IP Intelligence Authority Platform
New IP addresses on October 20, 2026
Daily threat report · UTC day
IPDebrief first observed 4,967 new IP addresses on October 20, 2026. 2,065 were analysed, and 10.4% of those scored high risk. The largest share came from United States (64.5%).
- New addresses
- 4,967
- Analysed
- 2,065
- High risk
- 214 · 10.4%
- Moderate risk
- 148
- IPv6
- 17
Risk and network type
214 high risk148 moderate1,703 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 339 | 16.4% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| United States (US) | 1,332 | 64.5% | 151 |
| United Kingdom (GB) | 110 | 5.3% | 7 |
| Brazil (BR) | 67 | 3.2% | 8 |
| France (FR) | 31 | 1.5% | 1 |
| Germany (DE) | 28 | 1.4% | 5 |
| Ireland (IE) | 24 | 1.2% | 1 |
| Canada (CA) | 22 | 1.1% | 2 |
| India (IN) | 22 | 1.1% | 3 |
| United Arab Emirates (AE) | 20 | 1% | 0 |
| Netherlands (NL) | 19 | 0.9% | 4 |
| Italy (IT) | 18 | 0.9% | 0 |
| Spain (ES) | 16 | 0.8% | 1 |
| Sweden (SE) | 16 | 0.8% | 3 |
| South Africa (ZA) | 16 | 0.8% | 0 |
| Argentina (AR) | 14 | 0.7% | 2 |
| Mexico (MX) | 13 | 0.6% | 0 |
| Turkey (TR) | 13 | 0.6% | 1 |
| Austria (AT) | 11 | 0.5% | 0 |
| Bangladesh (BD) | 11 | 0.5% | 1 |
| Venezuela (VE) | 11 | 0.5% | 1 |
| Pakistan (PK) | 10 | 0.5% | 0 |
| Russia (RU) | 10 | 0.5% | 1 |
| Vietnam (VN) | 10 | 0.5% | 0 |
| Singapore (SG) | 9 | 0.4% | 1 |
| Australia (AU) | 8 | 0.4% | 3 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS16509 Amazon Data Services Northern Virginia | 292 | 14.1% | 59 |
| AS14618 Amazon Data Services Northern Virginia | 139 | 6.7% | 46 |
| AS15169 Google LLC | 127 | 6.2% | 0 |
| AS8075 Divya Quamara | 104 | 5% | 2 |
| AS20940 Akamai Technologies, Inc. | 91 | 4.4% | 0 |
| AS7922 Comcast Cable Communications, Inc. | 63 | 3.1% | 0 |
| AS13335 Cloudflare, Inc. | 50 | 2.4% | 0 |
| AS32934 meta-mnt | 41 | 2% | 0 |
| AS174 IRT-DATAUTAMA-ID | 31 | 1.5% | 0 |
| AS11426 Charter Communications Inc | 22 | 1.1% | 0 |
| AS701 Verizon Business | 21 | 1% | 0 |
| AS1299 Arelion Sweden AB | 20 | 1% | 0 |
| AS3356 Level 3 Parent, LLC | 18 | 0.9% | 0 |
| AS21928 T-Mobile USA, Inc. | 18 | 0.9% | 0 |
| AS212238 Private Customer | 16 | 0.8% | 0 |
| AS6453 AS8297-MNT | 12 | 0.6% | 2 |
| AS11427 Charter Communications Inc | 12 | 0.6% | 0 |
| AS1267 MNT-IUNET | 11 | 0.5% | 0 |
| AS3257 GTT | 11 | 0.5% | 0 |
| AS6128 Optimum Online (Cablevision Systems) | 11 | 0.5% | 0 |
| AS7843 Charter Communications Inc | 11 | 0.5% | 0 |
| AS9002 BEGET-MNT | 11 | 0.5% | 0 |
| AS16625 Akamai Technologies, Inc. | 11 | 0.5% | 4 |
| AS25369 HYDRA-MNT | 11 | 0.5% | 0 |
| AS2856 BT CENTRAL PLUS - OPERATIONAL SUPPORT | 10 | 0.5% | 0 |
Highest-risk new addresses
- 100.26.116.158
- 100.48.117.56
- 100.50.102.159
- 100.50.245.249
- 100.56.79.161
- 103.200.15.125
- 103.47.67.157
- 103.58.74.70
- 104.195.220.200
- 104.71.183.131
- 111.119.38.127
- 114.79.130.190
- 125.253.89.147
- 128.116.31.11
- 128.116.56.11
- 130.0.25.64
- 131.153.169.147
- 134.224.240.222
- 134.224.4.134
- 134.224.4.136
- 134.224.4.137
- 134.224.4.148
- 134.224.4.150
- 134.224.4.242
- 134.224.4.245
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← October 19, 2026 · October 2026 report · All reports · October 21, 2026 → · Markdown