United States (US) Threat Intelligence

US

United States has 1,489,069 malicious IP addresses with 43,287,581 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, professional threat. Top attacking networks: DigitalOcean, LLC (131,490 IPs), Google LLC (127,015 IPs), Microsoft Corporation (33,772 IPs). Data collected since 2022-09-04, last activity 2026-10-05.

Threat Assessment: United States is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by DigitalOcean, LLC and Google LLC.

Total Reports
43,287,581
Unique IPs
1,489,069
First Seen
2022-09-04
Last Activity
2026-10-05

Top Threat Categories

Tcp Scan 6,971,921
Suspicious Activity 3,296,842
High Threat 2,519,252
Malware Distribution 1,047,866
Professional Threat 302,799

Top Attacking Networks

AS14061 DigitalOcean, LLC
131,490 IPs
AS396982 Google LLC
127,015 IPs
AS8075 Microsoft Corporation
33,772 IPs

Most Reported IPs in United States

185.199.111.133 5,369 reports
185.199.108.133 5,364 reports
185.199.110.133 5,363 reports
185.199.109.133 5,350 reports
71.6.199.23 1,657 reports

Access this data via API

Get United States threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/US

View full API documentation

See how we classify and verify threats →

Check any IP from United States

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS14061 Intelligence AS396982 Intelligence AS8075 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...