# IP Intelligence Briefing: 189.218.22.138
## Executive Summary
The IP address 189.218.22.138 is associated with low-risk classification (risk score 15) and shows no active threat indicators. The address belongs to a residential/client infrastructure block owned by Television Internacional, S.A. de C.V. (ASN 11888) within the 189.218.16.0/20 block in Reynosa, Mexico. No malicious activity was observed during analysis.
## Ownership and Network Classification
- Organization: Television Internacional, S.A. de C.V. (Televisa)
- ASN: 11888
- Network Block: 189.218.16.0 - 189.218.31.255 (189.218.16.0/20)
- RIR: LACNIC (Latin America)
- Classification: Firewalled / No Services
- Network Role: Residential/Client infrastructure (not provider, CDN, VPN, proxy, or hosting)
## Geolocation
- Country: Mexico (MX)
- Region: Nuevo León
- City: Reynosa
- Coordinates: 23.63°N, -102.55°W
- Accuracy Radius: 1200km
- Note: ICMP validation failed; geo-validation distance: 8825.2km
## DNS Resolution
- PTR Record: 189.218.22.138-clientes-izzi.mx
- Forward Resolution: 189.218.22.138-clientes-izzi.mx
- Domain: 138-clientes-izzi.mx
- Email Authentication: SPF/DMARC not configured
- Forward Hostnames: 1 (confirms residential client designation)
## Threat Assessment
- Risk Score: 15 (Low Risk)
- Abuse Confidence: None
- Blacklist Status: Listed on 1 of 8 DNSBL feeds
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Known Campaigns: None
- Threat Persistence: No observed persistence
## Service Exposure
- Open Ports: None detected
- TLS Certificate: Not present
- HTTP Services: None active
- Banner Grab: Unable to resolve
## Control Plane
- BGP Prefix: 189.218.20.0/22
- Origin ASN: 11888
- Route Stability: Unstable (isRouteStable: false)
- DNSSEC Valid: Yes
- RPKI State: Not verified
- Route Changes (30d): 0
## Neighborhood Analysis
- /24 Subnet: 189.218.22.138/24
- Abuse Density: 0
- Threat Siblings: 0
- High-Risk Neighbors: 0
- Classification: None inherited
## Historical Observations
Sixteen signal observations recorded as of 2026-07-25:
- Geolocation Signals: Consistent Mexico attribution (confidence: 0.52)
- Ownership Signals: No ownership changes detected (confidence: 0.85)
- Traceroute Signals: ICMP blocked (confidence: 0.50)
- Network Role Signals: No services detected (confidence: 0.30)
- Operator Score: 0.1304 (Minimal)
- Threat Observation Count: 0
## Recommended Security Actions
No recommended firewall or mitigation actions. The IP address exhibits low-risk characteristics consistent with residential client infrastructure. Standard traffic monitoring is sufficient.
---
*Intelligence generated via IPDebrief platform. Data sources: RDAP, BGP, DNS, threat feeds, and active probes.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Television Internacional, S.A. de C.V. |
| ASN | AS11888 |
| Network Name | 189.218.16.0 - 189.218.31.255 |
| CIDR Block | 189.218.16.0/20 |
| RIR | LACNIC |
| Country | MX |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 189.218.22.138-clientes-izzi.mx |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 189.218.22.138-clientes-izzi.mx |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS11888 |
| Network Prefix | 189.218.20.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 12% | 2 | 2 |
| routing | 8% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 17% | 2 | 3 |
| Overall | 12% | 9 | 12 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-09 19:40:21 UTC |
| Last Seen | 2026-08-30 12:19:34 UTC |
| Profile Built | 2026-08-29 08:14:25 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 189.218.22.138
Who owns the IP address 189.218.22.138?
189.218.22.138 is registered to Television Internacional, S.A. de C.V.. The address falls within the 189.218.16.0/20 network block. Registration is held at LACNIC.
Where is 189.218.22.138 located?
Geolocation data places 189.218.22.138 in Ramos Arizpe, COA, Mexico. The local time zone is America/Mexico_City. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 189.218.22.138 malicious or safe?
189.218.22.138 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 189.218.22.138?
The reverse DNS (PTR) record for 189.218.22.138 is 189.218.22.138-clientes-izzi.mx. This hostname is not forward-confirmed, so it should be treated as a weak signal.