## Intelligence Briefing: 74.244.197.117/32
Classification: Low Risk
Date: Current analysis based on IPDebrief intelligence platform data
Executive Summary
IP address 74.244.197.117 was analyzed as a low-risk infrastructure address associated with SpaceX Services, Inc. (Starlink). The IP presents minimal threat indicators and is classified as a firewalled service endpoint with no active open services.
Ownership and Network Context
The address belongs to SpaceX Services, Inc. (AS14593), operating within CIDR block 74.244.0.0/15 (network SS-2296). Geographic indicators point to Cape Town, South Africa, though historical observations have shown geolocation variance between South Africa and US coordinates, indicating potential multi-region Starlink deployment patterns.
Risk Assessment
The IP received an overall risk score of 25 (Low Risk), with provider and authority scores at zero. No threat indicators were identified:
- Zero blacklist entries
- No known attacker reputation
- Not a Tor exit node
- No spam source designation
- Abuse confidence score: null
Network Services and DNS
DNS resolution confirms the address resolves to customer.jhngzaf1.isp.starlink.com, confirming Starlink customer infrastructure association. The network role is classified as "Firewalled / No Services" with no open ports detected during service scanning. TLS certificates, HTTP titles, and server banners were not present.
Neighborhood Analysis
The /24 subnet (74.244.197.0/24) contains 6 sibling IPs with 0% abuse density. Risk distribution shows all neighboring addresses as low risk (0-25 risk scores), with no high or medium-risk neighbors detected. This indicates a clean subnet environment.
Relationship Graph
The IP maintains relationships with:
- Same Network: SS-2296
- DNS Associations: customer.jhngzaf1.isp.starlink.com (duplicate entries in relationship graph)
Historical Observations
Fifteen signal observations were recorded. Ownership and geolocation data remained consistent throughout the observation window. No significant changes in threat signals, service patterns, or network classification were detected across the observation period.
Control Plane and Routing
Route stability was flagged as false with 0 route changes in the past 30 days. Origin ASN 14593 shows minimal operator score (0.2174). DNSSEC validation was confirmed as valid with CAA records present.
Recommended Actions
No specific security actions or firewall rules were recommended due to the low-risk profile. The address presents no immediate threat to network infrastructure and appears to be legitimate Starlink customer infrastructure.
Analysis Conclusion: This IP address represents low-risk Starlink customer infrastructure with no malicious activity indicators. SOC teams may monitor but no blocking or mitigation actions are warranted at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | SpaceX Services, Inc. |
| ASN | AS14593 |
| Network Name | SS-2296 |
| CIDR Block | 74.244.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | customer.jhngzaf1.isp.starlink.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | customer.jhngzaf1.isp.starlink.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS14593 |
| Network Prefix | 74.244.196.0/23 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 13% | 1 | 2 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 1 |
| geolocation | 23% | 2 | 2 |
| Overall | 14% | 9 | 11 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-16 10:37:01 UTC |
| Last Seen | 2026-09-04 16:57:53 UTC |
| Profile Built | 2026-09-04 17:10:09 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 29 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 74.244.197.117
Who owns the IP address 74.244.197.117?
74.244.197.117 is registered to SpaceX Services, Inc.. The address falls within the 74.244.0.0/15 network block. Registration is held at ARIN.
Where is 74.244.197.117 located?
Geolocation data places 74.244.197.117 in Harare, Harare, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 74.244.197.117 malicious or safe?
74.244.197.117 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 74.244.197.117?
The reverse DNS (PTR) record for 74.244.197.117 is customer.jhngzaf1.isp.starlink.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.