138.84.41.220📋 Copy

# IP Intelligence Briefing: 138.84.41.220/32

Date: 2024-01-15

Analyst: IPDebrief Intelligence Team

Classification: Low Risk - Residential Infrastructure

---

## Executive Summary

IP 138.84.41.220 is a low-risk residential infrastructure address belonging to Starlink (ASN 14593). The IP exhibits minimal threat indicators with no active malicious campaigns, blacklisting concerns, or network abuse patterns. Recommended action: Monitor but no immediate blocking required.

---

## Technical Profile

Risk Assessment:

• Overall Risk Score: 25/100 (Low)
• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• Operator Score: 0.2174 (Minimal)

Network Attribution:

• Organization: Starlink Colombia S.A.S.
• ASN: 14593
• BGP Prefix: 138.84.40.0/23
• RIR: ARIN
• CIDR Block: 138.84.41.0/24

Geolocation:

• Country: Chile (CL) / Colombia (CO) - Multiple signal sources
• City: Bogota
• Region: SA (South America)
• Coordinates: -33.44° / -70.64°
• Timezone: America/Santiago

---

## DNS Analysis

PTR Record Resolution:

• Forward Hostnames: customer.bgtacol1.isp.starlink.com
• Forward Resolution Confirmed: No
• Hosted Domain Count: 0
• Email Authentication: SPF and DMARC records present

DNSBL Status:

• Listed on 1 of 8 DNSBL lists
• Total DNSBL Lists Checked: 8

---

## Network Services Assessment

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Service Purpose: Firewalled / No Services
• No active web services or application layer protocols exposed

---

## Threat Intelligence

Threat Indicators:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Proxy: No
• CDN: No
• Cloud Infrastructure: No
• VPN: No
• Residential: Yes

Campaign Correlation:

• Known Campaigns: None
• Certificate Matches: 0
• Banner Matches: 0
• Correlated IPs: 0

Abuse Metrics:

• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Threat Observation Count: 0
• Persistently Malicious: No

---

## Neighborhood Analysis (138.84.41.0/24)

Subnet Health:

• Total Siblings: 8
• Abuse Density: 0 (Clean)
• Classification: Low Risk
• Inherited Risk: 0

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 8

Neighbor Sample:

• 138.84.41.33, .46, .78, .86, .142, .173, .203, .244
• Authority Score: 50 (Consistent across neighbors)
• Risk Scores: Mixed 0-25 range

---

## Temporal Analysis

Signal History:

• Total Observations: 13
• Recent Activity: Multiple signals observed 2026-07-30
• Ownership Changes: 0
• Threat Persistence Days: 0

Ownership Stability:

• Current Org: Starlink Colombia S.A.S.
• Abuse Contact: starlink-admin@spacex.com
• Registration: Consistent with provider infrastructure

---

## Relationship Graph

Identified Relationships:

• DNS Association: customer.bgtacol1.isp.starlink.com (3 entries)

No organizational, certificate, or subnet relationships detected beyond DNS associations.

---

## Recommended Actions

Firewall/Security Rules:

• No specific blocking recommendations
• Risk score (25) below typical threshold for automated blocking
• Standard monitoring protocols recommended

SOC Analyst Guidance:

• Treat as benign residential/ISP infrastructure
• No immediate threat indicators present
• Monitor for any changes in threat profile over time
• No correlation with known malicious campaigns

---

Conclusion: IP 138.84.41.220 represents standard Starlink residential infrastructure with minimal security risk. The address shows no evidence of malicious activity, abuse, or threat participation. No immediate defensive action required.

Report Generated: IPDebrief Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.