189.203.28.174
# INTELLIGENCE BRIEFING: 189.203.28.174/32
Date: 2026-07-25
Classification: Low Risk / Residential Endpoint
## EXECUTIVE SUMMARY
The IP address 189.203.28.174 is identified as a low-risk residential endpoint operated by TotalPlay Telecomunicaciones, S.A.P.I. DE C.V. (ASN 17072). No threat indicators, blacklisting, or malicious activity patterns detected. The IP resolves to a dynamic residential hostname and exhibits stable ownership characteristics.
## OWNERSHIP & INFRASTRUCTURE
- Organization: TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V.
- Network Block: 189.203.0.0/16
- ASN: 17072
- Registry: LACNIC (Mexico)
- Network Role: Residential Endpoint
- Connection Type: Residential (non-datacenter)
## GEOLOCATION
- Country: Mexico (MX)
- Region: Veracruz
- City: Veracruz
- Coordinates: 23.63°N, 102.55°W
- Geo Accuracy: 1200 km radius
- Geo Validation: Multi-source consensus achieved
## THREAT INTELLIGENCE
- Risk Score: 0 (Low Risk)
- Abuse Confidence Score: None
- Blacklist Count: 0
- Known Campaigns: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
## NETWORK SERVICES
- Open Ports: None detected
- TLS Certificates: None
- HTTP Services: None detected
- Banner Grabbing: No server banners observed
## DNS RESOLUTION
- PTR Record: fixed-189-203-28-174.totalplay.net
- Forward Resolution: Confirmed
- DNSSEC: Valid
- Hosted Domains: 0
## OBSERVATION HISTORY
- Total Observations: 15
- Most Recent: 2026-07-25 13:19:19 UTC
- Ownership Changes: 0
- Threat Persistence Days: 0
- Status: Not persistently malicious
## NETWORK NEIGHBORHOOD (189.203.28.0/24)
- Subnet Abuse Density: 0%
- Neighbor Count: 0
- Active Siblings: 0
- Threat Siblings: 0
- Inherited Risk: 0
## RELATIONSHIP GRAPH
- DNS Associations: fixed-189-203-28-174.totalplay.net (repeated)
- Network Associations: 189.203.0.0/16 (repeated)
- External Relationships: None detected
## RECOMMENDED ACTIONS
No security actions or firewall rules recommended. The IP exhibits a benign residential profile with no threat indicators.
Analyst Notes: This IP represents a standard residential connection from a major Mexican ISP. No defensive actions required at this time. Monitor for any changes in risk profile or emergence of threat indicators.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V. |
| ASN | AS17072 |
| Network Name | 189.203.0.0 - 189.203.255.255 |
| CIDR Block | 189.203.0.0/16 |
| RIR | LACNIC |
| Country | MX |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | fixed-189-203-28-174.totalplay.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | fixed-189-203-28-174.totalplay.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS17072 |
| Network Prefix | 189.203.28.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 8% | 2 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-09 13:32:00 UTC |
| Last Seen | 2026-08-26 22:22:08 UTC |
| Profile Built | 2026-08-29 07:17:57 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 189.203.28.174
Who owns the IP address 189.203.28.174?
189.203.28.174 is registered to TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V.. The address falls within the 189.203.0.0/16 network block. Registration is held at LACNIC.
Where is 189.203.28.174 located?
Geolocation data places 189.203.28.174 in Veracruz, Veracruz, Mexico. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 189.203.28.174 malicious or safe?
189.203.28.174 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 189.203.28.174?
The reverse DNS (PTR) record for 189.203.28.174 is fixed-189-203-28-174.totalplay.net. This hostname is forward-confirmed, meaning it resolves back to the same address.
Is 189.203.28.174 a VPN, proxy, or data center address?
189.203.28.174 is classified as a residential network based on network ownership and behavioural analysis.