IP Intelligence Authority Platform
New IP addresses on October 26, 2026
Daily threat report · UTC day
IPDebrief first observed 8,445 new IP addresses on October 26, 2026. 894 were analysed, and 9.5% of those scored high risk. The largest share came from United States (79.6%).
- New addresses
- 8,445
- Analysed
- 894
- High risk
- 85 · 9.5%
- Moderate risk
- 55
- IPv6
- 1
Risk and network type
85 high risk55 moderate754 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 168 | 18.8% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| United States (US) | 712 | 79.6% | 67 |
| United Kingdom (GB) | 22 | 2.5% | 1 |
| Ireland (IE) | 15 | 1.7% | 3 |
| Germany (DE) | 13 | 1.5% | 1 |
| Brazil (BR) | 9 | 1% | 0 |
| India (IN) | 8 | 0.9% | 2 |
| Netherlands (NL) | 7 | 0.8% | 0 |
| France (FR) | 6 | 0.7% | 0 |
| Singapore (SG) | 6 | 0.7% | 1 |
| United Arab Emirates (AE) | 5 | 0.6% | 0 |
| Moldova (MD) | 5 | 0.6% | 0 |
| Sweden (SE) | 5 | 0.6% | 0 |
| South Africa (ZA) | 5 | 0.6% | 0 |
| Austria (AT) | 4 | 0.4% | 0 |
| Israel (IL) | 4 | 0.4% | 0 |
| Japan (JP) | 4 | 0.4% | 1 |
| Australia (AU) | 3 | 0.3% | 0 |
| South Korea (KR) | 3 | 0.3% | 1 |
| Norway (NO) | 3 | 0.3% | 3 |
| Togo (TG) | 3 | 0.3% | 0 |
| Canada (CA) | 2 | 0.2% | 0 |
| Finland (FI) | 2 | 0.2% | 2 |
| Hong Kong (HK) | 2 | 0.2% | 0 |
| Honduras (HN) | 2 | 0.2% | 0 |
| Madagascar (MG) | 2 | 0.2% | 0 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS16509 Amazon Data Services Northern Virginia | 243 | 27.2% | 29 |
| AS14618 Amazon Data Services Northern Virginia | 118 | 13.2% | 30 |
| AS20940 Akamai Technologies, Inc. | 92 | 10.3% | 0 |
| AS13335 Cloudflare, Inc. | 69 | 7.7% | 0 |
| AS8075 Divya Quamara | 64 | 7.2% | 1 |
| AS714 Apple Inc. | 39 | 4.4% | 0 |
| AS15169 Google LLC | 25 | 2.8% | 1 |
| AS396982 Google LLC | 23 | 2.6% | 0 |
| AS16625 Akamai Technologies, Inc. | 18 | 2% | 6 |
| AS174 IRT-DATAUTAMA-ID | 10 | 1.1% | 0 |
| AS1299 Arelion Sweden AB | 8 | 0.9% | 0 |
| AS25369 HYDRA-MNT | 6 | 0.7% | 0 |
| AS8926 Moldtelecom LIR Adminstrators | 5 | 0.6% | 0 |
| AS212238 Private Customer | 5 | 0.6% | 0 |
| AS749 DoD Network Information Center | 4 | 0.4% | 0 |
| AS4229 netutils-mnt | 4 | 0.4% | 0 |
| AS54113 Fastly, Inc. | 4 | 0.4% | 0 |
| AS137409 VPN Consumer Los Angeles, United States | 4 | 0.4% | 0 |
| AS2914 NTT America, Inc. | 3 | 0.3% | 0 |
| AS7578 Cogent Communications, LLC | 3 | 0.3% | 0 |
| AS11054 LivePerson, Inc. | 3 | 0.3% | 0 |
| AS23404 Ritter Communications | 3 | 0.3% | 0 |
| AS24961 WIIT AG NOC | 3 | 0.3% | 0 |
| AS29695 MNT-SALTEN | 3 | 0.3% | 3 |
| AS37229 Kodjo Tsogbe | 3 | 0.3% | 0 |
Highest-risk new addresses
- 100.49.134.61
- 100.56.72.165
- 100.58.11.232
- 100.62.129.117
- 103.198.140.136
- 108.161.151.187
- 13.107.5.88
- 13.192.71.243
- 13.219.133.140
- 130.35.197.225
- 137.220.37.116
- 141.208.193.226
- 142.93.213.227
- 16.145.175.76
- 161.69.236.117
- 161.69.237.222
- 173.222.168.52
- 174.129.149.37
- 18.208.120.68
- 18.225.62.143
- 18.237.175.161
- 184.193.145.222
- 184.197.79.207
- 185.107.193.126
- 20.190.152.106
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← October 25, 2026 · October 2026 report · All reports · October 27, 2026 → · Markdown