Mexico (MX) Threat Intelligence

MX

Mexico has 39,227 malicious IP addresses with 1,345,775 abuse reports. Top threat categories include suspicious activity, severe abuse, ssh bruteforce, moderate threat, high threat. Top attacking networks: UNINET (16,419 IPs), None (3,905 IPs), TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V. (1,987 IPs). Data collected since 2023-11-07, last activity 2026-07-13.

Threat Assessment: Mexico shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, ssh bruteforce. The majority of threats originate from networks operated by UNINET and None.

Total Reports
1,345,775
Unique IPs
39,227
First Seen
2023-11-07
Last Activity
2026-07-13

Top Threat Categories

Suspicious Activity 33,664
Severe Abuse 4,392
Ssh Bruteforce 1,542
Moderate Threat 1,539
High Threat 1,047

Top Attacking Networks

AS8151 UNINET
16,419 IPs
AS0 None
3,905 IPs
AS17072 TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V.
1,987 IPs

Most Reported IPs in Mexico

187.174.238.116 458 reports
187.190.35.163 458 reports
200.77.172.159 456 reports
187.141.71.166 454 reports
189.194.140.170 452 reports

Access this data via API

Get Mexico threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/MX

View full API documentation

See how we classify and verify threats →

Check any IP from Mexico

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS8151 Intelligence AS0 Intelligence AS17072 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...