Mexico (MX) Threat Intelligence

MX

Mexico has 55,879 malicious IP addresses with 1,587,036 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, intrusion attempt. Top attacking networks: UNINET (24,046 IPs), TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V. (4,173 IPs), Mega Cable, S.A. de C.V. (2,976 IPs). Data collected since 2023-11-07, last activity 2026-10-04.

Threat Assessment: Mexico shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by UNINET and TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V..

Total Reports
1,587,036
Unique IPs
55,879
First Seen
2023-11-07
Last Activity
2026-10-04

Top Threat Categories

Tcp Scan 114,985
Suspicious Activity 84,850
High Threat 32,844
Malware Distribution 29,871
Intrusion Attempt 7,042

Top Attacking Networks

AS8151 UNINET
24,046 IPs
AS17072 TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V.
4,173 IPs
AS13999 Mega Cable, S.A. de C.V.
2,976 IPs

Most Reported IPs in Mexico

200.77.172.159 1,373 reports
187.141.71.166 1,369 reports
187.174.238.116 1,362 reports
189.194.140.170 1,357 reports
201.149.53.243 1,351 reports

Access this data via API

Get Mexico threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/MX

View full API documentation

See how we classify and verify threats →

Check any IP from Mexico

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS8151 Intelligence AS17072 Intelligence AS13999 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...