Japan (JP) Threat Intelligence

JP

Japan has 125,934 malicious IP addresses with 3,172,006 abuse reports. Top threat categories include tcp scan, high threat, suspicious activity, professional threat, malware distribution. Top attacking networks: BEKKOAME INTERNET INC. (17,135 IPs), KDDI CORPORATION (6,929 IPs), NTT DOCOMO BUSINESS,Inc. (4,749 IPs). Data collected since 2022-10-25, last activity 2026-10-13.

Threat Assessment: Japan is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are tcp scan, high threat, suspicious activity. The majority of threats originate from networks operated by BEKKOAME INTERNET INC. and KDDI CORPORATION.

Total Reports
3,172,006
Unique IPs
125,934
First Seen
2022-10-25
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 483,624
High Threat 186,727
Suspicious Activity 184,714
Professional Threat 44,000
Malware Distribution 43,059

Top Attacking Networks

AS4686 BEKKOAME INTERNET INC.
17,135 IPs
AS2516 KDDI CORPORATION
6,929 IPs
AS4713 NTT DOCOMO BUSINESS,Inc.
4,749 IPs

Most Reported IPs in Japan

124.155.125.131 1,601 reports
111.238.174.6 1,574 reports
160.251.101.169 1,561 reports
160.251.182.78 1,445 reports
43.165.190.208 1,441 reports

Access this data via API

Get Japan threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/JP

View full API documentation

See how we classify and verify threats →

Check any IP from Japan

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS4686 Intelligence AS2516 Intelligence AS4713 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...