74.244.195.190📋 Copy

# INTELLIGENCE BRIEFING: 74.244.195.190/32

## Executive Summary

IP address 74.244.195.190 is a low-risk infrastructure address belonging to SpaceX Services, Inc. (ASN 14593), operating within the Starlink satellite internet ecosystem. The IP is currently classified as clean with a risk score of 25/100 and shows no active threat indicators.

## Ownership & Network Classification

• Organization: SpaceX Services, Inc.
• Netname: SS-2296
• CIDR Block: 74.244.0.0/15
• ASN: 14593
• RIR: ARIN
• Abuse Contact: starlink-abuse@spacex.com

## Geolocation Analysis

The IP resolves to geolocation data showing inconsistencies typical of Starlink's distributed architecture:

• Reported Countries: Zimbabwe (ZW) / United States (CA)
• Distance from Probe: 8,164.2 km
• Status: Geo plausible (validated)
• Note: Geolocation discrepancies are expected for satellite internet infrastructure and do not indicate malicious activity

## Network Role & Services

• Classification: Firewalled / No Services
• Open Ports: None detected
• DNS: customer.jhngzaf1.isp.starlink.com
• PTR Record: customer.jhngzaf1.isp.starlink.com
• Email Auth: SPF and DMARC records present

## Threat Intelligence Assessment

## Neighborhood Analysis (/24 Subnet)

• Subnet: 74.244.195.0/24
• Total Siblings: 9
• Active Siblings: 4
• Threat Siblings: 0
• Abuse Density: 0 (clean)
• Risk Distribution: 0 High, 0 Medium, 6 Low risk

Neighbor IPs all maintain low risk scores (0-25), confirming subnet-wide legitimacy.

## Historical Signal Analysis

18 observations tracked. Recent signals (2026-07-30) indicate:

• Consistent classification as "clean"
• Stable ownership with SpaceX Services, Inc.
• No significant threat signal changes
• ICMP validation blocked (normal for cloud/infrastructure networks)
• One hop resolved to Cape Town, ZA (liquidtelecom.net)

## Relationship Graph

• Network Association: SS-2296 (SpaceX)
• DNS Associations: customer.jhngzaf1.isp.starlink.com (multiple entries)
• No certificate matches or organizational links beyond parent network

## Recommended Actions

Based on risk profile and threat assessment, no immediate blocking or monitoring actions are required. The IP is classified as legitimate infrastructure.

Firewall/Security Recommendations:

• No action required
• Traffic from this IP may be observed as legitimate Starlink user traffic
• No WAF or DLP rules necessary

## Intelligence Confidence

• Profile Confidence: High
• Data Freshness: Current (2026-07-30)
• Threat Confidence: Low (clean classification)
• Geolocation Confidence: Medium (expected variance for Starlink)

---

*Intelligence generated via IPDebrief platform. Data sourced from passive monitoring and active reconnaissance.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.