IP Intelligence Authority Platform
New IP addresses on October 28, 2026
Daily threat report · UTC day
IPDebrief first observed 31,713 new IP addresses on October 28, 2026. 19,972 were analysed, and 0.3% of those scored high risk. The largest share came from Seychelles (77.5%).
- New addresses
- 31,713
- Analysed
- 19,972
- High risk
- 59 · 0.3%
- Moderate risk
- 279
- IPv6
- 25,056
Risk and network type
59 high risk279 moderate19,634 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 227 | 1.1% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| Seychelles (SC) | 15,469 | 77.5% | 0 |
| United States (US) | 1,153 | 5.8% | 34 |
| Netherlands (NL) | 988 | 4.9% | 1 |
| Lithuania (LT) | 544 | 2.7% | 0 |
| Brazil (BR) | 237 | 1.2% | 2 |
| United Kingdom (GB) | 99 | 0.5% | 3 |
| India (IN) | 85 | 0.4% | 2 |
| France (FR) | 57 | 0.3% | 0 |
| South Africa (ZA) | 50 | 0.3% | 0 |
| Philippines (PH) | 49 | 0.2% | 0 |
| Colombia (CO) | 48 | 0.2% | 0 |
| Germany (DE) | 45 | 0.2% | 2 |
| Spain (ES) | 45 | 0.2% | 0 |
| Argentina (AR) | 43 | 0.2% | 0 |
| Bangladesh (BD) | 42 | 0.2% | 0 |
| Canada (CA) | 41 | 0.2% | 2 |
| Iraq (IQ) | 39 | 0.2% | 0 |
| Mexico (MX) | 39 | 0.2% | 0 |
| Malaysia (MY) | 35 | 0.2% | 0 |
| Saudi Arabia (SA) | 35 | 0.2% | 0 |
| Indonesia (ID) | 34 | 0.2% | 0 |
| Italy (IT) | 34 | 0.2% | 0 |
| Turkey (TR) | 34 | 0.2% | 0 |
| Thailand (TH) | 33 | 0.2% | 0 |
| Vietnam (VN) | 32 | 0.2% | 0 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS214483 sc-rapidseedbox-1-mnt | 5,408 | 27.1% | 0 |
| AS62610 Pilo IP BV | 767 | 3.8% | 0 |
| AS16509 Amazon Data Services Northern Virginia | 153 | 0.8% | 19 |
| AS8075 Divya Quamara | 117 | 0.6% | 0 |
| AS14618 Amazon Data Services Northern Virginia | 86 | 0.4% | 10 |
| AS13335 Cloudflare, Inc. | 32 | 0.2% | 0 |
| AS20940 Akamai Technologies, Inc. | 30 | 0.2% | 0 |
| AS16625 Akamai Technologies, Inc. | 14 | 0.1% | 4 |
| AS1299 Arelion Sweden AB | 13 | 0.1% | 0 |
| AS7922 Comcast Cable Communications, Inc. | 10 | 0.1% | 0 |
| AS9299 IRT-PLDT-PH | 10 | 0.1% | 0 |
| AS25019 SAUDINET-STC | 10 | 0.1% | 0 |
| AS396982 Google LLC | 9 | 0% | 0 |
| AS15557 SFR Legal Contact | 8 | 0% | 0 |
| AS14593 SpaceX Services Inc administrator | 7 | 0% | 0 |
| AS15169 Google LLC | 7 | 0% | 0 |
| AS55836 IRT-RELIANCEJIO-IN | 7 | 0% | 0 |
| AS4788 IRT-MY-WEBE | 6 | 0% | 0 |
| AS5384 ETISALAT-MNT | 6 | 0% | 0 |
| AS6939 Hurricane Electric LLC | 6 | 0% | 0 |
| AS9121 AS9121-MNT | 6 | 0% | 0 |
| AS25369 HYDRA-MNT | 6 | 0% | 0 |
| AS714 Apple Inc. | 5 | 0% | 4 |
| AS5089 AS5089-MNT | 5 | 0% | 0 |
| AS18881 TELEFÔNICA BRASIL S.A | 5 | 0% | 0 |
Highest-risk new addresses
- 100.21.29.175
- 100.29.139.142
- 103.255.180.1
- 103.255.180.9
- 16.144.162.136
- 16.50.84.90
- 161.69.236.28
- 17.248.202.10
- 17.248.202.160
- 17.248.241.77
- 17.248.254.143
- 178.17.162.74
- 18.176.239.65
- 18.213.252.128
- 18.225.25.77
- 18.225.74.118
- 18.60.243.66
- 184.197.217.36
- 185.107.193.170
- 185.70.42.17
- 185.70.42.45
- 188.64.206.124
- 190.95.183.158
- 200.211.222.89
- 200.25.45.231
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← October 27, 2026 · October 2026 report · All reports · October 29, 2026 → · Markdown