Mexico (MX) Threat Intelligence

MX

Mexico has 24,118 malicious IP addresses with 1,085,154 abuse reports. Top threat categories include suspicious activity, severe abuse, moderate threat, high threat, ssh bruteforce. Top attacking networks: UNINET (10,683 IPs), None (2,291 IPs), HUAWEI CLOUDS (919 IPs). Data collected since 2023-11-07, last activity 2026-04-05.

Threat Assessment: Mexico shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, moderate threat. The majority of threats originate from networks operated by UNINET and None.

Total Reports
1,085,154
Unique IPs
24,118
First Seen
2023-11-07
Last Activity
2026-04-05

Top Threat Categories

Suspicious Activity 33,664
Severe Abuse 4,392
Moderate Threat 1,539
High Threat 1,047
Ssh Bruteforce 966

Top Attacking Networks

AS8151 UNINET
10,683 IPs
AS0 None
2,291 IPs
AS136907 HUAWEI CLOUDS
919 IPs

Most Reported IPs in Mexico

187.210.77.100 318 reports
186.96.145.241 288 reports
177.229.197.38 265 reports
186.96.151.198 264 reports
189.217.130.86 262 reports

Access this data via API

Get Mexico threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/MX

View full API documentation

See how we classify and verify threats →

Check any IP from Mexico

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS8151 Intelligence AS0 Intelligence AS136907 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...