189.239.154.221
# IP INTELLIGENCE BRIEFING
Target: 189.239.154.221/32
Classification: Moderate Risk (Score: 40)
Generated: Based on IPDebrief Intelligence Data
---
## EXECUTIVE SUMMARY
IP address 189.239.154.221 is a mobile network endpoint belonging to UNINET (ASN 8151) in Mexico City. The IP shows moderate risk (40) with no active threat indicators, no known campaign associations, and minimal operational activity. The address is currently firewalled with no accessible services.
---
## OWNERSHIP & NETWORK ATTRIBUTES
- Organization: UNINET (189.224.0.0/12)
- ASN: 8151 (LACNIC RIR)
- Geolocation: Mexico City, Miguel Hidalgo, Mexico
- Mobile Carrier: Telcel (America Movil S.A.B. de C.V.)
- Connection Type: LTE/5G Mobile
- Network Role: Mobile endpoint, residential mobile classification
---
## THREAT ASSESSMENT
| Indicator | Status | Details |
|---|---|---|
| Risk Score | 40/100 | Moderate Risk |
| Known Attacker | No | False positive |
| Spam Source | No | False positive |
| Tor Exit Node | No | Not detected |
| Blacklist Count | 0 | Clean |
| DNSBL Listings | 2/8 | Minor listings |
| Operator Score | 0.1304 | Minimal |
| Active Ports | None | Firewalled/No services |
---
## OBSERVATION HISTORY
The IP has been observed 14 times with recent activity on July 30, 2026. Key historical signals include:
- Routing: Transit routing observed through Cogent Communications (Chicago, US)
- Organization: Consistent UNINET/LACNIC ownership attribution
- Geolocation: Mexican national network infrastructure
- Operator Classification: Minimal threat operator profile
No persistent malicious activity detected. Threat persistence days: 0.
---
## RELATIONSHIP MAPPING
Four relationship entities identified:
1. Network: 189.224.0.0 - 189.239.255.255 (Same network)
2. DNS: acceso-189.239.154.221.prod-infinitum.com.mx (Multiple associations)
No organizational, certificate, or infrastructure relationships detected.
---
## SUBNET ANALYSIS
- Subnet: 189.239.154.221/24
- Neighbor Count: 0
- Abuse Density: 0.0
- Risk Distribution: No high/medium/low risk neighbors detected
The immediate /24 subnet shows no correlated abuse activity.
---
## RECOMMENDED ACTIONS
Based on risk profile and operational characteristics:
1. Allow: Permitted traffic (low threat profile, legitimate mobile endpoint)
2. Monitor: DNSBL listings indicate minor reputation concerns
3. No Block Required: No active threat indicators present
Firewall Rule Recommendation: No restrictive rules required. Standard allow policies applicable.
---
## CONCLUSION
The target IP represents a legitimate Mexican mobile network endpoint with no active malicious behavior. The moderate risk score reflects operator classification rather than observed threats. No immediate defensive action required. Standard monitoring sufficient.
Assessment Date: Current data reflects observations as of most recent scan cycle.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | UNINET |
| ASN | AS8151 |
| Network Name | 189.224.0.0 - 189.239.255.255 |
| CIDR Block | 189.224.0.0/12 |
| RIR | LACNIC |
| Country | MX |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | acceso-189.239.154.221.prod-infinitum.com.mx |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | acceso-189.239.154.221.prod-infinitum.com.mx |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-26 21:28:05 UTC |
| Last Seen | 2026-07-31 07:31:22 UTC |
| Profile Built | 2026-07-30 09:52:48 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 24 |
Full dossier details are available via our API.