IP Intelligence Authority Platform
New IP addresses on October 23, 2026
Daily threat report · UTC day
IPDebrief first observed 4,458 new IP addresses on October 23, 2026. 1,628 were analysed, and 12.3% of those scored high risk. The largest share came from United States (44.4%).
- New addresses
- 4,458
- Analysed
- 1,628
- High risk
- 201 · 12.3%
- Moderate risk
- 106
- IPv6
- 3
Risk and network type
201 high risk106 moderate1,321 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 138 | 8.5% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| United States (US) | 723 | 44.4% | 90 |
| Pakistan (PK) | 89 | 5.5% | 10 |
| United Kingdom (GB) | 69 | 4.2% | 5 |
| Canada (CA) | 65 | 4% | 14 |
| France (FR) | 54 | 3.3% | 3 |
| Netherlands (NL) | 46 | 2.8% | 9 |
| South Korea (KR) | 44 | 2.7% | 1 |
| India (IN) | 40 | 2.5% | 0 |
| Sweden (SE) | 36 | 2.2% | 8 |
| Germany (DE) | 29 | 1.8% | 5 |
| Brazil (BR) | 23 | 1.4% | 2 |
| Japan (JP) | 22 | 1.4% | 1 |
| Hong Kong (HK) | 20 | 1.2% | 3 |
| Australia (AU) | 17 | 1% | 5 |
| Spain (ES) | 16 | 1% | 0 |
| South Africa (ZA) | 16 | 1% | 0 |
| Ukraine (UA) | 14 | 0.9% | 2 |
| Taiwan (TW) | 13 | 0.8% | 1 |
| Philippines (PH) | 12 | 0.7% | 1 |
| Poland (PL) | 12 | 0.7% | 5 |
| Argentina (AR) | 11 | 0.7% | 1 |
| Israel (IL) | 11 | 0.7% | 1 |
| Turkey (TR) | 10 | 0.6% | 1 |
| Ireland (IE) | 9 | 0.6% | 1 |
| Albania (AL) | 8 | 0.5% | 2 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS16509 Amazon Data Services Northern Virginia | 105 | 6.4% | 14 |
| AS14618 Amazon Data Services Northern Virginia | 95 | 5.8% | 29 |
| AS9541 Amjad Qasmi | 83 | 5.1% | 1 |
| AS20940 Akamai Technologies, Inc. | 61 | 3.7% | 0 |
| AS13335 Cloudflare, Inc. | 60 | 3.7% | 0 |
| AS4766 IP Manager | 41 | 2.5% | 0 |
| AS8075 Divya Quamara | 38 | 2.3% | 2 |
| AS212238 Private Customer | 28 | 1.7% | 1 |
| AS7922 Comcast Cable Communications, Inc. | 27 | 1.7% | 0 |
| AS174 IRT-DATAUTAMA-ID | 25 | 1.5% | 1 |
| AS1299 Arelion Sweden AB | 18 | 1.1% | 0 |
| AS60781 Private Customer | 18 | 1.1% | 5 |
| AS714 Apple Inc. | 14 | 0.9% | 0 |
| AS3356 Level 3 Parent, LLC | 14 | 0.9% | 0 |
| AS16625 Akamai Technologies, Inc. | 13 | 0.8% | 4 |
| AS701 Verizon Business | 12 | 0.7% | 0 |
| AS9595 Japan Network Information Center | 12 | 0.7% | 0 |
| AS9009 M247 Global TOKYO NOC | 11 | 0.7% | 0 |
| AS9498 IRT-BHARTI-IN | 11 | 0.7% | 0 |
| AS15169 Google LLC | 10 | 0.6% | 0 |
| AS55836 IRT-RELIANCEJIO-IN | 10 | 0.6% | 0 |
| AS141342 IRT-KG-PK | 10 | 0.6% | 10 |
| AS16276 OVH SAS | 9 | 0.6% | 1 |
| AS45609 Network Administrator | 9 | 0.6% | 0 |
| AS3462 HINET Network-Adm | 8 | 0.5% | 1 |
Highest-risk new addresses
- 1.34.174.99
- 100.57.18.206
- 100.59.167.245
- 103.140.3.18
- 103.140.3.30
- 103.16.152.106
- 103.72.1.96
- 103.82.120.33
- 103.82.120.59
- 103.82.121.101
- 103.82.252.38
- 103.82.255.118
- 103.82.255.99
- 104.159.18.107
- 107.20.127.14
- 107.21.163.33
- 108.170.130.63
- 108.170.136.155
- 109.104.154.65
- 109.236.46.199
- 109.236.50.145
- 109.69.3.65
- 109.69.3.66
- 115.69.36.80
- 118.141.219.236
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← October 22, 2026 · October 2026 report · All reports · October 24, 2026 → · Markdown