IP Intelligence Authority Platform
New IP addresses on October 25, 2026
Daily threat report · UTC day
IPDebrief first observed 3,043 new IP addresses on October 25, 2026. 1,119 were analysed, and 11.3% of those scored high risk. The largest share came from United States (72%).
- New addresses
- 3,043
- Analysed
- 1,119
- High risk
- 127 · 11.3%
- Moderate risk
- 59
- IPv6
- 2
Risk and network type
127 high risk59 moderate933 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 172 | 15.4% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| United States (US) | 806 | 72% | 96 |
| Germany (DE) | 39 | 3.5% | 13 |
| United Kingdom (GB) | 32 | 2.9% | 4 |
| France (FR) | 24 | 2.1% | 1 |
| Sweden (SE) | 21 | 1.9% | 0 |
| Ireland (IE) | 18 | 1.6% | 1 |
| Brazil (BR) | 16 | 1.4% | 0 |
| Thailand (TH) | 14 | 1.3% | 0 |
| India (IN) | 13 | 1.2% | 0 |
| Japan (JP) | 12 | 1.1% | 0 |
| Australia (AU) | 11 | 1% | 0 |
| Netherlands (NL) | 11 | 1% | 1 |
| Qatar (QA) | 10 | 0.9% | 0 |
| Israel (IL) | 8 | 0.7% | 0 |
| Singapore (SG) | 8 | 0.7% | 0 |
| South Africa (ZA) | 8 | 0.7% | 1 |
| Hong Kong (HK) | 7 | 0.6% | 0 |
| South Korea (KR) | 7 | 0.6% | 1 |
| Indonesia (ID) | 4 | 0.4% | 2 |
| Canada (CA) | 3 | 0.3% | 0 |
| Switzerland (CH) | 3 | 0.3% | 2 |
| United Arab Emirates (AE) | 2 | 0.2% | 0 |
| Hungary (HU) | 2 | 0.2% | 2 |
| Malaysia (MY) | 2 | 0.2% | 0 |
| China (CN) | 1 | 0.1% | 0 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS16509 Amazon Data Services Northern Virginia | 341 | 30.5% | 24 |
| AS14618 Amazon Data Services Northern Virginia | 157 | 14% | 41 |
| AS20940 Akamai Technologies, Inc. | 109 | 9.7% | 0 |
| AS13335 Cloudflare, Inc. | 86 | 7.7% | 0 |
| AS714 Apple Inc. | 75 | 6.7% | 0 |
| AS8075 Divya Quamara | 42 | 3.8% | 10 |
| AS396982 Google LLC | 32 | 2.9% | 0 |
| AS16625 Akamai Technologies, Inc. | 22 | 2% | 16 |
| AS174 IRT-DATAUTAMA-ID | 15 | 1.3% | 0 |
| AS45430 AIS Network Management Center | 12 | 1.1% | 0 |
| AS15169 Google LLC | 9 | 0.8% | 0 |
| AS1299 Arelion Sweden AB | 8 | 0.7% | 0 |
| AS50629 LWL-MNT | 8 | 0.7% | 8 |
| AS7922 Comcast Cable Communications, Inc. | 7 | 0.6% | 0 |
| AS25369 HYDRA-MNT | 7 | 0.6% | 0 |
| AS204035 de-onecorp-1-mnt | 6 | 0.5% | 6 |
| AS395748 NetSpeed LLC | 5 | 0.4% | 4 |
| AS2914 NTT America, Inc. | 4 | 0.4% | 0 |
| AS12876 Mickael Marchand | 4 | 0.4% | 0 |
| AS54113 Fastly, Inc. | 4 | 0.4% | 1 |
| AS212238 Private Customer | 4 | 0.4% | 0 |
| AS3257 GTT | 3 | 0.3% | 0 |
| AS3356 Level 3 Parent, LLC | 3 | 0.3% | 0 |
| AS24940 Hetzner Online GmbH - Contact Role | 3 | 0.3% | 0 |
| AS137409 VPN Consumer Los Angeles, United States | 3 | 0.3% | 0 |
Highest-risk new addresses
- 100.50.36.90
- 100.51.14.174
- 100.52.44.39
- 100.55.102.52
- 100.60.245.79
- 100.60.45.58
- 100.60.61.183
- 102.220.161.107
- 109.105.0.12
- 109.105.0.211
- 13.244.182.253
- 134.33.4.26
- 15.220.66.185
- 151.101.3.56
- 157.131.209.82
- 16.58.21.135
- 161.69.232.179
- 161.69.233.94
- 161.69.237.26
- 161.69.237.56
- 161.69.238.19
- 178.17.160.173
- 18.189.136.165
- 18.210.217.19
- 184.196.201.1
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← October 24, 2026 · October 2026 report · All reports · October 26, 2026 → · Markdown