Japan (JP) Threat Intelligence

JP

Japan has 87,975 malicious IP addresses with 1,493,725 abuse reports. Top threat categories include ssh bruteforce, web attack, generic bruteforce, rdp bruteforce, web scanner. Top attacking networks: BEKKOAME INTERNET INC. (17,032 IPs), None (11,212 IPs), KDDI CORPORATION (6,464 IPs). Data collected since 2022-10-25, last activity 2026-04-16.

Threat Assessment: Japan shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are ssh bruteforce, web attack, generic bruteforce. The majority of threats originate from networks operated by BEKKOAME INTERNET INC. and None.

Total Reports
1,493,725
Unique IPs
87,975
First Seen
2022-10-25
Last Activity
2026-04-16

Top Threat Categories

Ssh Bruteforce 1,185
Web Attack 442
Generic Bruteforce 123
Rdp Bruteforce 20
Web Scanner 13

Top Attacking Networks

AS4686 BEKKOAME INTERNET INC.
17,032 IPs
AS0 None
11,212 IPs
AS2516 KDDI CORPORATION
6,464 IPs

Most Reported IPs in Japan

160.251.101.169 277 reports
150.95.157.171 272 reports
118.193.61.170 264 reports
111.238.174.6 264 reports
152.32.144.167 263 reports

Access this data via API

Get Japan threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/JP

View full API documentation

See how we classify and verify threats →

Check any IP from Japan

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS4686 Intelligence AS0 Intelligence AS2516 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...