New IP addresses on October 15, 2026

Daily threat report · UTC day

IPDebrief first observed 2,955 new IP addresses on October 15, 2026. 985 were analysed, and 12.3% of those scored high risk. The largest share came from United States (57.6%).

New addresses
2,955
Analysed
985
High risk
121 · 12.3%
Moderate risk
84
IPv6
8

Risk and network type

121 high risk84 moderate780 low
Network typeAddressesShare of analysed
Hosting / cloud21121.4%
VPN00%
Proxy00%
Tor exit00%

Top countries

CountryAddressesShareHigh risk
United States (US)56757.6%54
Germany (DE)434.4%5
United Kingdom (GB)353.6%10
India (IN)313.1%12
France (FR)242.4%1
Sweden (SE)232.3%1
Ireland (IE)141.4%2
Philippines (PH)141.4%0
Spain (ES)111.1%0
Pakistan (PK)111.1%0
Hong Kong (HK)101%0
Albania (AL)80.8%1
Brazil (BR)80.8%0
Singapore (SG)80.8%0
Colombia (CO)70.7%1
Japan (JP)70.7%4
Netherlands (NL)70.7%0
Australia (AU)60.6%1
South Africa (ZA)60.6%0
Bulgaria (BG)50.5%0
Czechia (CZ)50.5%1
Ecuador (EC)50.5%2
Finland (FI)50.5%0
Argentina (AR)40.4%0
Austria (AT)40.4%1

Top networks

NetworkAddressesShareHigh risk
AS16509 Amazon Data Services Northern Virginia17117.4%16
AS14618 Amazon Data Services Northern Virginia11711.9%21
AS13335 Cloudflare, Inc.767.7%0
AS8075 Divya Quamara535.4%2
AS24940 Hetzner Online GmbH - Contact Role282.8%0
AS174 IRT-DATAUTAMA-ID252.5%0
AS20940 Akamai Technologies, Inc.181.8%0
AS1299 Arelion Sweden AB161.6%0
AS31898 Oracle Corporation161.6%0
AS3356 Level 3 Parent, LLC111.1%0
AS15169 Google LLC111.1%0
AS12956 TelXius Cable USA, Inc.101%0
AS16276 OVH SAS90.9%1
AS16625 Akamai Technologies, Inc.80.8%0
AS3257 GTT70.7%0
AS396982 Google LLC70.7%0
AS6939 Hurricane Electric LLC60.6%0
AS9498 IRT-BHARTI-IN60.6%0
AS34772 MNT-NEOTEL60.6%6
AS58898 Rajarathinam C60.6%6
AS393444 OpenFiber Kentucky Company, LLC60.6%0
AS2107 ARNES NOC50.5%3
AS3301 TELIANET-LIR50.5%0
AS3491 Pierfrancesco Caci50.5%0
AS4775 Globe Telecom (GMCR,INC)50.5%0

Highest-risk new addresses

How these reports work

An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.

See also the network directory, provider IP ranges and the IP lookup tool.

← October 14, 2026 · October 2026 report · All reports · October 16, 2026 → · Markdown