# IP Intelligence Briefing: 138.84.47.197/32
## Executive Summary
The IP address 138.84.47.197 is assigned to Starlink Internet Services Panama S.R.L. and presents a low-risk profile with minimal threat indicators. The address operates as a customer-facing endpoint with no active malicious activity detected.
## Ownership and Network Classification
- ASN: 14593 (Starlink Internet Services Panama S.R.L.)
- Organization: Starlink Internet Services Panama S.R.L.
- Network Block: 138.84.47.0/24
- RIR: ARIN
- Classification: Residential satellite internet infrastructure
## Geolocation Data
- Country: Chile (CL) / Panama (PA) - multiple geo sources
- City: Bella Vista
- Accuracy: 1000km radius
- Note: Discrepancy observed between geolocation sources (CL vs PA)
## Threat Assessment
- Risk Score: 25 (Low Risk)
- Reputation: Low Risk
- Abuse Confidence: Not elevated
- Known Threat Indicators: None
- Not a Tor exit node
- Not a known attacker
- Not a spam source
- Blacklist count: 0
- Campaign Association: No known campaigns
## Network Behavior and Services
- Services: Firewalled / No services detected
- Open Ports: None observed
- DNS Resolution: customer.bgtacol1.isp.starlink.com
- Forward Resolution: Confirmed single resolution to Starlink domain
- Email Authentication: SPF and DMARC records present
## Control Plane Analysis
- DNSBL Status: Listed on 1 of 8 DNSBL lists
- Operator Score: 0.2174 (Minimal)
- BGP Prefix: 138.84.46.0/23
- Route Stability: Unstable (false)
- DNSSEC: Valid
## Observation History
- Total Observations: 13 signals
- Recent Activity: Multiple observations recorded on 2026-07-25
- Signal Types Observed:
- Organization/AS information
- Geolocation data
- Control plane metrics
- Threat assessment signals
- Threat Persistence: 0 days
- Ownership Changes: 0
## Neighborhood Analysis (138.84.47.0/24)
- Abuse Density: 0
- High Risk Neighbors: 0
- Medium Risk Neighbors: 0
- Low Risk Neighbors: 0
- Total Neighbors: 0
- Active Threat Siblings: 0
## Relationship Graph
- DNS Associations: customer.bgtacol1.isp.starlink.com (multiple entries)
- Network Association: 138.84.47.0 - 138.84.47.255
## Recommended Actions
No immediate security actions required. The IP address demonstrates normal residential satellite internet behavior with no malicious indicators. Standard monitoring practices apply.
## SOC Analyst Notes
This IP belongs to Starlink's satellite internet infrastructure and is assigned to a residential customer endpoint. The low risk score and absence of threat indicators suggest this is legitimate customer traffic. The presence in Chile/Panama with a customer hostname pattern confirms residential use rather than hosting infrastructure. No firewall rules are recommended beyond standard network policies.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Starlink Internet Services Panama S.R.L. |
| ASN | AS14593 |
| Network Name | 138.84.47.0 - 138.84.47.255 |
| CIDR Block | 138.84.47.0/24 |
| RIR | ARIN |
| Country | PA |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | customer.bgtacol1.isp.starlink.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | customer.bgtacol1.isp.starlink.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS14593 |
| Network Prefix | 138.84.46.0/23 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-09 07:23:13 UTC |
| Last Seen | 2026-08-27 06:04:02 UTC |
| Profile Built | 2026-08-27 06:07:01 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 138.84.47.197
Who owns the IP address 138.84.47.197?
138.84.47.197 is registered to Starlink Internet Services Panama S.R.L.. The address falls within the 138.84.47.0/24 network block. Registration is held at ARIN.
Where is 138.84.47.197 located?
Geolocation data places 138.84.47.197 in Panama City, Provincia de Panamá, Chile. The local time zone is America/Santiago. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 138.84.47.197 malicious or safe?
138.84.47.197 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 138.84.47.197?
The reverse DNS (PTR) record for 138.84.47.197 is customer.bgtacol1.isp.starlink.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.