🇲🇽 Mexico: live cyber threat activity

Malicious IPs, malware and ransomware victims in Mexico.

265Malicious IPs listed#29 of 182 countries · 0.4% of the world
68New in the last 24hfirst seen by any feed
86Reported by 2+ feedsindependent sources agree
15Ransomware victimsposted in the last 30 days

View Mexico on the live map →All listed IPs in MexicoRansomware victims in Mexico

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C225
  2. Malware27
  3. Phishing0
  4. Attacker213

By state or region

  1. Mexico City73
  2. México32
  3. Querétaro19
  4. Jalisco15
  5. Puebla15
  6. Guanajuato13
  7. Baja California10
  8. Michoacán8
  9. Morelos7
  10. Nuevo León7
  11. Chiapas7
  12. Hidalgo7
  13. Sinaloa6
  14. Tlaxcala5
  15. Oaxaca5

By city

  1. Mexico City47
  2. Querétaro City9
  3. Naucalpan6
  4. Tijuana5
  5. Tlalnepantla5
  6. Miguel Hidalgo4
  7. Puebla City4
  8. Coyoacán3
  9. Morelia3
  10. San Simón de Guerrero3
  11. Iztapalapa3
  12. Gustavo Adolfo Madero3
  13. Guadalajara3
  14. Magdalena Contreras3
  15. Benito Juarez3

Networks hosting the most

NetworkIPs
AS8151 Uninet S.A. de C.V. 131
AS13999 Mega Cable, S.A. de C.V. 18
AS17072 TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V. 14
AS28458 IENTC S DE RL DE CV 10
AS22884 TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V. 10
AS28548 Cablevisión, S.A. de C.V. 8
AS11172 Alestra, S. de R.L. de C.V. 5
AS278 Universidad Nacional Autonoma de Mexico 4
AS14178 Megacable Comunicaciones de Mexico, S.A. de C.V. 4
AS272403 RAFAEL RIGOBERTO LOPEZ OROZCO 3
AS32098 Transtelco Inc 3
AS20473 The Constant Company, LLC 3
AS265551 TELEVISION POR CABLE TEPA S.A DE C.V 3
AS6503 Axtel, S.A.B. de C.V. 2
AS8075 Microsoft Corporation 2

