Mexico (MX) Threat Intelligence

MX

Mexico has 36,052 malicious IP addresses with 1,314,296 abuse reports. Top threat categories include suspicious activity, severe abuse, moderate threat, ssh bruteforce, high threat. Top attacking networks: UNINET (15,390 IPs), None (3,859 IPs), TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V. (1,671 IPs). Data collected since 2023-11-07, last activity 2026-07-05.

Threat Assessment: Mexico shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, moderate threat. The majority of threats originate from networks operated by UNINET and None.

Total Reports
1,314,296
Unique IPs
36,052
First Seen
2023-11-07
Last Activity
2026-07-05

Top Threat Categories

Suspicious Activity 33,664
Severe Abuse 4,392
Moderate Threat 1,539
Ssh Bruteforce 1,505
High Threat 1,047

Top Attacking Networks

AS8151 UNINET
15,390 IPs
AS0 None
3,859 IPs
AS17072 TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V.
1,671 IPs

Most Reported IPs in Mexico

187.190.35.163 408 reports
200.77.172.159 403 reports
187.174.238.116 402 reports
187.141.71.166 400 reports
45.134.9.27 399 reports

Access this data via API

Get Mexico threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/MX

View full API documentation

See how we classify and verify threats →

Check any IP from Mexico

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS8151 Intelligence AS0 Intelligence AS17072 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...