IP Intelligence Authority Platform
New IP addresses on October 16, 2026
Daily threat report · UTC day
IPDebrief first observed 3,166 new IP addresses on October 16, 2026. 1,133 were analysed, and 12% of those scored high risk. The largest share came from United States (67.9%).
- New addresses
- 3,166
- Analysed
- 1,133
- High risk
- 136 · 12%
- Moderate risk
- 75
- IPv6
- 2
Risk and network type
136 high risk75 moderate922 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 261 | 23% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| United States (US) | 769 | 67.9% | 84 |
| United Kingdom (GB) | 42 | 3.7% | 3 |
| Sweden (SE) | 27 | 2.4% | 6 |
| Germany (DE) | 24 | 2.1% | 3 |
| Ireland (IE) | 21 | 1.9% | 5 |
| Singapore (SG) | 19 | 1.7% | 4 |
| France (FR) | 18 | 1.6% | 0 |
| Japan (JP) | 17 | 1.5% | 5 |
| Brazil (BR) | 12 | 1.1% | 0 |
| Canada (CA) | 11 | 1% | 0 |
| Austria (AT) | 8 | 0.7% | 0 |
| Colombia (CO) | 8 | 0.7% | 7 |
| South Africa (ZA) | 8 | 0.7% | 0 |
| Israel (IL) | 7 | 0.6% | 0 |
| South Korea (KR) | 7 | 0.6% | 0 |
| Netherlands (NL) | 7 | 0.6% | 2 |
| Philippines (PH) | 7 | 0.6% | 0 |
| Australia (AU) | 6 | 0.5% | 1 |
| Switzerland (CH) | 6 | 0.5% | 3 |
| Thailand (TH) | 6 | 0.5% | 0 |
| Qatar (QA) | 5 | 0.4% | 0 |
| United Arab Emirates (AE) | 4 | 0.4% | 1 |
| Czechia (CZ) | 4 | 0.4% | 0 |
| Denmark (DK) | 4 | 0.4% | 0 |
| Hong Kong (HK) | 4 | 0.4% | 0 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS16509 Amazon Data Services Northern Virginia | 329 | 29% | 29 |
| AS14618 Amazon Data Services Northern Virginia | 122 | 10.8% | 31 |
| AS13335 Cloudflare, Inc. | 115 | 10.2% | 0 |
| AS8075 Divya Quamara | 60 | 5.3% | 3 |
| AS15169 Google LLC | 35 | 3.1% | 1 |
| AS396982 Google LLC | 29 | 2.6% | 2 |
| AS7922 Comcast Cable Communications, Inc. | 22 | 1.9% | 0 |
| AS20940 Akamai Technologies, Inc. | 21 | 1.9% | 0 |
| AS3356 Level 3 Parent, LLC | 16 | 1.4% | 0 |
| AS174 IRT-DATAUTAMA-ID | 15 | 1.3% | 0 |
| AS1299 Arelion Sweden AB | 13 | 1.1% | 0 |
| AS16625 Akamai Technologies, Inc. | 8 | 0.7% | 4 |
| AS30633 Leaseweb USA, Inc. | 8 | 0.7% | 0 |
| AS3257 GTT | 7 | 0.6% | 0 |
| AS6453 AS8297-MNT | 7 | 0.6% | 0 |
| AS22697 Roblox | 6 | 0.5% | 3 |
| AS31898 Oracle Corporation | 6 | 0.5% | 0 |
| AS45102 Alibaba Cloud - JP | 6 | 0.5% | 0 |
| AS62371 Proton NOC | 6 | 0.5% | 3 |
| AS19318 Internet Utilities NA LLC | 5 | 0.4% | 0 |
| AS23520 Columbus Networks USA, Inc. | 5 | 0.4% | 5 |
| AS37424 Ernest ISSA | 5 | 0.4% | 0 |
| AS8447 AS8447-MNT | 4 | 0.4% | 0 |
| AS16276 OVH SAS | 4 | 0.4% | 0 |
| AS16637 Dijon Mannie | 4 | 0.4% | 0 |
Highest-risk new addresses
- 100.23.194.5
- 100.61.70.112
- 103.151.46.212
- 103.218.27.148
- 108.133.197.181
- 109.105.102.67
- 116.51.22.181
- 119.110.125.218
- 128.116.2.11
- 128.116.21.11
- 128.116.97.11
- 13.193.249.212
- 13.196.108.217
- 134.0.218.78
- 134.224.4.28
- 134.224.4.40
- 141.98.252.53
- 148.251.40.113
- 148.62.41.97
- 148.62.65.3
- 161.69.236.197
- 163.181.60.208
- 168.228.192.190
- 168.228.194.138
- 168.228.194.26
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← October 15, 2026 · October 2026 report · All reports · October 17, 2026 → · Markdown