New IP addresses on October 29, 2026

Daily threat report · UTC day

IPDebrief first observed 33,019 new IP addresses on October 29, 2026. 20,200 were analysed, and 0.4% of those scored high risk. The largest share came from Seychelles (61%).

New addresses
33,019
Analysed
20,200
High risk
84 · 0.4%
Moderate risk
718
IPv6
22,989

Risk and network type

84 high risk718 moderate19,398 low
Network typeAddressesShare of analysed
Hosting / cloud1530.8%
VPN00%
Proxy00%
Tor exit00%

Top countries

CountryAddressesShareHigh risk
Seychelles (SC)12,31561%0
Brazil (BR)1,1595.7%4
United States (US)9254.6%32
Netherlands (NL)8514.2%2
Lithuania (LT)3881.9%0
Spain (ES)3161.6%0
France (FR)2751.4%0
Colombia (CO)2551.3%1
United Kingdom (GB)2201.1%6
Argentina (AR)1890.9%3
Italy (IT)1840.9%1
Vietnam (VN)1590.8%0
Mexico (MX)1440.7%1
Russia (RU)1380.7%1
Germany (DE)1350.7%1
Chile (CL)1300.6%0
Indonesia (ID)1200.6%2
India (IN)1150.6%2
Ukraine (UA)1130.6%2
Turkey (TR)900.4%1
Portugal (PT)800.4%0
Ecuador (EC)770.4%0
Philippines (PH)750.4%1
South Africa (ZA)740.4%0
Bangladesh (BD)700.3%3

Top networks

NetworkAddressesShareHigh risk
AS214483 sc-rapidseedbox-1-mnt4,02319.9%0
AS62610 Pilo IP BV5072.5%0
AS16509 Amazon Data Services Northern Virginia1160.6%11
AS14618 Amazon Data Services Northern Virginia790.4%13
AS8075 Divya Quamara650.3%0
AS28573 Claro NXT Telecomunicacoes Ltda440.2%0
AS3215 FT-BRX310.2%0
AS18881 TELEFÔNICA BRASIL S.A290.1%0
AS5410 BYTEL-MNT260.1%0
AS13335 Cloudflare, Inc.220.1%0
AS12322 Administrative Contact for ProXad210.1%0
AS15557 SFR Legal Contact200.1%0
AS7552 IRT-VNNIC-AP190.1%0
AS12479 JAZZTEL RIPE190.1%0
AS57269 AS8708-MNT190.1%0
AS3269 Assurance Staff Business180.1%0
AS3352 Administradores Telefonica de Espana170.1%0
AS10620 Telmex Colombia S.A.170.1%0
AS45899 IRT-VNNIC-AP170.1%0
AS2856 BT CENTRAL PLUS - OPERATIONAL SUPPORT160.1%0
AS8151 Gestión de direccionamiento UniNet150.1%0
AS14593 SpaceX Services Inc administrator150.1%0
AS15704 David Barbarin Aramendia140.1%0
AS3209 Kabel Deutschland RIPE130.1%0
AS3243 TELEPAC-MNT130.1%0

Highest-risk new addresses

How these reports work

An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.

See also the network directory, provider IP ranges and the IP lookup tool.

← October 28, 2026 · October 2026 report · All reports · October 30, 2026 → · Markdown