United States (US) Threat Intelligence

United States has 828,160 malicious IP addresses with 17,447,404 abuse reports. Top threat categories include ssh bruteforce, web attack, malware c2, generic bruteforce, mail bruteforce. Top attacking networks: DigitalOcean, LLC (56,585 IPs), DIGITALOCEAN-ASN (15,080 IPs), GOOGLE-CLOUD-PLATFORM (13,574 IPs). Data collected since 2022-09-04, last activity 2026-04-16.

Threat Assessment: United States is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are ssh bruteforce, web attack, malware c2. The majority of threats originate from networks operated by DigitalOcean, LLC and DIGITALOCEAN-ASN.