189.219.115.65📋 Copy

# IP Intelligence Briefing: 189.219.115.65/32

Classification: Low Risk

Date: 2026-07-23

Prepared For: SOC Operations Team

---

## Executive Summary

IP address 189.219.115.65 is a low-risk residential customer endpoint assigned to Television Internacional, S.A. de C.V. (ASN 265594) in Ciudad Benito Juárez, Nuevo León, Mexico. The IP demonstrates minimal threat activity with zero known campaigns, no open services, and a single DNSBL listing among eight checked sources. Current risk score is 25 (Low Risk).

---

## Technical Profile

Ownership & Network Assignment

• Organization: Television Internacional, S.A. de C.V.
• ASN: 265594
• CIDR Block: 189.219.112.0/21 (189.219.112.0 - 189.219.119.255)
• Geolocation: Mexico (MX), Nuevo León, Ciudad Benito Juárez
• Coordinates: 25.65°N, -100.17°W
• Geolocation Consensus: True (1 source)
• Geolocation Plausibility: False (validation flag)

Network Classification

• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None
• HTTP Banner: None
• Infrastructure Type: Not provider, CDN, cloud, VPN, proxy, or hosting service

DNS Analysis

• PTR Record: 189.219.115.65-clientes-izzi.mx
• Forward Resolution: 65-clientes-izzi.mx (not confirmed)
• DNSSEC Validation: Valid
• Email Authentication: SPF, DMARC, and TXT records not configured
• Forward Resolution Count: 1

---

## Threat Indicators

Current Status: Low Risk

• Risk Score: 25
• Blacklist Count: 0
• DNSBL Listings: 1 out of 8 checked sources
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not available

Campaign Correlation:

• Campaign Likelihood: Not applicable
• Certificate Matches: 0
• Banner Matches: 0
• Correlated IPs: 0

---

## Historical Observations (15 signals)

Recent activity shows:

• Geolocation: Inferred as Mexico with 52% confidence (observed 2026-07-23)
• DNSSEC: Valid records confirmed (90% confidence)
• DNS Records: Zone 65.115.219.189.in-addr.arpa confirmed (85% confidence)
• Blacklist Status: Listed on 1 high-severity source (85% confidence)
• Ownership Stability: No ownership changes detected

No persistent malicious behavior observed. Threat persistence days: 0.

---

## Relationship Analysis

Network Associations:

• Same Network: 189.219.112.0 - 189.219.119.255 (Television Internacional)

DNS Associations:

• Hostname: 189.219.115.65-clientes-izzi.mx

Subnet Analysis (189.219.115.0/24):

• Neighbor Count: 0
• Abuse Density: 0
• Risk Distribution: High 0, Medium 0, Low 0
• Active Threat Siblings: 0

---

## Control Plane Data

• Origin ASN: 265594
• BGP Prefix: 189.219.112.0/22
• Route Stability: Unstable (false)
• RPKI State: Not available
• IRR Consistency: Not available
• Route Changes (30d): 0
• DNSSEC Valid: True
• CAA Records: Not present
• Hop Count: 13
• Last Hop RTT: 69.3ms

---

## Security Actions & Recommendations

Current Action Status: No automated firewall rules recommended due to low risk classification.

Manual Assessment Notes:

• IP is assigned to a customer network ("clientes-izzi.mx" suggests residential customer endpoint)
• No active services detected; endpoints appear properly firewalled
• Single DNSBL listing warrants monitoring but does not indicate active threat
• Network belongs to legitimate cable/internet service provider (Television Internacional)

---

## Intelligence Conclusion

IP 189.219.115.65 represents a low-risk residential customer endpoint with no active threat indicators. The single DNSBL listing may require contextual review but does not independently justify blocking. No immediate defensive actions required. Monitor for service enumeration attempts or changes in reputation status.

Recommended Action: Continue monitoring; no immediate firewall intervention required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.