# New IP addresses on October 21, 2026

IPDebrief first observed 4,719 new IP addresses on October 21, 2026. 1,000 were analysed, and 16.5% of those scored high risk. The largest share came from United States (73.4%).

Canonical: https://ipdebrief.com/reports/2026-10-21

## Totals

| Metric | Value |
|---|---|
| New addresses | 4,719 |
| Analysed | 1,000 |
| High risk | 165 (16.5%) |
| Moderate risk | 50 |
| Low risk | 785 |
| IPv6 | 3 |
| Hosting / cloud | 174 |
| VPN | 0 |
| Proxy | 0 |
| Tor exit | 0 |

## Top countries

| Country | Addresses | High risk |
|---|---:|---:|
| [United States (US)](https://ipdebrief.com/country/US) | 734 | 113 |
| [United Kingdom (GB)](https://ipdebrief.com/country/GB) | 35 | 11 |
| [Netherlands (NL)](https://ipdebrief.com/country/NL) | 19 | 4 |
| [Germany (DE)](https://ipdebrief.com/country/DE) | 18 | 1 |
| [Ireland (IE)](https://ipdebrief.com/country/IE) | 17 | 2 |
| [France (FR)](https://ipdebrief.com/country/FR) | 15 | 5 |
| [Sweden (SE)](https://ipdebrief.com/country/SE) | 12 | 2 |
| [Canada (CA)](https://ipdebrief.com/country/CA) | 10 | 6 |
| [Taiwan (TW)](https://ipdebrief.com/country/TW) | 8 | 5 |
| [Brazil (BR)](https://ipdebrief.com/country/BR) | 7 | 0 |
| [Singapore (SG)](https://ipdebrief.com/country/SG) | 7 | 0 |
| [South Korea (KR)](https://ipdebrief.com/country/KR) | 6 | 1 |
| [Myanmar (Burma) (MM)](https://ipdebrief.com/country/MM) | 6 | 2 |
| [Austria (AT)](https://ipdebrief.com/country/AT) | 5 | 0 |
| [Bulgaria (BG)](https://ipdebrief.com/country/BG) | 5 | 1 |
| [South Africa (ZA)](https://ipdebrief.com/country/ZA) | 5 | 0 |
| [Croatia (HR)](https://ipdebrief.com/country/HR) | 4 | 0 |
| [Italy (IT)](https://ipdebrief.com/country/IT) | 4 | 0 |
| [Poland (PL)](https://ipdebrief.com/country/PL) | 4 | 0 |
| [United Arab Emirates (AE)](https://ipdebrief.com/country/AE) | 3 | 0 |
| [Armenia (AM)](https://ipdebrief.com/country/AM) | 3 | 0 |
| [Burkina Faso (BF)](https://ipdebrief.com/country/BF) | 3 | 0 |
| [Spain (ES)](https://ipdebrief.com/country/ES) | 3 | 0 |
| [Japan (JP)](https://ipdebrief.com/country/JP) | 3 | 1 |
| [Kyrgyzstan (KG)](https://ipdebrief.com/country/KG) | 3 | 3 |

