IP Report
187.166.187.128
Axtel, S.A.B. de C.V. · AS6503 · Mexico City (Zedec Santa Fe), Mexico
Score 0 of 100, in the minimal risk band. Bands run 0 to 19 minimal, 20 to 49 low, 50 to 79 medium, 80 to 100 high.
Its risk score of 0/100 is low — nothing in our data suggests this address needs special handling.
Detection signals
Not detected: Tor, VPN, Proxy, Datacenter, Hosting, Crawler
Summary
187.166.187.128 looks like an ordinary internet connection — the kind an ISP assigns to homes and businesses rather than to servers. Nothing in our data associates it with anonymization services or hosting infrastructure.
The address is announced by Axtel, S.A.B. de C.V. (AS6503) and geolocates to Mexico City (Zedec Santa Fe), Mexico City, Mexico.
Why this address scores 0
None of the signals we score — VPN infrastructure, proxy lists, Tor exit nodes, datacenter hosting, or abuse-feed listings — matched this address, and the score of 0/100 reflects that absence of evidence.
A low score is a statement about what we can see today, not a permanent clearance: addresses are re-evaluated on every check.
Observation history
This address has been looked up through Predax 3 times between February 11, 2026 and September 6, 2026.
Each lookup re-evaluates the address against current feeds, so the classification above reflects its most recent check, not a stale record.
Network & location
- ASN
- AS6503
- Country
- Mexico (MX)
- Provider
- Axtel, S.A.B. de C.V.
- Region
- Mexico City
- CIDR
- 187.166.0.0/15
- City
- Mexico City (Zedec Santa Fe)
- Network type
- isp
- First seen
- 2/11/2026, 10:58:45 AM
- Last seen
- 9/6/2026, 7:02:25 AM
- Times seen
- 3
Network context
We have observed 20 addresses on Axtel, S.A.B. de C.V. (AS6503); 0% of them carried a threat flag or a notable risk score when last checked.
That is a low share, typical of a general-purpose network whose addresses are mostly unremarkable.
What to do with this
If you run a site and this address showed up
Nothing in this report justifies blocking the address on its own.
If it shows up as blocked in your logs, the block came from behaviour — request rate, a firewall rule, repeated failed logins — not from the address’s reputation, so review that event rather than this page.
If you found this address in your logs
This address can be treated as an ordinary client connection; no special handling is indicated.
If it is misbehaving in your logs, the behaviour is the signal — a clean reputation does not preclude a compromised or abusive machine, it only means none of our feeds have caught it.
Loading map...
Detection sources
No risk signals triggered
This IP didn't match any of our VPN, proxy, Tor, datacenter, or crawler detectors.