New IP addresses on October 7, 2026

Daily threat report · UTC day

IPDebrief first observed 315,373 new IP addresses on October 7, 2026. 103,786 were analysed, and 0.6% of those scored high risk. The largest share came from Seychelles (41.6%).

New addresses
315,373
Analysed
103,786
High risk
599 · 0.6%
Moderate risk
3,405
IPv6
264,288

Risk and network type

599 high risk3,405 moderate99,782 low
Network typeAddressesShare of analysed
Hosting / cloud700.1%
VPN00%
Proxy00%
Tor exit00%

Top countries

CountryAddressesShareHigh risk
Seychelles (SC)43,16641.6%0
United States (US)7,0206.8%101
Netherlands (NL)2,8862.8%6
Brazil (BR)1,8631.8%0
Lithuania (LT)1,4011.3%0
United Kingdom (GB)1,2961.2%24
India (IN)4970.5%5
Bangladesh (BD)4660.4%22
Pakistan (PK)4650.4%16
Canada (CA)4500.4%10
Turkey (TR)4500.4%4
Argentina (AR)4290.4%10
Mexico (MX)3940.4%4
South Africa (ZA)3810.4%0
Venezuela (VE)3770.4%9
Spain (ES)3640.4%4
France (FR)3470.3%10
Philippines (PH)3460.3%4
Vietnam (VN)3460.3%0
Iraq (IQ)3160.3%21
Morocco (MA)2790.3%0
Germany (DE)2630.3%5
Colombia (CO)2420.2%7
Saudi Arabia (SA)2390.2%4
Indonesia (ID)2200.2%4

Top networks

NetworkAddressesShareHigh risk
AS214483 sc-rapidseedbox-1-mnt5,1935%0
AS62610 Pilo IP BV7150.7%0
AS7922 Comcast Cable Communications, Inc.5610.5%0
AS21928 T-Mobile USA, Inc.2240.2%0
AS701 Verizon Business1590.2%0
AS14593 SpaceX Services Inc administrator1310.1%0
AS2856 BT CENTRAL PLUS - OPERATIONAL SUPPORT1270.1%2
AS5089 AS5089-MNT1120.1%0
AS9121 AS9121-MNT1030.1%0
AS212238 Private Customer940.1%0
AS22773 netutils-mnt870.1%0
AS10796 Charter Communications Inc820.1%0
AS45899 IRT-VNNIC-AP820.1%0
AS62651 NETPR-ORD-DP810.1%0
AS5607 Sky UK Broadband Hostmaster770.1%0
AS20115 Charter Communications LLC770.1%0
AS6167 Verizon Business740.1%0
AS11426 Charter Communications Inc650.1%0
AS5650 Verizon Business600.1%0
AS36903 SEPFS Maroc Telecom600.1%0
AS33363 Charter Communications LLC590.1%0
AS20001 Charter Communications Inc580.1%0
AS28573 Claro NXT Telecomunicacoes Ltda560.1%0
AS17639 CONVERGE ICT SOLUTIONS INC administrator500%0
AS36924 Richard Tchissambou470%0

Highest-risk new addresses

How these reports work

An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.

See also the network directory, provider IP ranges and the IP lookup tool.

October 2026 report · All reports · October 8, 2026 → · Markdown