Autonomous system
AS11519 Banco Mercantil del Norte S.A., Institucion de Banca Multiple, Grupo Financiero Banorte
Unclassified RIPE
Summary
Banorte (Banco Mercantil del Norte)
enterprise legacy
This AS is held by Banco Mercantil del Norte S.A., the banking arm of Grupo Financiero Banorte, one of the largest financial groups in Mexico. It carries the group's own corporate and banking network.
What it's used for
- Enterprise connectivity for a bank: branch and data-centre links, online and mobile banking front ends, ATM and payment-network interconnects, and the partner circuits a retail bank depends on.
- RIS sees 9 announced IPv4 prefixes totalling 2,304 addresses, no IPv6, and 4 observed BGP neighbours. Every announcement is a /24. This is a multihomed end site with a modest, tightly controlled address footprint, which is what regulated financial networks tend to look like: they multihome for availability, not to move traffic for anyone else.
Notable
- The prefix registrants split between two names, and that split is the most informative thing in the evidence. Most blocks register to Banco Mercantil del Norte itself, but
200.10.247.0/24and200.10.248.0/24register to Casa de Bolsa Banorte, Grupo Financiero Banorte — the group's brokerage house. Two different legal entities announcing from one AS looks like third-party space until you read the names: both are Banorte subsidiaries. This is intra-group registration, the ordinary residue of a financial group whose bank and brokerage were allocated addresses separately. - The one address that answers in reverse DNS resolves under
gfnorte.com.mx, Grupo Financiero Banorte's own domain, which corroborates the group reading.
Interesting
- The inventory mixes LACNIC-era
200.xand207.248.xspace with a192.100.234.0/24from the old Class C swamp, a reminder that Mexican networks of this age often hold blocks issued before LACNIC existed.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-16, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 8 prefixes · 2.31K addresses IPv6 0 prefixes
| Country | Name | Prefixes |
|---|---|---|
| MX | Mexico | 8 |
Registry
Allocation record
- Registry
- RIPE
- Handle
AS11519- Registry name
- 11519
- Registrant
- Banco Mercantil del Norte S.A., Institucion de Banca Multiple, Grupo Financiero Banorte
- Abuse contact
- admnic@banorte.com
- Registered
- 1998-09-16
- Last changed
- 2009-09-16
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 0% valid · 0 valid, 9 with no ROA
- ROAs
- 0 authorising AS11519
- ASPA
- no ASPA record
- IRR
- 100% registered · 9 of 9 announcements
- Route objects
- 14 naming AS11519
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,783 prefixes, as published 2026-10-17. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere