United States (US) Threat Intelligence

US

United States has 908,487 malicious IP addresses with 18,077,401 abuse reports. Top threat categories include suspicious activity, professional threat, severe abuse, moderate threat, high threat. Top attacking networks: DigitalOcean, LLC (45,512 IPs), GOOGLE-CLOUD-PLATFORM (24,967 IPs), DIGITALOCEAN-ASN (23,585 IPs). Data collected since 2022-09-04, last activity 2026-04-05.

Threat Assessment: United States is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are suspicious activity, professional threat, severe abuse. The majority of threats originate from networks operated by DigitalOcean, LLC and GOOGLE-CLOUD-PLATFORM.

Total Reports
18,077,401
Unique IPs
908,487
First Seen
2022-09-04
Last Activity
2026-04-05

Top Threat Categories

Suspicious Activity 529,463
Professional Threat 302,799
Severe Abuse 239,906
Moderate Threat 42,063
High Threat 33,288

Top Attacking Networks

AS14061 DigitalOcean, LLC
45,512 IPs
AS396982 GOOGLE-CLOUD-PLATFORM
24,967 IPs
AS14061 DIGITALOCEAN-ASN
23,585 IPs

Most Reported IPs in United States

178.16.55.189 6,601 reports
92.118.39.62 1,904 reports
185.199.109.133 1,777 reports
185.199.111.133 1,762 reports
185.199.110.133 1,053 reports

Access this data via API

Get United States threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/US

View full API documentation

See how we classify and verify threats →

Check any IP from United States

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS14061 Intelligence AS396982 Intelligence AS14061 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...