New IP addresses on October 19, 2026

Daily threat report · UTC day

IPDebrief first observed 3,500 new IP addresses on October 19, 2026. 1,233 were analysed, and 11.4% of those scored high risk. The largest share came from United States (56.7%).

New addresses
3,500
Analysed
1,233
High risk
140 · 11.4%
Moderate risk
70
IPv6
59

Risk and network type

140 high risk70 moderate1,023 low
Network typeAddressesShare of analysed
Hosting / cloud19415.7%
VPN00%
Proxy00%
Tor exit00%

Top countries

CountryAddressesShareHigh risk
United States (US)69956.7%67
United Kingdom (GB)584.7%10
Germany (DE)231.9%2
France (FR)211.7%0
Ireland (IE)191.5%5
Netherlands (NL)171.4%1
Sweden (SE)161.3%0
Canada (CA)141.1%2
South Africa (ZA)141.1%2
Kazakhstan (KZ)121%1
Italy (IT)110.9%3
Bermuda (BM)100.8%6
Brazil (BR)100.8%0
United Arab Emirates (AE)90.7%1
India (IN)90.7%0
Spain (ES)70.6%1
Hong Kong (HK)70.6%1
Japan (JP)70.6%4
Laos (LA)70.6%1
Slovakia (SK)60.5%0
Cyprus (CY)50.4%2
Finland (FI)50.4%0
Jersey (JE)50.4%0
Philippines (PH)50.4%0
Pakistan (PK)50.4%1

Top networks

NetworkAddressesShareHigh risk
AS16509 Amazon Data Services Northern Virginia18314.8%28
AS20940 Akamai Technologies, Inc.14411.7%0
AS8075 Divya Quamara816.6%7
AS14618 Amazon Data Services Northern Virginia796.4%19
AS15169 Google LLC443.6%0
AS174 IRT-DATAUTAMA-ID322.6%0
AS7922 Comcast Cable Communications, Inc.201.6%0
AS13335 Cloudflare, Inc.191.5%0
AS1299 Arelion Sweden AB121%0
AS14593 SpaceX Services Inc administrator121%0
AS30844 Andrew Alston90.7%1
AS2914 NTT America, Inc.80.6%2
AS3855 Logic Communications Ltd80.6%5
AS6762 AS6762-MNT80.6%0
AS8681 JE-TEL-MNT80.6%1
AS25369 HYDRA-MNT80.6%0
AS50482 KNIC-MNT80.6%0
AS9198 KNIC-MNT70.6%0
AS16625 Akamai Technologies, Inc.70.6%2
AS23520 Columbus Networks USA, Inc.70.6%5
AS212238 Private Customer70.6%0
AS12956 TelXius Cable USA, Inc.60.5%0
AS21928 T-Mobile USA, Inc.60.5%0
AS37721 Issam Fayad60.5%0
AS3257 GTT50.4%0

Highest-risk new addresses

How these reports work

An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.

See also the network directory, provider IP ranges and the IP lookup tool.

← October 18, 2026 · October 2026 report · All reports · October 20, 2026 → · Markdown