138.84.35.92
# IP Intelligence Briefing: 138.84.35.92
Classification: Low Risk — Legitimate Starlink Infrastructure
Analysis Date: July 25, 2026
Analyst: IPDebrief Intelligence Unit
---
## Executive Summary
IP 138.84.35.92 is a low-risk address belonging to Starlink Chile SpA (ASN 14593). The address shows no malicious indicators, maintains stable operational characteristics, and represents legitimate telecommunications infrastructure. No immediate threat action required.
---
## Network Ownership & Classification
| Attribute | Value |
|---|---|
| **Organization** | Starlink Chile SpA |
| **ASN** | 14593 |
| **CIDR Block** | 138.84.35.0/24 |
| **RIR** | ARIN |
| **Geolocation** | Chile (CL), Santiago Metropolitan Region |
| **Network Role** | Telecommunications/ISP Infrastructure |
The IP is part of the Starlink satellite internet infrastructure deployment in Chile, operating under the 138.84.32.0/22 BGP prefix with stable routing characteristics.
---
## Risk Assessment
| Metric | Value | Assessment |
|---|---|---|
| **Risk Score** | 25/100 | Low Risk |
| **Provider Score** | 0 | Legitimate |
| **Authority Score** | 0 | Legitimate |
| **Abuse Confidence** | Null | No Abuse |
| **Blacklist Count** | 0 | Clean |
| **DNSBL Listed** | 1/8 | Minimal |
| **Is Tor Exit** | false | N/A |
| **Is Known Attacker** | false | Clean |
| **Is Spam Source** | false | Clean |
| **Persistently Malicious** | false | Clean |
---
## Network Services & DNS
| Attribute | Value |
|---|---|
| **PTR Hostname** | customer.sntochl1.isp.starlink.com |
| **Forward Resolution** | customer.sntochl1.isp.starlink.com |
| **Open Ports** | None detected (firewalled) |
| **TLS Certificate** | N/A |
| **HTTP Services** | None |
| **Service Purpose** | Firewalled / No Services |
| **DNSSEC Valid** | Yes |
| **CAA Records** | Present |
| **Operator Score** | 0.2174 (Minimal) |
The address shows no active services or open ports, consistent with backend infrastructure. DNSSEC validation is enabled.
---
## Threat Indicators
| Indicator | Status |
|---|---|
| **Known Campaigns** | None |
| **Threat Feeds** | None |
| **Campaign Likelihood** | N/A |
| **Cert Matches** | 0 |
| **Banner Matches** | 0 |
| **Correlated IPs** | 0 |
No threat indicators detected across all monitored sources.
---
## Observation History
Total Observations: 14 signals recorded
Most Recent: 2026-07-25 08:39:24 UTC
Key Historical Signals:
- Ownership confirmed: Starlink Chile SpA (ARIN)
- ASN detection: 14593
- Geolocation: Chile (CL), Region Metropolitana
- Operator score: Minimal (0.2174)
- No ownership changes detected
The IP demonstrates stable operational characteristics with no degradation in security posture over the observation period.
---
## Network Relationships
| Relationship Type | Target |
|---|---|
| **Same Network** | 138.84.35.0 - 138.84.35.255 |
| **DNS Association** | customer.sntochl1.isp.starlink.com (4 instances) |
Neighborhood Analysis (138.84.35.0/24):
- Abuse Density: 0 (Clean)
- Total Neighbors: 1
- Risk Distribution: 1 Low Risk
- Neighbor: 138.84.35.229 (Risk Score: 25, Authority Score: 50)
The /24 subnet exhibits minimal abuse density with no high or medium-risk neighbors.
---
## Security Recommendations
| Action | Recommendation |
|---|---|
| **Firewall Rules** | No blocking required — legitimate infrastructure |
| **Monitoring** | Standard monitoring sufficient |
| **Threat Hunting** | No special indicators |
| **Whitelisting** | Consider for Starlink corporate/infrastructure traffic |
| **Alert Thresholds** | Standard thresholds appropriate |
---
## Conclusion
IP 138.84.35.92 represents legitimate Starlink Chile infrastructure with no malicious indicators. The address is properly classified, maintains stable operational characteristics, and operates within a clean neighborhood. No security actions required beyond standard monitoring. SOC teams may whitelist this address for expected Starlink traffic patterns.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Starlink Chile SpA |
| ASN | AS14593 |
| Network Name | 138.84.35.0 - 138.84.35.255 |
| CIDR Block | 138.84.35.0/24 |
| RIR | ARIN |
| Country | CL |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | customer.sntochl1.isp.starlink.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | customer.sntochl1.isp.starlink.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS14593 |
| Network Prefix | 138.84.32.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-09 07:23:13 UTC |
| Last Seen | 2026-10-06 09:55:18 UTC |
| Profile Built | 2026-08-26 19:00:43 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 138.84.35.92
Who owns the IP address 138.84.35.92?
138.84.35.92 is registered to Starlink Chile SpA. The address falls within the 138.84.35.0/24 network block. Registration is held at ARIN.
Where is 138.84.35.92 located?
Geolocation data places 138.84.35.92 in Santiago, Santiago Metropolitan, Chile. The local time zone is America/Santiago. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 138.84.35.92 malicious or safe?
138.84.35.92 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 138.84.35.92?
The reverse DNS (PTR) record for 138.84.35.92 is customer.sntochl1.isp.starlink.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.