74.244.195.110📋 Copy

# IP Intelligence Briefing: 74.244.195.110/32

## Executive Summary

IP address 74.244.195.110 is classified as Moderate Risk (Risk Score: 50) with no active threat indicators. The IP resolves to a Starlink customer hostname (customer.jhngzaf1.isp.starlink.com) and is associated with AS14593 (SpaceX Services, Inc.). No malicious activity, blacklisted sources, or known campaign associations were detected.

## Ownership and Network Classification

## Geolocation Data

Geolocation data shows conflicting sources. MaximumMind-Geolite2-City reports Zimbabwe (ZW, Harare), while Cymru-geo reports United States (US). This discrepancy warrants monitoring but does not indicate malicious intent.

## Threat Intelligence Assessment

• Abuse Confidence Score: Not calculated
• Blacklist Status: Listed on 2 of 8 DNSBLs
• Threat Indicators: None detected
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None

## Neighborhood Analysis (74.244.195.0/24)

The /24 subnet demonstrates a clean security posture with zero abuse density and no threat siblings.

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 8

Neighbor Risk Scores: 0, 0, 25, 25, 25, 25, 25, 25 (all below threshold for concern)

## DNS Resolution

## Historical Observation Summary

Analysis of 16 historical observations indicates stable network behavior:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Is Persistently Malicious: False
• Threat Observation Count: 0

Recent observations (July 30, 2026) maintain consistent geolocation, subnet classification, and absence of malicious indicators.

## Control Plane Data

## Relationship Graph

Nine relationships identified:

• Same Network (SS-2296): 4 instances
• DNS Association: 5 instances (customer.jhngzaf1.isp.starlink.com)

## Recommended Actions

No immediate blocking or mitigation actions recommended. The IP shows:

• No active threat indicators
• Clean neighborhood profile
• Stable ownership history
• No known malicious associations

SOC Analyst Note: While the moderate risk score (50) stems from DNSBL listings, the absence of threat indicators and clean neighborhood classification suggests benign Starlink customer activity. Continue monitoring for any changes in threat posture or DNSBL status.

---

*Generated via IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.