asn.dev

Autonomous system

AS11519 Banco Mercantil del Norte S.A., Institucion de Banca Multiple, Grupo Financiero Banorte

Unclassified RIPE

IPv4 addresses 2.31K 8 prefixes
IPv6 prefixes 0 counted as prefixes, not addresses
Countries 1 mostly MX
Exchanges 0 recorded by PCH
Upstreams 4 0 downstream
Flagged prefixes 1 see address space

Summary

Banorte (Banco Mercantil del Norte)

Mexico · AI-generated

enterprise legacy

This AS is held by Banco Mercantil del Norte S.A., the banking arm of Grupo Financiero Banorte, one of the largest financial groups in Mexico. It carries the group's own corporate and banking network.

What it's used for

  • Enterprise connectivity for a bank: branch and data-centre links, online and mobile banking front ends, ATM and payment-network interconnects, and the partner circuits a retail bank depends on.
  • RIS sees 9 announced IPv4 prefixes totalling 2,304 addresses, no IPv6, and 4 observed BGP neighbours. Every announcement is a /24. This is a multihomed end site with a modest, tightly controlled address footprint, which is what regulated financial networks tend to look like: they multihome for availability, not to move traffic for anyone else.

Notable

  • The prefix registrants split between two names, and that split is the most informative thing in the evidence. Most blocks register to Banco Mercantil del Norte itself, but 200.10.247.0/24 and 200.10.248.0/24 register to Casa de Bolsa Banorte, Grupo Financiero Banorte — the group's brokerage house. Two different legal entities announcing from one AS looks like third-party space until you read the names: both are Banorte subsidiaries. This is intra-group registration, the ordinary residue of a financial group whose bank and brokerage were allocated addresses separately.
  • The one address that answers in reverse DNS resolves under gfnorte.com.mx, Grupo Financiero Banorte's own domain, which corroborates the group reading.

Interesting

  • The inventory mixes LACNIC-era 200.x and 207.248.x space with a 192.100.234.0/24 from the old Class C swamp, a reminder that Mexican networks of this age often hold blocks issued before LACNIC existed.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.

Transit providers

4 upstream, 0 downstream and 4 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS8151UNINET240
AS32787Akamai Technologies, Inc.180
AS11172Alestra, S. de R.L. de C.V.95
AS32098Transtelco Inc22

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-16, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 8 prefixes · 2.31K addresses IPv6 0 prefixes

CountryNamePrefixes
MXMexico8

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS11519
Registry name
11519
Registrant
Banco Mercantil del Norte S.A., Institucion de Banca Multiple, Grupo Financiero Banorte
Abuse contact
admnic@banorte.com
Registered
1998-09-16
Last changed
2009-09-16
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
0% valid · 0 valid, 9 with no ROA
ROAs
0 authorising AS11519
ASPA
no ASPA record
IRR
100% registered · 9 of 9 announcements
Route objects
14 naming AS11519

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,783 prefixes, as published 2026-10-17. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check