## Top networks

| Network | Addresses | High risk |
|---|---:|---:|
| [AS16509 Amazon Data Services Northern Virginia](https://ipdebrief.com/asn/16509) | 205 | 17 |
| [AS20940 Akamai Technologies, Inc.](https://ipdebrief.com/asn/20940) | 128 | 0 |
| [AS14618 Amazon Data Services Northern Virginia](https://ipdebrief.com/asn/14618) | 100 | 42 |
| [AS8075 Divya Quamara](https://ipdebrief.com/asn/8075) | 85 | 22 |
| [AS13335 Cloudflare, Inc.](https://ipdebrief.com/asn/13335) | 58 | 0 |
| [AS15169 Google LLC](https://ipdebrief.com/asn/15169) | 27 | 0 |
| [AS16625 Akamai Technologies, Inc.](https://ipdebrief.com/asn/16625) | 26 | 4 |
| [AS174 IRT-DATAUTAMA-ID](https://ipdebrief.com/asn/174) | 18 | 0 |
| [AS3356 Level 3 Parent, LLC](https://ipdebrief.com/asn/3356) | 12 | 0 |
| [AS14593 SpaceX Services Inc administrator](https://ipdebrief.com/asn/14593) | 10 | 0 |
| [AS9416 IRT-KBT-TW](https://ipdebrief.com/asn/9416) | 9 | 9 |
| [AS1299 Arelion Sweden AB](https://ipdebrief.com/asn/1299) | 8 | 0 |
| [AS3257 GTT](https://ipdebrief.com/asn/3257) | 8 | 0 |
| [AS212238 Private Customer](https://ipdebrief.com/asn/212238) | 8 | 2 |
| [AS396982 Google LLC](https://ipdebrief.com/asn/396982) | 7 | 0 |
| [AS6461 ABOVENET-MNT](https://ipdebrief.com/asn/6461) | 6 | 1 |
| [AS31543 Hermann Hammerl](https://ipdebrief.com/asn/31543) | 6 | 0 |
| [AS25369 HYDRA-MNT](https://ipdebrief.com/asn/25369) | 5 | 1 |
| [AS35625 Eurofiber France LIR Admin](https://ipdebrief.com/asn/35625) | 5 | 5 |
| [AS44684 MYTHIC-MNT](https://ipdebrief.com/asn/44684) | 5 | 4 |
| [AS54113 Fastly, Inc.](https://ipdebrief.com/asn/54113) | 5 | 0 |
| [AS4780 Anti-Spammer NCIC](https://ipdebrief.com/asn/4780) | 4 | 0 |
| [AS5391 HPT-MNT](https://ipdebrief.com/asn/5391) | 4 | 0 |
| [AS7922 Comcast Cable Communications, Inc.](https://ipdebrief.com/asn/7922) | 4 | 0 |
| [AS7979 Servers Guy](https://ipdebrief.com/asn/7979) | 4 | 4 |

## Highest-risk new addresses

| Address | Risk | Country | ASN |
|---|---:|---|---|
| [100.28.110.231](https://ipdebrief.com/100.28.110.231) | 70 | US | AS14618 |
| [100.48.177.38](https://ipdebrief.com/100.48.177.38) | 70 | US | AS14618 |
| [100.55.164.249](https://ipdebrief.com/100.55.164.249) | 70 | US | AS14618 |
| [100.57.21.67](https://ipdebrief.com/100.57.21.67) | 70 | US | AS14618 |
| [100.61.255.109](https://ipdebrief.com/100.61.255.109) | 70 | US | AS14618 |
| [100.63.107.253](https://ipdebrief.com/100.63.107.253) | 70 | US | AS14618 |
| [109.105.101.71](https://ipdebrief.com/109.105.101.71) | 70 | US | AS2603 |
| [109.105.102.5](https://ipdebrief.com/109.105.102.5) | 70 | US | AS2603 |
| [128.85.113.136](https://ipdebrief.com/128.85.113.136) | 70 | US | AS8075 |
| [128.85.113.137](https://ipdebrief.com/128.85.113.137) | 70 | US | AS8075 |
| [128.85.113.138](https://ipdebrief.com/128.85.113.138) | 70 | US | AS8075 |
| [128.85.113.140](https://ipdebrief.com/128.85.113.140) | 70 | US | AS8075 |
| [13.124.154.79](https://ipdebrief.com/13.124.154.79) | 70 | KR | AS16509 |
| [13.196.92.18](https://ipdebrief.com/13.196.92.18) | 70 | JP | AS16509 |
| [130.213.27.183](https://ipdebrief.com/130.213.27.183) | 70 | GB | AS8075 |
| [130.213.27.184](https://ipdebrief.com/130.213.27.184) | 70 | US | AS8075 |
| [131.108.235.249](https://ipdebrief.com/131.108.235.249) | 70 | US | AS262234 |
| [132.196.74.213](https://ipdebrief.com/132.196.74.213) | 70 | GB | AS8075 |
| [132.196.74.215](https://ipdebrief.com/132.196.74.215) | 70 | GB | AS8075 |
| [132.196.74.217](https://ipdebrief.com/132.196.74.217) | 70 | GB | AS8075 |
| [134.33.185.101](https://ipdebrief.com/134.33.185.101) | 70 | GB | AS8075 |
| [134.33.185.103](https://ipdebrief.com/134.33.185.103) | 70 | US | AS8075 |
| [134.33.185.105](https://ipdebrief.com/134.33.185.105) | 70 | US | AS8075 |
| [134.33.4.22](https://ipdebrief.com/134.33.4.22) | 70 | US | AS8075 |
| [134.33.4.23](https://ipdebrief.com/134.33.4.23) | 70 | US | AS8075 |

Risk bands: high is 70 or more, moderate 40–69, low below 40. Counts reflect analysis at publication; individual profiles keep updating.
