United States (US) Threat Intelligence

US

United States has 1,514,264 malicious IP addresses with 44,793,268 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, professional threat. Top attacking networks: DigitalOcean, LLC (138,290 IPs), Google LLC (130,485 IPs), Microsoft Corporation (33,998 IPs). Data collected since 2022-09-04, last activity 2026-10-13.

Threat Assessment: United States is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by DigitalOcean, LLC and Google LLC.

Total Reports
44,793,268
Unique IPs
1,514,264
First Seen
2022-09-04
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 7,324,319
Suspicious Activity 3,527,811
High Threat 3,275,389
Malware Distribution 1,104,504
Professional Threat 302,799

Top Attacking Networks

AS14061 DigitalOcean, LLC
138,290 IPs
AS396982 Google LLC
130,485 IPs
AS8075 Microsoft Corporation
33,998 IPs

Most Reported IPs in United States

185.199.108.133 18,289 reports
185.199.111.133 18,289 reports
185.199.109.133 18,286 reports
185.199.110.133 17,593 reports
71.6.199.23 1,932 reports

Access this data via API

Get United States threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/US

View full API documentation

See how we classify and verify threats →

Check any IP from United States

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS14061 Intelligence AS396982 Intelligence AS8075 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...