New IP addresses on October 30, 2026

Daily threat report · UTC day

IPDebrief first observed 30,140 new IP addresses on October 30, 2026. 20,398 were analysed, and 0.5% of those scored high risk. The largest share came from Seychelles (61.2%).

New addresses
30,140
Analysed
20,398
High risk
101 · 0.5%
Moderate risk
603
IPv6
21,931

Risk and network type

101 high risk603 moderate19,694 low
Network typeAddressesShare of analysed
Hosting / cloud1090.5%
VPN00%
Proxy00%
Tor exit00%

Top countries

CountryAddressesShareHigh risk
Seychelles (SC)12,49161.2%0
United States (US)1,1005.4%54
Brazil (BR)9154.5%4
Netherlands (NL)8694.3%4
Lithuania (LT)4142%0
Spain (ES)3711.8%2
France (FR)2821.4%0
Colombia (CO)2251.1%1
United Kingdom (GB)2211.1%3
Italy (IT)1800.9%2
Vietnam (VN)1690.8%0
Germany (DE)1590.8%0
Argentina (AR)1420.7%2
Indonesia (ID)1270.6%0
Mexico (MX)1210.6%0
Turkey (TR)1130.6%0
Russia (RU)1120.5%1
Ukraine (UA)1100.5%3
Chile (CL)1090.5%0
India (IN)1040.5%0
Ecuador (EC)900.4%1
Philippines (PH)880.4%0
Portugal (PT)830.4%1
Bangladesh (BD)820.4%1
South Africa (ZA)740.4%0

Top networks

NetworkAddressesShareHigh risk
AS214483 sc-rapidseedbox-1-mnt4,38521.5%0
AS62610 Pilo IP BV5762.8%0
AS16509 Amazon Data Services Northern Virginia1460.7%34
AS13335 Cloudflare, Inc.1090.5%0
AS14618 Amazon Data Services Northern Virginia680.3%12
AS3215 FT-BRX490.2%0
AS28573 Claro NXT Telecomunicacoes Ltda410.2%0
AS8075 Divya Quamara380.2%0
AS18881 TELEFÔNICA BRASIL S.A350.2%0
AS15557 SFR Legal Contact280.1%0
AS57269 AS8708-MNT260.1%0
AS3352 Administradores Telefonica de Espana220.1%0
AS8151 Gestión de direccionamiento UniNet220.1%0
AS5410 BYTEL-MNT210.1%0
AS10620 Telmex Colombia S.A.210.1%0
AS12479 JAZZTEL RIPE210.1%0
AS15704 David Barbarin Aramendia200.1%0
AS13489 Colombia Móvil190.1%0
AS4788 IRT-MY-WEBE170.1%0
AS5089 AS5089-MNT170.1%0
AS7303 Telecom Argentina S.A.170.1%0
AS7552 IRT-VNNIC-AP170.1%0
AS14593 SpaceX Services Inc administrator170.1%0
AS396982 Google LLC170.1%0
AS2856 BT CENTRAL PLUS - OPERATIONAL SUPPORT160.1%0

Highest-risk new addresses

How these reports work

An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.

See also the network directory, provider IP ranges and the IP lookup tool.

← October 29, 2026 · October 2026 report · All reports · October 31, 2026 → · Markdown