Mexico (MX) Threat Intelligence

MX

Mexico has 44,718 malicious IP addresses with 1,424,419 abuse reports. Top threat categories include suspicious activity, severe abuse, ssh bruteforce, moderate threat, high threat. Top attacking networks: UNINET (19,297 IPs), None (3,910 IPs), TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V. (2,871 IPs). Data collected since 2023-11-07, last activity 2026-08-15.

Threat Assessment: Mexico shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, ssh bruteforce. The majority of threats originate from networks operated by UNINET and None.

Total Reports
1,424,419
Unique IPs
44,718
First Seen
2023-11-07
Last Activity
2026-08-15

Top Threat Categories

Suspicious Activity 33,664
Severe Abuse 4,392
Ssh Bruteforce 1,814
Moderate Threat 1,539
High Threat 1,047

Top Attacking Networks

AS8151 UNINET
19,297 IPs
AS0 None
3,910 IPs
AS17072 TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V.
2,871 IPs

Most Reported IPs in Mexico

200.77.172.159 661 reports
187.174.238.116 660 reports
187.141.71.166 656 reports
189.194.140.170 650 reports
177.229.197.38 646 reports

Access this data via API

Get Mexico threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/MX

View full API documentation

See how we classify and verify threats →

Check any IP from Mexico

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS8151 Intelligence AS0 Intelligence AS17072 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...