United States (US) Threat Intelligence

US

United States has 1,419,499 malicious IP addresses with 37,327,324 abuse reports. Top threat categories include suspicious activity, professional threat, severe abuse, tcp scan, moderate threat. Top attacking networks: DigitalOcean, LLC (108,855 IPs), Google LLC (100,228 IPs), Amazon.com, Inc. (30,101 IPs). Data collected since 2022-09-04, last activity 2026-09-06.

Threat Assessment: United States is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are suspicious activity, professional threat, severe abuse. The majority of threats originate from networks operated by DigitalOcean, LLC and Google LLC.

Total Reports
37,327,324
Unique IPs
1,419,499
First Seen
2022-09-04
Last Activity
2026-09-06

Top Threat Categories

Suspicious Activity 529,463
Professional Threat 302,799
Severe Abuse 239,906
Tcp Scan 82,982
Moderate Threat 42,063

Top Attacking Networks

AS14061 DigitalOcean, LLC
108,855 IPs
AS396982 Google LLC
100,228 IPs
AS14618 Amazon.com, Inc.
30,101 IPs

Most Reported IPs in United States

185.199.111.133 5,306 reports
185.199.108.133 5,306 reports
185.199.109.133 5,306 reports
185.199.110.133 5,305 reports
31.57.184.154 1,188 reports

Access this data via API

Get United States threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/US

View full API documentation

See how we classify and verify threats →

Check any IP from United States

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS14061 Intelligence AS396982 Intelligence AS14618 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...