New IP addresses on October 12, 2026

Daily threat report · UTC day

IPDebrief first observed 4,168 new IP addresses on October 12, 2026. 647 were analysed, and 17.2% of those scored high risk. The largest share came from United States (71.4%).

New addresses
4,168
Analysed
647
High risk
111 · 17.2%
Moderate risk
42
IPv6
6

Risk and network type

111 high risk42 moderate494 low
Network typeAddressesShare of analysed
Hosting / cloud15924.6%
VPN00%
Proxy00%
Tor exit00%

Top countries

CountryAddressesShareHigh risk
United States (US)46271.4%84
Germany (DE)172.6%2
United Kingdom (GB)162.5%1
Spain (ES)111.7%2
Ireland (IE)111.7%2
Singapore (SG)111.7%3
Thailand (TH)81.2%0
France (FR)71.1%0
Netherlands (NL)71.1%2
Pakistan (PK)60.9%0
Australia (AU)50.8%0
Sri Lanka (LK)40.6%0
Sweden (SE)40.6%0
South Africa (ZA)40.6%0
Argentina (AR)30.5%1
Austria (AT)30.5%0
India (IN)30.5%1
Italy (IT)30.5%3
Bangladesh (BD)20.3%1
Brazil (BR)20.3%0
Canada (CA)20.3%0
Hong Kong (HK)20.3%2
Japan (JP)20.3%0
Kenya (KE)20.3%0
South Korea (KR)20.3%0

Top networks

NetworkAddressesShareHigh risk
AS14618 Amazon Data Services Northern Virginia15023.2%69
AS16509 Amazon Data Services Northern Virginia13020.1%12
AS8075 Divya Quamara599.1%0
AS13335 Cloudflare, Inc.264%0
AS20940 Akamai Technologies, Inc.192.9%0
AS45102 Alibaba Cloud - JP111.7%0
AS16625 Akamai Technologies, Inc.91.4%1
AS15169 Google LLC81.2%0
AS16276 OVH SAS81.2%0
AS3356 Level 3 Parent, LLC71.1%0
AS12956 TelXius Cable USA, Inc.60.9%0
AS14593 SpaceX Services Inc administrator60.9%0
AS1299 Arelion Sweden AB50.8%0
AS133481 SBN Co Ltd IP Planning50.8%0
AS396982 Google LLC50.8%0
AS3549 COMUNICAMOS + TELECOMUNICACIONES SAS40.6%1
AS401442 Spur Intelligence Corporation40.6%0
AS3320 DTAG-NIC30.5%0
AS4651 IRT-NTPCL-TH30.5%0
AS4826 VOCUS PTY LTD30.5%0
AS6713 SEPFS Maroc Telecom30.5%0
AS8881 1&1 Versatel GmbH30.5%0
AS17557 Munir Ahmed30.5%0
AS23201 Telecel S.A.30.5%0
AS37497 Warwick Ward-Cox30.5%0

Highest-risk new addresses

How these reports work

An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.

See also the network directory, provider IP ranges and the IP lookup tool.

← October 11, 2026 · October 2026 report · All reports · October 13, 2026 → · Markdown