24
- RIR: RIPE
- Geolocation: Paris, France (FR)
- Status: Firewalled / No Services Detected
3. THREAT ASSESSMENT
- Risk Score: 0
- Abuse Confidence: Not applicable
- Blacklist Status: Clean (0 entries)
- Threat Indicators: None detected
- Campaign Affiliation: None correlated
- Known Attacker Status: Negative
- Tor Exit Node: Negative
- Proxy/VPN/CDN: Negative
4. NEIGHBORHOOD ANALYSIS
Subnet 188.92.249.0/24 assessment:
- Abuse Density: 0 (Clean)
- Classification: Clean
- Threat Siblings: 0
- Active Siblings: 0
- Risk Distribution: All categories empty
5. RELATIONSHIP GRAPH
- DNS Associations: customer.mdrdesp1.isp.starlink.com (reverse DNS)
- Network Relationships: Same Network (Starlink infrastructure)
- Organizational Links: Starlink provider infrastructure only
- External Correlations: None identified
6. OBSERVATION HISTORY (18 signals)
Recent activity (2026-07-24):
- Ownership signals consistently identify Starlink infrastructure
- Geolocation signals indicate Paris, FR with 0.28-0.30 confidence
- No ownership changes detected
- No persistent malicious behavior observed
- Threat observation count: 0
7. NETWORK SERVICES
- Open Ports: None detected
- TLS Certificates: None
- HTTP Services: None
- Email Auth: SPF and DMARC records present (starlink.com domain)
8. RECOMMENDED ACTIONS
No firewall rules or blocking recommendations generated due to clean risk profile. Standard monitoring recommended.
9. INTELLIGENCE NOTES
- IP address belongs to legitimate Starlink satellite internet infrastructure
- Geolocation shows Paris, FR which may indicate Starlink ground station or edge infrastructure deployment
- No anomalous behavior patterns detected
- Subnet cleanliness suggests no coordinated abuse activity
- Recommend monitoring for any changes in network role or threat indicators
END BRIEFING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | mnt-us-spacex-1 |
| ASN | AS14593 |
| Network Name | STARLINK_1164943631518433367_MDRDESP1_IPV4 |
| CIDR Block | 188.92.249.0/24 |
| RIR | RIPE |
| Country | FR |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | customer.mdrdesp1.isp.starlink.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | customer.mdrdesp1.isp.starlink.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS14593 |
| Network Prefix | 188.92.248.0/23 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 25% | 1 | 1 |
| geolocation | 0% | 0 | 0 |
| Overall | 18% | 5 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-08 06:54:43 UTC |
| Last Seen | 2026-10-06 05:12:11 UTC |
| Profile Built | 2026-10-06 05:16:54 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 24 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 188.92.249.249
Who owns the IP address 188.92.249.249?
188.92.249.249 is registered to mnt-us-spacex-1. The address falls within the 188.92.249.0/24 network block. Registration is held at RIPE.
Where is 188.92.249.249 located?
Geolocation data places 188.92.249.249 in Paris, Île-de-France, France. The local time zone is Europe/Paris. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 188.92.249.249 malicious or safe?
188.92.249.249 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 188.92.249.249?
The reverse DNS (PTR) record for 188.92.249.249 is customer.mdrdesp1.isp.starlink.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.