New IP addresses on October 15, 2026
Daily threat report · UTC day
IPDebrief first observed 2,955 new IP addresses on October 15, 2026. 985 were analysed, and 12.3% of those scored high risk. The largest share came from United States (57.6%).
- New addresses
- 2,955
- Analysed
- 985
- High risk
- 121 · 12.3%
- Moderate risk
- 84
- IPv6
- 8
Risk and network type
121 high risk84 moderate780 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 211 | 21.4% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| United States (US) | 567 | 57.6% | 54 |
| Germany (DE) | 43 | 4.4% | 5 |
| United Kingdom (GB) | 35 | 3.6% | 10 |
| India (IN) | 31 | 3.1% | 12 |
| France (FR) | 24 | 2.4% | 1 |
| Sweden (SE) | 23 | 2.3% | 1 |
| Ireland (IE) | 14 | 1.4% | 2 |
| Philippines (PH) | 14 | 1.4% | 0 |
| Spain (ES) | 11 | 1.1% | 0 |
| Pakistan (PK) | 11 | 1.1% | 0 |
| Hong Kong (HK) | 10 | 1% | 0 |
| Albania (AL) | 8 | 0.8% | 1 |
| Brazil (BR) | 8 | 0.8% | 0 |
| Singapore (SG) | 8 | 0.8% | 0 |
| Colombia (CO) | 7 | 0.7% | 1 |
| Japan (JP) | 7 | 0.7% | 4 |
| Netherlands (NL) | 7 | 0.7% | 0 |
| Australia (AU) | 6 | 0.6% | 1 |
| South Africa (ZA) | 6 | 0.6% | 0 |
| Bulgaria (BG) | 5 | 0.5% | 0 |
| Czechia (CZ) | 5 | 0.5% | 1 |
| Ecuador (EC) | 5 | 0.5% | 2 |
| Finland (FI) | 5 | 0.5% | 0 |
| Argentina (AR) | 4 | 0.4% | 0 |
| Austria (AT) | 4 | 0.4% | 1 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS16509 Amazon Data Services Northern Virginia | 171 | 17.4% | 16 |
| AS14618 Amazon Data Services Northern Virginia | 117 | 11.9% | 21 |
| AS13335 Cloudflare, Inc. | 76 | 7.7% | 0 |
| AS8075 Divya Quamara | 53 | 5.4% | 2 |
| AS24940 Hetzner Online GmbH - Contact Role | 28 | 2.8% | 0 |
| AS174 IRT-DATAUTAMA-ID | 25 | 2.5% | 0 |
| AS20940 Akamai Technologies, Inc. | 18 | 1.8% | 0 |
| AS1299 Arelion Sweden AB | 16 | 1.6% | 0 |
| AS31898 Oracle Corporation | 16 | 1.6% | 0 |
| AS3356 Level 3 Parent, LLC | 11 | 1.1% | 0 |
| AS15169 Google LLC | 11 | 1.1% | 0 |
| AS12956 TelXius Cable USA, Inc. | 10 | 1% | 0 |
| AS16276 OVH SAS | 9 | 0.9% | 1 |
| AS16625 Akamai Technologies, Inc. | 8 | 0.8% | 0 |
| AS3257 GTT | 7 | 0.7% | 0 |
| AS396982 Google LLC | 7 | 0.7% | 0 |
| AS6939 Hurricane Electric LLC | 6 | 0.6% | 0 |
| AS9498 IRT-BHARTI-IN | 6 | 0.6% | 0 |
| AS34772 MNT-NEOTEL | 6 | 0.6% | 6 |
| AS58898 Rajarathinam C | 6 | 0.6% | 6 |
| AS393444 OpenFiber Kentucky Company, LLC | 6 | 0.6% | 0 |
| AS2107 ARNES NOC | 5 | 0.5% | 3 |
| AS3301 TELIANET-LIR | 5 | 0.5% | 0 |
| AS3491 Pierfrancesco Caci | 5 | 0.5% | 0 |
| AS4775 Globe Telecom (GMCR,INC) | 5 | 0.5% | 0 |
Highest-risk new addresses
- 100.48.119.43
- 100.59.75.147
- 100.60.110.95
- 100.61.190.142
- 100.63.117.14
- 100.63.158.110
- 101.255.3.160
- 103.117.51.213
- 103.137.148.50
- 103.225.124.237
- 103.225.124.38
- 103.237.114.14
- 103.25.44.146
- 103.25.46.2
- 103.25.47.154
- 103.253.209.126
- 103.31.84.199
- 109.127.82.49
- 13.114.190.212
- 134.0.31.18
- 137.220.197.204
- 138.59.177.106
- 146.66.152.53
- 148.113.1.140
- 148.222.224.7
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← October 14, 2026 · October 2026 report · All reports · October 16, 2026 → · Markdown