New IP addresses on October 13, 2026

Daily threat report · UTC day

IPDebrief first observed 2,402 new IP addresses on October 13, 2026. 432 were analysed, and 15.3% of those scored high risk. The largest share came from United States (55.1%).

New addresses
2,402
Analysed
432
High risk
66 · 15.3%
Moderate risk
30
IPv6
24

Risk and network type

66 high risk30 moderate336 low
Network typeAddressesShare of analysed
Hosting / cloud6916%
VPN00%
Proxy00%
Tor exit00%

Top countries

CountryAddressesShareHigh risk
United States (US)23855.1%38
France (FR)266%1
United Kingdom (GB)194.4%2
India (IN)143.2%5
Ireland (IE)81.9%3
Colombia (CO)71.6%4
Brazil (BR)61.4%0
Hong Kong (HK)61.4%0
Netherlands (NL)61.4%3
Sweden (SE)61.4%1
Australia (AU)51.2%2
Chile (CL)51.2%0
Philippines (PH)51.2%0
Kyrgyzstan (KG)40.9%0
Singapore (SG)40.9%0
Thailand (TH)40.9%0
Germany (DE)30.7%1
Spain (ES)30.7%1
South Korea (KR)30.7%0
Portugal (PT)30.7%0
Argentina (AR)20.5%1
Austria (AT)20.5%0
Ecuador (EC)20.5%0
Indonesia (ID)20.5%0
Libya (LY)20.5%0

Top networks

NetworkAddressesShareHigh risk
AS16509 Amazon Data Services Northern Virginia4610.6%10
AS8075 Divya Quamara4310%1
AS14618 Amazon Data Services Northern Virginia429.7%16
AS13335 Cloudflare, Inc.296.7%0
AS16276 OVH SAS194.4%0
AS20940 Akamai Technologies, Inc.112.5%0
AS15169 Google LLC102.3%0
AS174 IRT-DATAUTAMA-ID92.1%0
AS23520 Columbus Networks USA, Inc.71.6%5
AS1299 Arelion Sweden AB51.2%0
AS3356 Level 3 Parent, LLC51.2%0
AS45102 Alibaba Cloud - JP51.2%0
AS3549 COMUNICAMOS + TELECOMUNICACIONES SAS40.9%0
AS5511 FT-BRX40.9%0
AS6762 AS6762-MNT40.9%0
AS29061 SAIMANET-ADMIN40.9%0
AS37054 Tojo RAONISOAFIANINANA40.9%0
AS396982 Google LLC40.9%0
AS4755 IRT-TATACOMM-IN30.7%0
AS18678 INTERNEXA S.A. E.S.P30.7%2
AS24940 Hetzner Online GmbH - Contact Role30.7%0
AS3243 TELEPAC-MNT20.5%0
AS3257 GTT20.5%0
AS4760 IRT-HKTIMS-HK20.5%0
AS6057 Administracion Nacional de Telecomunicaciones20.5%0

Highest-risk new addresses

How these reports work

An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.

See also the network directory, provider IP ranges and the IP lookup tool.

← October 12, 2026 · October 2026 report · All reports · October 14, 2026 → · Markdown