Mexico (MX) Threat Intelligence

MX

Mexico has 57,838 malicious IP addresses with 1,613,074 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, intrusion attempt. Top attacking networks: UNINET (25,014 IPs), TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V. (4,492 IPs), Mega Cable, S.A. de C.V. (3,192 IPs). Data collected since 2023-11-07, last activity 2026-10-13.

Threat Assessment: Mexico shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by UNINET and TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V..

Total Reports
1,613,074
Unique IPs
57,838
First Seen
2023-11-07
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 120,578
Suspicious Activity 88,564
High Threat 45,247
Malware Distribution 30,380
Intrusion Attempt 7,562

Top Attacking Networks

AS8151 UNINET
25,014 IPs
AS17072 TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V.
4,492 IPs
AS13999 Mega Cable, S.A. de C.V.
3,192 IPs

Most Reported IPs in Mexico

200.77.172.159 1,606 reports
187.141.71.166 1,604 reports
187.174.238.116 1,591 reports
189.194.140.170 1,589 reports
177.229.197.38 1,585 reports

Access this data via API

Get Mexico threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/MX

View full API documentation

See how we classify and verify threats →

Check any IP from Mexico

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS8151 Intelligence AS17072 Intelligence AS13999 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...