IP Intelligence Authority Platform
New IP addresses on October 17, 2026
Daily threat report · UTC day
IPDebrief first observed 2,897 new IP addresses on October 17, 2026. 1,136 were analysed, and 11.4% of those scored high risk. The largest share came from United States (70.8%).
- New addresses
- 2,897
- Analysed
- 1,136
- High risk
- 129 · 11.4%
- Moderate risk
- 72
- IPv6
- 8
Risk and network type
129 high risk72 moderate935 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 236 | 20.8% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| United States (US) | 804 | 70.8% | 93 |
| Germany (DE) | 37 | 3.3% | 8 |
| South Korea (KR) | 35 | 3.1% | 4 |
| Ireland (IE) | 27 | 2.4% | 3 |
| United Arab Emirates (AE) | 24 | 2.1% | 0 |
| United Kingdom (GB) | 23 | 2% | 0 |
| France (FR) | 18 | 1.6% | 1 |
| Sweden (SE) | 16 | 1.4% | 1 |
| India (IN) | 12 | 1.1% | 1 |
| Netherlands (NL) | 12 | 1.1% | 6 |
| Singapore (SG) | 12 | 1.1% | 1 |
| South Africa (ZA) | 12 | 1.1% | 1 |
| Vietnam (VN) | 9 | 0.8% | 0 |
| Brazil (BR) | 8 | 0.7% | 0 |
| Australia (AU) | 7 | 0.6% | 0 |
| Finland (FI) | 7 | 0.6% | 0 |
| Japan (JP) | 6 | 0.5% | 2 |
| Benin (BJ) | 4 | 0.4% | 0 |
| Hong Kong (HK) | 4 | 0.4% | 2 |
| Argentina (AR) | 3 | 0.3% | 1 |
| Canada (CA) | 3 | 0.3% | 0 |
| Switzerland (CH) | 3 | 0.3% | 2 |
| Thailand (TH) | 3 | 0.3% | 0 |
| Chile (CL) | 2 | 0.2% | 2 |
| Colombia (CO) | 2 | 0.2% | 1 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS16509 Amazon Data Services Northern Virginia | 303 | 26.7% | 40 |
| AS13335 Cloudflare, Inc. | 164 | 14.4% | 0 |
| AS14618 Amazon Data Services Northern Virginia | 153 | 13.5% | 28 |
| AS8075 Divya Quamara | 43 | 3.8% | 1 |
| AS20940 Akamai Technologies, Inc. | 36 | 3.2% | 0 |
| AS4766 IP Manager | 35 | 3.1% | 3 |
| AS137409 VPN Consumer Los Angeles, United States | 23 | 2% | 0 |
| AS22697 Roblox | 22 | 1.9% | 12 |
| AS24940 Hetzner Online GmbH - Contact Role | 17 | 1.5% | 0 |
| AS16625 Akamai Technologies, Inc. | 14 | 1.2% | 3 |
| AS396982 Google LLC | 14 | 1.2% | 0 |
| AS174 IRT-DATAUTAMA-ID | 11 | 1% | 0 |
| AS32934 meta-mnt | 11 | 1% | 0 |
| AS1299 Arelion Sweden AB | 10 | 0.9% | 0 |
| AS15169 Google LLC | 9 | 0.8% | 0 |
| AS16276 OVH SAS | 8 | 0.7% | 1 |
| AS25369 HYDRA-MNT | 7 | 0.6% | 0 |
| AS7578 Cogent Communications, LLC | 6 | 0.5% | 0 |
| AS7922 Comcast Cable Communications, Inc. | 6 | 0.5% | 0 |
| AS12025 Hyland Software Inc. | 6 | 0.5% | 0 |
| AS19551 Incapsula Inc | 6 | 0.5% | 6 |
| AS36351 IP Admin | 6 | 0.5% | 4 |
| AS3356 Level 3 Parent, LLC | 5 | 0.4% | 0 |
| AS6181 Altafiber | 5 | 0.4% | 0 |
| AS7552 IRT-VNNIC-AP | 5 | 0.4% | 0 |
Highest-risk new addresses
- 100.42.215.153
- 100.61.225.20
- 104.36.195.5
- 108.132.191.237
- 109.205.211.103
- 116.51.26.246
- 128.116.102.11
- 128.116.115.11
- 128.116.127.11
- 128.116.13.11
- 128.116.14.11
- 128.116.30.11
- 128.116.32.11
- 128.116.47.11
- 128.116.48.11
- 128.116.50.11
- 128.116.63.11
- 128.116.95.11
- 13.209.182.0
- 13.56.22.203
- 130.35.238.92
- 130.35.92.244
- 131.0.55.122
- 131.125.164.79
- 131.125.182.79
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← October 16, 2026 · October 2026 report · All reports · October 18, 2026 → · Markdown