IP Intelligence Authority Platform
New IP addresses on October 22, 2026
Daily threat report · UTC day
IPDebrief first observed 4,637 new IP addresses on October 22, 2026. 1,040 were analysed, and 15.9% of those scored high risk. The largest share came from United States (80.8%).
- New addresses
- 4,637
- Analysed
- 1,040
- High risk
- 165 · 15.9%
- Moderate risk
- 63
- IPv6
- 1
Risk and network type
165 high risk63 moderate812 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 256 | 24.6% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| United States (US) | 840 | 80.8% | 123 |
| United Kingdom (GB) | 29 | 2.8% | 15 |
| Ireland (IE) | 20 | 1.9% | 2 |
| Germany (DE) | 15 | 1.4% | 1 |
| France (FR) | 14 | 1.3% | 3 |
| India (IN) | 13 | 1.3% | 2 |
| Indonesia (ID) | 11 | 1.1% | 10 |
| Japan (JP) | 9 | 0.9% | 1 |
| Sweden (SE) | 9 | 0.9% | 0 |
| Switzerland (CH) | 7 | 0.7% | 0 |
| Canada (CA) | 6 | 0.6% | 1 |
| Hong Kong (HK) | 5 | 0.5% | 0 |
| Singapore (SG) | 5 | 0.5% | 1 |
| Australia (AU) | 3 | 0.3% | 0 |
| Brazil (BR) | 3 | 0.3% | 0 |
| Czechia (CZ) | 3 | 0.3% | 0 |
| Poland (PL) | 3 | 0.3% | 0 |
| Estonia (EE) | 2 | 0.2% | 1 |
| Israel (IL) | 2 | 0.2% | 0 |
| South Korea (KR) | 2 | 0.2% | 1 |
| Lithuania (LT) | 2 | 0.2% | 0 |
| Netherlands (NL) | 2 | 0.2% | 2 |
| Qatar (QA) | 2 | 0.2% | 0 |
| Slovakia (SK) | 2 | 0.2% | 0 |
| Tanzania (TZ) | 2 | 0.2% | 0 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS16509 Amazon Data Services Northern Virginia | 266 | 25.6% | 53 |
| AS14618 Amazon Data Services Northern Virginia | 160 | 15.4% | 40 |
| AS13335 Cloudflare, Inc. | 117 | 11.3% | 1 |
| AS8075 Divya Quamara | 109 | 10.5% | 18 |
| AS20940 Akamai Technologies, Inc. | 66 | 6.3% | 0 |
| AS16625 Akamai Technologies, Inc. | 40 | 3.8% | 6 |
| AS15169 Google LLC | 25 | 2.4% | 0 |
| AS14593 SpaceX Services Inc administrator | 12 | 1.2% | 0 |
| AS1299 Arelion Sweden AB | 11 | 1.1% | 0 |
| AS25369 HYDRA-MNT | 11 | 1.1% | 0 |
| AS396982 Google LLC | 11 | 1.1% | 0 |
| AS44684 MYTHIC-MNT | 10 | 1% | 10 |
| AS174 IRT-DATAUTAMA-ID | 9 | 0.9% | 0 |
| AS24940 Hetzner Online GmbH - Contact Role | 7 | 0.7% | 0 |
| AS9498 IRT-BHARTI-IN | 6 | 0.6% | 0 |
| AS32590 Valve Corporation | 6 | 0.6% | 0 |
| AS4800 IRT-LINTASARTA-ID | 5 | 0.5% | 5 |
| AS7979 Servers Guy | 5 | 0.5% | 4 |
| AS14340 Salesforce, Inc. | 5 | 0.5% | 0 |
| AS31898 Oracle Corporation | 5 | 0.5% | 1 |
| AS37100 Simon Mayoye | 5 | 0.5% | 0 |
| AS3356 Level 3 Parent, LLC | 4 | 0.4% | 0 |
| AS4181 TDS TELECOM | 4 | 0.4% | 0 |
| AS12025 Hyland Software Inc. | 4 | 0.4% | 0 |
| AS34927 lir-ch-itship-1-MNT | 4 | 0.4% | 0 |
Highest-risk new addresses
- 100.23.187.8
- 100.24.217.212
- 100.30.34.247
- 100.30.95.140
- 100.31.21.44
- 100.61.23.250
- 100.62.249.245
- 103.8.186.230
- 103.91.245.158
- 103.91.245.78
- 107.23.52.44
- 109.105.97.14
- 123.176.127.220
- 123.176.127.236
- 124.40.252.18
- 124.40.254.246
- 13.184.35.160
- 13.184.65.90
- 13.35.97.4
- 130.213.27.185
- 130.35.235.110
- 132.196.74.214
- 132.196.74.216
- 134.224.240.218
- 134.224.4.35
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← October 21, 2026 · October 2026 report · All reports · October 23, 2026 → · Markdown