IP Intelligence Authority Platform
New IP addresses on October 21, 2026
Daily threat report · UTC day
IPDebrief first observed 4,719 new IP addresses on October 21, 2026. 1,000 were analysed, and 16.5% of those scored high risk. The largest share came from United States (73.4%).
- New addresses
- 4,719
- Analysed
- 1,000
- High risk
- 165 · 16.5%
- Moderate risk
- 50
- IPv6
- 3
Risk and network type
165 high risk50 moderate785 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 174 | 17.4% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| United States (US) | 734 | 73.4% | 113 |
| United Kingdom (GB) | 35 | 3.5% | 11 |
| Netherlands (NL) | 19 | 1.9% | 4 |
| Germany (DE) | 18 | 1.8% | 1 |
| Ireland (IE) | 17 | 1.7% | 2 |
| France (FR) | 15 | 1.5% | 5 |
| Sweden (SE) | 12 | 1.2% | 2 |
| Canada (CA) | 10 | 1% | 6 |
| Taiwan (TW) | 8 | 0.8% | 5 |
| Brazil (BR) | 7 | 0.7% | 0 |
| Singapore (SG) | 7 | 0.7% | 0 |
| South Korea (KR) | 6 | 0.6% | 1 |
| Myanmar (Burma) (MM) | 6 | 0.6% | 2 |
| Austria (AT) | 5 | 0.5% | 0 |
| Bulgaria (BG) | 5 | 0.5% | 1 |
| South Africa (ZA) | 5 | 0.5% | 0 |
| Croatia (HR) | 4 | 0.4% | 0 |
| Italy (IT) | 4 | 0.4% | 0 |
| Poland (PL) | 4 | 0.4% | 0 |
| United Arab Emirates (AE) | 3 | 0.3% | 0 |
| Armenia (AM) | 3 | 0.3% | 0 |
| Burkina Faso (BF) | 3 | 0.3% | 0 |
| Spain (ES) | 3 | 0.3% | 0 |
| Japan (JP) | 3 | 0.3% | 1 |
| Kyrgyzstan (KG) | 3 | 0.3% | 3 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS16509 Amazon Data Services Northern Virginia | 205 | 20.5% | 17 |
| AS20940 Akamai Technologies, Inc. | 128 | 12.8% | 0 |
| AS14618 Amazon Data Services Northern Virginia | 100 | 10% | 42 |
| AS8075 Divya Quamara | 85 | 8.5% | 22 |
| AS13335 Cloudflare, Inc. | 58 | 5.8% | 0 |
| AS15169 Google LLC | 27 | 2.7% | 0 |
| AS16625 Akamai Technologies, Inc. | 26 | 2.6% | 4 |
| AS174 IRT-DATAUTAMA-ID | 18 | 1.8% | 0 |
| AS3356 Level 3 Parent, LLC | 12 | 1.2% | 0 |
| AS14593 SpaceX Services Inc administrator | 10 | 1% | 0 |
| AS9416 IRT-KBT-TW | 9 | 0.9% | 9 |
| AS1299 Arelion Sweden AB | 8 | 0.8% | 0 |
| AS3257 GTT | 8 | 0.8% | 0 |
| AS212238 Private Customer | 8 | 0.8% | 2 |
| AS396982 Google LLC | 7 | 0.7% | 0 |
| AS6461 ABOVENET-MNT | 6 | 0.6% | 1 |
| AS31543 Hermann Hammerl | 6 | 0.6% | 0 |
| AS25369 HYDRA-MNT | 5 | 0.5% | 1 |
| AS35625 Eurofiber France LIR Admin | 5 | 0.5% | 5 |
| AS44684 MYTHIC-MNT | 5 | 0.5% | 4 |
| AS54113 Fastly, Inc. | 5 | 0.5% | 0 |
| AS4780 Anti-Spammer NCIC | 4 | 0.4% | 0 |
| AS5391 HPT-MNT | 4 | 0.4% | 0 |
| AS7922 Comcast Cable Communications, Inc. | 4 | 0.4% | 0 |
| AS7979 Servers Guy | 4 | 0.4% | 4 |
Highest-risk new addresses
- 100.28.110.231
- 100.48.177.38
- 100.55.164.249
- 100.57.21.67
- 100.61.255.109
- 100.63.107.253
- 109.105.101.71
- 109.105.102.5
- 128.85.113.136
- 128.85.113.137
- 128.85.113.138
- 128.85.113.140
- 13.124.154.79
- 13.196.92.18
- 130.213.27.183
- 130.213.27.184
- 131.108.235.249
- 132.196.74.213
- 132.196.74.215
- 132.196.74.217
- 134.33.185.101
- 134.33.185.103
- 134.33.185.105
- 134.33.4.22
- 134.33.4.23
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← October 20, 2026 · October 2026 report · All reports · October 22, 2026 → · Markdown