# 138.0.231.27 — IP Intelligence Summary

138.0.231.27 is an IPv4 address operated by CATELSA (AS263725), geolocated to San Pedro Sula, Honduras. As of October 23, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/138.0.231.27
- Last updated: 2026-10-23

## Ownership

- Organization: CATELSA
- Network name: 138.0.231.0 - 138.0.231.255
- Allocated block: 138.0.231.0/24
- ASN: AS263725 (https://ipdebrief.com/asn/263725)
- Regional registry: ARIN

## Location

- City: San Pedro Sula
- Region: Cortés Department
- Country: Honduras
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

Intelligence Briefing: 138.0.231.27/32

The IP address was classified as High Risk with a risk score of 70. Ownership data indicated the address belonged to ASN 263725 (CATELSA) within the 138.0.231.0/24 block. Geolocation data placed the host in San Pedro Sula, Honduras, though a contradiction existed between claimed coordinates and RTT physics measurements.

The IP was classified as Campaign Infrastructure with a high likelihood of malicious intent. Correlation analysis identified 10 associated IPs. Network scanning revealed no open ports or active services, indicating a firewalled configuration. The address appeared on one of eight DNSBLs.

The recommended action was to block traffic at the firewall level due to critical severity. The rationale provided was a high risk score with strong threat evidence.

## Nearby addresses

- 138.0.231.60 (https://ipdebrief.com/138.0.231.60)

## Addresses sharing infrastructure

- 45.166.93.115 — Same abuse contact (https://ipdebrief.com/45.166.93.115)
- 45.166.93.194 — Same abuse contact (https://ipdebrief.com/45.166.93.194)
- 45.182.22.149 — Same abuse contact (https://ipdebrief.com/45.182.22.149)
- 45.182.22.171 — Same abuse contact (https://ipdebrief.com/45.182.22.171)
- 168.228.192.35 — Same abuse contact (https://ipdebrief.com/168.228.192.35)
- 168.228.192.190 — Same abuse contact (https://ipdebrief.com/168.228.192.190)
- 168.228.194.26 — Same abuse contact (https://ipdebrief.com/168.228.194.26)
- 168.228.194.138 — Same abuse contact (https://ipdebrief.com/168.228.194.138)
- 168.228.194.170 — Same abuse contact (https://ipdebrief.com/168.228.194.170)
- 168.228.195.106 — Same abuse contact (https://ipdebrief.com/168.228.195.106)
- 168.228.195.241 — Same abuse contact (https://ipdebrief.com/168.228.195.241)
- 177.10.185.107 — Same abuse contact (https://ipdebrief.com/177.10.185.107)

---

Source: IPDebrief, "138.0.231.27 IP intelligence", https://ipdebrief.com/138.0.231.27, updated 2026-10-23. Assessments are probabilistic.