IP Intelligence Authority Platform
New IP addresses on October 10, 2026
Daily threat report · UTC day
IPDebrief first observed 186,452 new IP addresses on October 10, 2026. 45,502 were analysed, and 0.1% of those scored high risk. The largest share came from Seychelles (77.5%).
- New addresses
- 186,452
- Analysed
- 45,502
- High risk
- 37 · 0.1%
- Moderate risk
- 426
- IPv6
- 175,990
Risk and network type
37 high risk426 moderate45,039 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 113 | 0.2% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| Seychelles (SC) | 35,255 | 77.5% | 0 |
| Netherlands (NL) | 2,216 | 4.9% | 0 |
| United States (US) | 1,344 | 3% | 14 |
| Lithuania (LT) | 1,176 | 2.6% | 0 |
| Brazil (BR) | 297 | 0.7% | 1 |
| India (IN) | 126 | 0.3% | 2 |
| Singapore (SG) | 84 | 0.2% | 0 |
| Argentina (AR) | 63 | 0.1% | 0 |
| Bangladesh (BD) | 61 | 0.1% | 0 |
| Pakistan (PK) | 60 | 0.1% | 1 |
| South Africa (ZA) | 57 | 0.1% | 0 |
| Philippines (PH) | 56 | 0.1% | 2 |
| Vietnam (VN) | 56 | 0.1% | 0 |
| Colombia (CO) | 55 | 0.1% | 1 |
| Mexico (MX) | 55 | 0.1% | 1 |
| United Kingdom (GB) | 53 | 0.1% | 1 |
| Spain (ES) | 52 | 0.1% | 0 |
| Indonesia (ID) | 52 | 0.1% | 0 |
| France (FR) | 48 | 0.1% | 1 |
| Saudi Arabia (SA) | 47 | 0.1% | 0 |
| Germany (DE) | 44 | 0.1% | 0 |
| Venezuela (VE) | 41 | 0.1% | 0 |
| Canada (CA) | 39 | 0.1% | 0 |
| Italy (IT) | 37 | 0.1% | 0 |
| Thailand (TH) | 36 | 0.1% | 0 |
Top networks
Highest-risk new addresses
- 100.29.140.181
- 103.166.103.145
- 103.190.41.2
- 103.225.59.193
- 161.69.237.23
- 173.228.198.52
- 175.176.30.1
- 175.176.84.143
- 179.49.201.172
- 18.217.32.168
- 183.182.111.81
- 185.127.127.81
- 185.146.113.61
- 185.191.52.93
- 185.200.37.68
- 185.213.230.68
- 186.188.252.151
- 190.108.78.132
- 190.88.195.185
- 194.164.224.39
- 198.163.195.118
- 198.23.172.11
- 20.115.232.6
- 200.94.17.172
- 212.146.181.73
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← October 9, 2026 · October 2026 report · All reports · October 11, 2026 → · Markdown