New IP addresses on October 24, 2026
Daily threat report · UTC day
IPDebrief first observed 4,392 new IP addresses on October 24, 2026. 1,561 were analysed, and 12.6% of those scored high risk. The largest share came from United States (46.8%).
- New addresses
- 4,392
- Analysed
- 1,561
- High risk
- 196 · 12.6%
- Moderate risk
- 128
- IPv6
- 4
Risk and network type
196 high risk128 moderate1,237 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 123 | 7.9% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| United States (US) | 731 | 46.8% | 82 |
| Pakistan (PK) | 140 | 9% | 7 |
| United Kingdom (GB) | 45 | 2.9% | 6 |
| India (IN) | 44 | 2.8% | 2 |
| France (FR) | 38 | 2.4% | 2 |
| South Korea (KR) | 33 | 2.1% | 0 |
| Brazil (BR) | 30 | 1.9% | 6 |
| Canada (CA) | 30 | 1.9% | 8 |
| Netherlands (NL) | 28 | 1.8% | 8 |
| Sweden (SE) | 27 | 1.7% | 4 |
| Germany (DE) | 26 | 1.7% | 6 |
| Ireland (IE) | 25 | 1.6% | 7 |
| Thailand (TH) | 24 | 1.5% | 4 |
| Japan (JP) | 19 | 1.2% | 3 |
| Mexico (MX) | 18 | 1.2% | 5 |
| Singapore (SG) | 17 | 1.1% | 6 |
| Philippines (PH) | 16 | 1% | 9 |
| Australia (AU) | 13 | 0.8% | 1 |
| Spain (ES) | 13 | 0.8% | 0 |
| Indonesia (ID) | 13 | 0.8% | 3 |
| Poland (PL) | 12 | 0.8% | 1 |
| Turkey (TR) | 12 | 0.8% | 1 |
| Ukraine (UA) | 12 | 0.8% | 1 |
| South Africa (ZA) | 12 | 0.8% | 0 |
| Hong Kong (HK) | 11 | 0.7% | 4 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS16509 Amazon Data Services Northern Virginia | 174 | 11.1% | 42 |
| AS14618 Amazon Data Services Northern Virginia | 149 | 9.5% | 33 |
| AS9541 Amjad Qasmi | 104 | 6.7% | 1 |
| AS20940 Akamai Technologies, Inc. | 81 | 5.2% | 0 |
| AS714 Apple Inc. | 65 | 4.2% | 0 |
| AS13335 Cloudflare, Inc. | 57 | 3.7% | 0 |
| AS4766 IP Manager | 28 | 1.8% | 0 |
| AS16625 Akamai Technologies, Inc. | 28 | 1.8% | 8 |
| AS8075 Divya Quamara | 22 | 1.4% | 1 |
| AS174 IRT-DATAUTAMA-ID | 14 | 0.9% | 0 |
| AS55836 IRT-RELIANCEJIO-IN | 14 | 0.9% | 0 |
| AS4713 Japan Network Information Center | 13 | 0.8% | 0 |
| AS9121 AS9121-MNT | 12 | 0.8% | 0 |
| AS396982 Google LLC | 11 | 0.7% | 0 |
| AS5483 MTELEKOM-MNT | 10 | 0.6% | 0 |
| AS9141 Bogdan Urbanowicz | 10 | 0.6% | 0 |
| AS60781 Private Customer | 10 | 0.6% | 3 |
| AS16276 OVH SAS | 9 | 0.6% | 1 |
| AS45609 Network Administrator | 9 | 0.6% | 0 |
| AS141342 IRT-KG-PK | 9 | 0.6% | 7 |
| AS7545 iiNet Limited | 8 | 0.5% | 0 |
| AS9498 IRT-BHARTI-IN | 8 | 0.5% | 0 |
| AS12552 IP-ONLY-MNT | 8 | 0.5% | 4 |
| AS25369 HYDRA-MNT | 8 | 0.5% | 0 |
| AS132165 Talha Naeem | 8 | 0.5% | 0 |
Highest-risk new addresses
- 100.21.80.81
- 100.29.126.96
- 100.49.149.83
- 100.57.103.231
- 100.62.218.217
- 103.125.246.101
- 103.125.246.172
- 103.125.246.21
- 103.125.246.30
- 103.125.246.36
- 103.125.246.67
- 103.125.246.75
- 103.145.113.70
- 103.47.67.170
- 103.82.121.133
- 103.82.121.67
- 103.82.121.68
- 103.82.121.96
- 103.85.36.34
- 109.105.0.209
- 109.120.129.77
- 110.138.10.125
- 113.21.241.238
- 113.253.253.197
- 113.254.36.153
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← October 23, 2026 · October 2026 report · All reports · October 25, 2026 → · Markdown