Malware families served from Mexico

  1. DanaBot16
  2. Cookiesstealer2
  3. Loki2
  4. Crimsonrat1
  5. Coinhelper1
  6. Cerbu1
  7. Bundleinstaller1
  8. W97m1
  9. Stop1
  10. Gandcrab1
  11. Zard1
  12. Phorpiex1
  13. AsyncRAT1
  14. Dacic1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
216.238.85[.]59AttackerAttacking hostQuerétaro City, QuerétaroAS20473 The Constant Company, LLC1 feed2026-10-12 08:20
187.170.123[.]246AttackerAttacking hostMiguel Hidalgo, Mexico CityAS8151 Uninet S.A. de C.V.1 feed2026-10-12 08:10
189.216.43[.]2AttackerAttacking hostPuerto Escondido, MéxicoAS28548 Cablevisión, S.A. de C.V.1 feed2026-10-12 08:10
187.208.61[.]10AttackerAttacking hostAlborada Jaltenco, MéxicoAS8151 Uninet S.A. de C.V.1 feed2026-10-12 05:35
132.247.187[.]62AttackerOn multiple blocklistsCoyoacán, Mexico CityAS278 Universidad Nacional Autonoma de Mexico2 feeds2026-10-12 04:35
143.105.29[.]173AttackerAttacking hostMexico City, Mexico CityAS14593 Space Exploration Technologies Corporation2 feeds2026-10-12 04:35
170.239.148[.]92AttackerAttacking hostQuerétaro City, QuerétaroAS28458 IENTC S DE RL DE CV2 feeds2026-10-12 04:35
177.224.36[.]51AttackerAttacking hostLos Freseros, JaliscoAS13999 Mega Cable, S.A. de C.V.2 feeds2026-10-12 04:35
177.226.180[.]127AttackerAttacking hostCiudad López Mateos, MéxicoAS13999 Mega Cable, S.A. de C.V.2 feeds2026-10-12 04:35
187.149.141[.]48AttackerMalicious IPHeroica Ciudad de Tlaxiaco, OaxacaAS8151 Uninet S.A. de C.V.1 feed2026-10-12 04:35
187.154.96[.]215AttackerAttacking hostMiguel Hidalgo, TabascoAS8151 Uninet S.A. de C.V.3 feeds2026-10-12 04:35
187.170.154[.]56AttackerMalicious IPEl Mirasol, MéxicoAS8151 Uninet S.A. de C.V.1 feed2026-10-12 04:35
187.214.144[.]2AttackerAttacking hostHuitzilac, MorelosAS8151 Uninet S.A. de C.V.2 feeds2026-10-12 04:35
187.225.98[.]100AttackerMalicious IPMexico City, Mexico CityAS8151 Uninet S.A. de C.V.1 feed2026-10-12 04:35
187.230.181[.]53AttackerMalicious IPMiguel Hidalgo, Mexico CityAS8151 Uninet S.A. de C.V.1 feed2026-10-12 04:35
189.135.66[.]242AttackerAttacking hostYurécuaro, MichoacánAS8151 Uninet S.A. de C.V.2 feeds2026-10-12 04:35
189.139.38[.]7AttackerAttacking hostLa Trinidad, MéxicoAS8151 Uninet S.A. de C.V.2 feeds2026-10-12 04:35
189.142.25[.]4AttackerAttacking hostChicavasco, HidalgoAS8151 Uninet S.A. de C.V.2 feeds2026-10-12 04:35
189.174.215[.]93AttackerAttacking hostMexico City, Mexico CityAS8151 Uninet S.A. de C.V.2 feeds2026-10-12 04:35
189.176.45[.]163AttackerMalicious IPPlaya del Carmen, Quintana RooAS8151 Uninet S.A. de C.V.1 feed2026-10-12 04:35
189.190.143[.]229AttackerAttacking hostSan José Monte Chiquito, PueblaAS8151 Uninet S.A. de C.V.2 feeds2026-10-12 04:35
189.218.223[.]99AttackerAttacking hostMonclova, CoahuilaAS11888 Television Internacional, S.A. de C.V.2 feeds2026-10-12 04:35
189.222.81[.]236AttackerAttacking hostMexicali, Baja CaliforniaAS8151 Uninet S.A. de C.V.2 feeds2026-10-12 04:35
189.223.241[.]120AttackerMalicious IPTijuana, Baja CaliforniaAS8151 Uninet S.A. de C.V.1 feed2026-10-12 04:35
189.232.26[.]191AttackerAttacking hostManzana Primera Parte Alta, MéxicoAS8151 Uninet S.A. de C.V.2 feeds2026-10-12 04:35

See every listed IP in Mexico →

Ransomware victims in Mexico

15 posted in the last 30 days, 51 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-10-09 13:30Ladrillera MecanizadaarcusmediaManufacturing
2026-10-08 21:07MCM TelecomqilinTechnology
2026-10-05 07:30Grupo Industrial TaurolamashtuManufacturing
2026-10-03 05:54The Official Collegeof Architects of León (COAL)akiraProfessional Services
2026-10-02 14:59The Official College of Architects of León (COAL)akiraProfessional Services
2026-10-01 09:51LA PONDEROSAemperadorAgriculture and Food Production
2026-09-30 03:34Don HierrothegentlemenManufacturing
2026-09-28 08:33auromex.comsafepayManufacturing
2026-09-27 17:03XICOqilin—
2026-09-26 08:47Magnetos y RefaccionesthegentlemenManufacturing
2026-09-26 08:46Grupo MARSANthegentlemenManufacturing
2026-09-18 10:09Grupo JusteqilinOther
2026-09-17 15:29sym.com.mxsettraTechnology
2026-09-15 19:31laconcepcion.com.mxsafepayRetail & E-Commerce
2026-09-12 10:32www.tender.mxkrybitGovernment & Defense

All ransomware victims in Mexico →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →