United States (US) Threat Intelligence

US

United States has 1,372,312 malicious IP addresses with 34,543,439 abuse reports. Top threat categories include suspicious activity, professional threat, severe abuse, moderate threat, high threat. Top attacking networks: DigitalOcean, LLC (106,120 IPs), Google LLC (96,623 IPs), Amazon.com, Inc. (29,885 IPs). Data collected since 2022-09-04, last activity 2026-08-20.

Threat Assessment: United States is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are suspicious activity, professional threat, severe abuse. The majority of threats originate from networks operated by DigitalOcean, LLC and Google LLC.

Total Reports
34,543,439
Unique IPs
1,372,312
First Seen
2022-09-04
Last Activity
2026-08-20

Top Threat Categories

Suspicious Activity 529,463
Professional Threat 302,799
Severe Abuse 239,906
Moderate Threat 42,063
High Threat 33,288

Top Attacking Networks

AS14061 DigitalOcean, LLC
106,120 IPs
AS396982 Google LLC
96,623 IPs
AS14618 Amazon.com, Inc.
29,885 IPs

Most Reported IPs in United States

185.199.111.133 5,285 reports
185.199.108.133 5,285 reports
185.199.109.133 5,285 reports
185.199.110.133 5,281 reports
92.118.39.62 1,062 reports

Access this data via API

Get United States threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/US

View full API documentation

See how we classify and verify threats →

Check any IP from United States

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS14061 Intelligence AS396982 Intelligence AS14618 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...