Mexico (MX) Threat Intelligence

MX

Mexico has 21,333 malicious IP addresses with 1,051,000 abuse reports. Top threat categories include ssh bruteforce, generic bruteforce, web attack, repeat offender, rdp bruteforce. Top attacking networks: UNINET (8,478 IPs), None (2,297 IPs), Mega Cable, S.A. de C.V. (765 IPs). Data collected since 2023-11-07, last activity 2026-04-16.

Threat Assessment: Mexico shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are ssh bruteforce, generic bruteforce, web attack. The majority of threats originate from networks operated by UNINET and None.

Total Reports
1,051,000
Unique IPs
21,333
First Seen
2023-11-07
Last Activity
2026-04-16

Top Threat Categories

Ssh Bruteforce 883
Generic Bruteforce 115
Web Attack 14
Repeat Offender 12
Rdp Bruteforce 7

Top Attacking Networks

AS8151 UNINET
8,478 IPs
AS0 None
2,297 IPs
AS13999 Mega Cable, S.A. de C.V.
765 IPs

Most Reported IPs in Mexico

187.210.77.100 314 reports
189.217.130.86 273 reports
200.77.172.159 265 reports
207.249.96.38 263 reports
187.174.238.116 257 reports

Access this data via API

Get Mexico threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/MX

View full API documentation

See how we classify and verify threats →

Check any IP from Mexico

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS8151 Intelligence AS0 Intelligence AS13999 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...