138.97.163.63📋 Copy

## IP Intelligence Briefing: 138.97.163.63/32

Executive Summary

IP address 138.97.163.63 is classified as Low Risk with a risk score of 25. The address is associated with CASAVISION, S.A., a Nicaraguan organization, and demonstrates no active malicious behavior. The IP is firewalled with no open services, showing minimal operational threat posture.

Ownership & Geolocation

• Organization: CASAVISION, S.A.
• Country: Nicaragua (NI)
• City/Region: Managua, Managua Department
• ASN: 263751
• BGP Prefix: 138.97.163.0/24
• Abuse Contact: alvaro.amador@casavision.com

Network Activity & Services

• Service Status: Firewalled / No Services
• Open Ports: None detected
• DNS Resolution: No forward/reverse resolution
• Email Configuration: No SPF/DMARC records found
• SSL/TLS: No certificates or HTTP services detected

Threat Indicators

• Threat Classification: Not a Tor exit, not a known attacker, not a spam source
• Blacklist Status: Listed on 1 DNSBL out of 8 total lists checked
• Malicious Behavior: No honeypot hits, no enumeration strikes, no WAF violations
• Campaign Association: No known threat campaigns or certificate matches

Subnet Analysis (138.97.163.0/24)

• Neighboring IPs: None detected
• Abuse Density: 0 (minimal subnet-wide abuse)
• Risk Distribution: No high-risk neighbors identified
• Inherited Risk: 0

Historical Observations

Nine observation signals recorded as of July 25, 2026. The most recent signals confirm:

• Consistent geolocation in Managua, Nicaragua
• Stable ownership by CASAVISION, S.A.
• Operator score of 0.1304 (Minimal threat operator classification)
• No ownership changes or persistent threat activity observed

Recommended Actions

No blocking or firewall rules recommended. The IP demonstrates a benign operational profile with no active threat indicators. Continue standard monitoring practices.

Threat Intelligence Narrative

The IP 138.97.163.63 represents a legitimate business infrastructure asset associated with a Nicaraguan organization. The address shows no evidence of malicious activity, command-and-control communications, or exploitation patterns. The absence of open services and firewalled status indicate proper security hardening. No correlating threat intelligence exists across relationships or neighborhood analysis. This IP should be classified as low-priority and require only routine traffic monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.