138.84.41.46📋 Copy

## INTELLIGENCE BRIEFING: 138.84.41.46/32

Date: July 29, 2026

Classification: LOW RISK / INFRASTRUCTURE

Intel Level: SOC-DEFENSIVE

---

**EXECUTIVE SUMMARY**

IP 138.84.41.46 is a Starlink infrastructure endpoint located in Bogota, Colombia (ASN 14593). The IP presents a low risk profile (Score: 25) with no active threat indicators, no open services, and is firewalled. While geolocation sources show minor consensus variance, the IP demonstrates legitimate residential satellite internet infrastructure characteristics.

---

**INFRASTRUCTURE PROFILE**

• Organization: Starlink Colombia S.A.S.
• ASN: 14593
• CIDR Block: 138.84.41.0 - 138.84.41.255
• Geolocation: Bogota, Colombia (CL)
• DNS: customer.bgtacol1.isp.starlink.com
• Service State: Firewalled / No Services (no open ports)
• Network Role: Residential/Consumer Satellite Infrastructure

---

**THREAT ASSESSMENT**

Current Risk Score: 25 (LOW)

Positive Indicators:

• No known attacker or spam source designation
• Zero blacklist entries
• No Tor exit node activity
• DNSSEC validation: Enabled
• Has CAA record (domain validation present)
• Operator Score: 0.2174 (Minimal)

Neutral/Observations:

• One DNSBL listing across 8 total lists (requires context verification)
• Route stability flagged as false despite zero 30-day route changes
• GeoPlausible flag: false (multiple geolocation sources disagree)

---

**NEIGHBORHOOD ANALYSIS**

Subnet: 138.84.41.0/24

• Abuse Density: 0.1111 (Low)
• Classification: mostly_clean
• Total Siblings: 9
• Active Siblings: 1
• Threat Siblings: 1

Adjacent IP Risk Distribution:

• 7 IPs: Low risk (Score 0-25)
• 1 IP: Risk Score 25
• 0 IPs: High/medium risk

---

**OBSERVATION HISTORY**

Total Observations: 15

Recent signals indicate:

• ASN resolution: ASNone (inconsistent with primary profile)
• Geolocation variance: US (AlienVault OTX) vs Colombia (primary sources)
• Abuse density maintained at 0.1111
• Classification stable: mostly_clean
• No threat persistence patterns observed

---

**RELATIONSHIP MAPPING**

• DNS Association: customer.bgtacol1.isp.starlink.com (repeated entries)
• Network Association: 138.84.41.0 - 138.84.41.255 (Starlink Colombia)

---

**RECOMMENDED ACTIONS**

Classification: MONITOR / LOW PRIORITY

1. Firewall Policy: Permit traffic (legitimate infrastructure); no blocking recommended

2. SIEM Rules: If logging this IP, tag as "Starlink Infrastructure"

3. Monitoring: Track for any service activation (currently firewalled)

4. Exception Handling: Investigate only if associated with anomalous traffic patterns

Rationale: This IP represents legitimate Starlink residential infrastructure. The one threat sibling in the /24 should be investigated separately. No immediate defensive action required.

---

Report Generated: IPDebrief Intelligence Platform

Analyst: Automated Intelligence System

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.