IP Intelligence Authority Platform
New IP addresses on October 18, 2026
Daily threat report · UTC day
IPDebrief first observed 3,414 new IP addresses on October 18, 2026. 1,283 were analysed, and 11.8% of those scored high risk. The largest share came from United States (54.2%).
- New addresses
- 3,414
- Analysed
- 1,283
- High risk
- 152 · 11.8%
- Moderate risk
- 89
- IPv6
- 23
Risk and network type
152 high risk89 moderate1,042 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 176 | 13.7% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| United States (US) | 695 | 54.2% | 93 |
| France (FR) | 55 | 4.3% | 3 |
| South Korea (KR) | 49 | 3.8% | 0 |
| Germany (DE) | 36 | 2.8% | 5 |
| United Kingdom (GB) | 34 | 2.7% | 1 |
| Netherlands (NL) | 26 | 2% | 4 |
| Sweden (SE) | 26 | 2% | 2 |
| Ireland (IE) | 23 | 1.8% | 5 |
| Japan (JP) | 17 | 1.3% | 3 |
| India (IN) | 16 | 1.2% | 1 |
| Vietnam (VN) | 16 | 1.2% | 0 |
| Canada (CA) | 14 | 1.1% | 2 |
| Turkey (TR) | 14 | 1.1% | 0 |
| South Africa (ZA) | 14 | 1.1% | 0 |
| Brazil (BR) | 13 | 1% | 0 |
| Kazakhstan (KZ) | 13 | 1% | 0 |
| Australia (AU) | 12 | 0.9% | 3 |
| Thailand (TH) | 12 | 0.9% | 0 |
| Indonesia (ID) | 11 | 0.9% | 5 |
| Bulgaria (BG) | 8 | 0.6% | 0 |
| Hungary (HU) | 8 | 0.6% | 0 |
| Spain (ES) | 6 | 0.5% | 0 |
| Israel (IL) | 6 | 0.5% | 0 |
| Italy (IT) | 6 | 0.5% | 1 |
| United Arab Emirates (AE) | 5 | 0.4% | 0 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS16509 Amazon Data Services Northern Virginia | 199 | 15.5% | 28 |
| AS20940 Akamai Technologies, Inc. | 82 | 6.4% | 0 |
| AS14618 Amazon Data Services Northern Virginia | 70 | 5.5% | 17 |
| AS8075 Divya Quamara | 48 | 3.7% | 10 |
| AS13335 Cloudflare, Inc. | 45 | 3.5% | 1 |
| AS32934 meta-mnt | 44 | 3.4% | 1 |
| AS4766 IP Manager | 40 | 3.1% | 0 |
| AS174 IRT-DATAUTAMA-ID | 17 | 1.3% | 0 |
| AS16276 OVH SAS | 17 | 1.3% | 1 |
| AS1299 Arelion Sweden AB | 16 | 1.2% | 0 |
| AS16625 Akamai Technologies, Inc. | 16 | 1.2% | 6 |
| AS7552 IRT-VNNIC-AP | 12 | 0.9% | 0 |
| AS9121 AS9121-MNT | 12 | 0.9% | 0 |
| AS3257 GTT | 11 | 0.9% | 0 |
| AS137409 VPN Consumer Los Angeles, United States | 10 | 0.8% | 0 |
| AS3356 Level 3 Parent, LLC | 9 | 0.7% | 0 |
| AS136557 IRT-HOST-AU | 9 | 0.7% | 3 |
| AS212238 Private Customer | 9 | 0.7% | 0 |
| AS6939 Hurricane Electric LLC | 8 | 0.6% | 0 |
| AS9198 KNIC-MNT | 8 | 0.6% | 0 |
| AS15169 Google LLC | 8 | 0.6% | 0 |
| AS25369 HYDRA-MNT | 8 | 0.6% | 0 |
| AS45430 AIS Network Management Center | 8 | 0.6% | 0 |
| AS6453 AS8297-MNT | 7 | 0.5% | 2 |
| AS24940 Hetzner Online GmbH - Contact Role | 7 | 0.5% | 0 |
Highest-risk new addresses
- 100.51.19.139
- 100.56.90.163
- 100.60.243.141
- 103.216.222.122
- 103.216.222.129
- 103.216.222.153
- 103.246.249.161
- 107.178.48.26
- 108.132.201.14
- 108.132.85.58
- 109.87.243.82
- 121.100.3.31
- 121.100.6.226
- 121.101.135.24
- 128.116.45.11
- 128.116.5.11
- 128.116.86.11
- 130.12.209.153
- 130.35.149.226
- 131.153.36.11
- 131.153.36.13
- 131.153.36.15
- 131.153.70.141
- 148.113.1.139
- 15.220.120.131
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← October 17, 2026 · October 2026 report · All reports · October 19, 2026 → · Markdown