The guy Carlos Torres Ferguson is indeed from Mexico (although he has Panamese roots as well).

In 2014 he used the ip address 201.141.142.53, which is a Cablevision ip address traceable to Mexico City
More recently (last year) he used the ip address 189.218.205.17, which is a Televison International ip address traceable to Monterrey

He is a Windows user, but he doesn't always use the newest versions. In 2014 he was on Windows 7, in 2016 he used Windows Vista
Carlos prefers using Chrome as a browser

I got hard evidence for all this, and I will publish it, but I don't want to further endanger the investigations so you must be a little patient. The guy is constantly leaving traces behind.