IP Intelligence Authority Platform
New IP addresses on October 27, 2026
Daily threat report · UTC day
IPDebrief first observed 5,142 new IP addresses on October 27, 2026. 1,153 were analysed, and 8.2% of those scored high risk. The largest share came from United States (77.5%).
- New addresses
- 5,142
- Analysed
- 1,153
- High risk
- 95 · 8.2%
- Moderate risk
- 52
- IPv6
- 19
Risk and network type
95 high risk52 moderate1,006 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 315 | 27.3% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| United States (US) | 893 | 77.5% | 77 |
| United Kingdom (GB) | 42 | 3.6% | 6 |
| Ireland (IE) | 31 | 2.7% | 1 |
| Germany (DE) | 13 | 1.1% | 1 |
| Brazil (BR) | 12 | 1% | 0 |
| Sweden (SE) | 11 | 1% | 1 |
| France (FR) | 10 | 0.9% | 0 |
| Australia (AU) | 9 | 0.8% | 0 |
| India (IN) | 9 | 0.8% | 1 |
| Netherlands (NL) | 8 | 0.7% | 1 |
| Canada (CA) | 7 | 0.6% | 0 |
| Indonesia (ID) | 7 | 0.6% | 2 |
| Japan (JP) | 7 | 0.6% | 0 |
| South Africa (ZA) | 7 | 0.6% | 0 |
| Israel (IL) | 6 | 0.5% | 0 |
| Denmark (DK) | 5 | 0.4% | 0 |
| Armenia (AM) | 4 | 0.3% | 3 |
| Croatia (HR) | 4 | 0.3% | 0 |
| Moldova (MD) | 4 | 0.3% | 0 |
| Austria (AT) | 3 | 0.3% | 0 |
| Spain (ES) | 3 | 0.3% | 0 |
| Hong Kong (HK) | 3 | 0.3% | 0 |
| Italy (IT) | 3 | 0.3% | 0 |
| Poland (PL) | 3 | 0.3% | 0 |
| Qatar (QA) | 3 | 0.3% | 0 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS16509 Amazon Data Services Northern Virginia | 285 | 24.7% | 15 |
| AS8075 Divya Quamara | 214 | 18.6% | 2 |
| AS14618 Amazon Data Services Northern Virginia | 159 | 13.8% | 38 |
| AS13335 Cloudflare, Inc. | 40 | 3.5% | 0 |
| AS20940 Akamai Technologies, Inc. | 39 | 3.4% | 0 |
| AS714 Apple Inc. | 38 | 3.3% | 5 |
| AS396982 Google LLC | 24 | 2.1% | 1 |
| AS15169 Google LLC | 19 | 1.6% | 0 |
| AS174 IRT-DATAUTAMA-ID | 13 | 1.1% | 0 |
| AS16625 Akamai Technologies, Inc. | 11 | 1% | 3 |
| AS32934 meta-mnt | 11 | 1% | 0 |
| AS3356 Level 3 Parent, LLC | 8 | 0.7% | 0 |
| AS36647 Yahoo Holdings Inc. | 8 | 0.7% | 0 |
| AS10310 Yahoo Holdings Inc. | 7 | 0.6% | 0 |
| AS7377 University of California, San Diego | 6 | 0.5% | 0 |
| AS31898 Oracle Corporation | 6 | 0.5% | 0 |
| AS6939 Hurricane Electric LLC | 5 | 0.4% | 0 |
| AS8926 Moldtelecom LIR Adminstrators | 5 | 0.4% | 0 |
| AS9121 AS9121-MNT | 5 | 0.4% | 0 |
| AS25369 HYDRA-MNT | 5 | 0.4% | 0 |
| AS31027 nia-mnt | 5 | 0.4% | 0 |
| AS36996 Albertine Shipena | 5 | 0.4% | 0 |
| AS37100 Simon Mayoye | 5 | 0.4% | 0 |
| AS44684 MYTHIC-MNT | 5 | 0.4% | 5 |
| AS397162 Sumofiber | 5 | 0.4% | 5 |
Highest-risk new addresses
- 100.30.253.86
- 100.56.27.61
- 100.57.185.236
- 103.87.184.126
- 104.237.203.50
- 113.197.110.34
- 123.108.254.232
- 13.128.249.86
- 13.216.110.213
- 13.223.213.67
- 137.164.11.20
- 137.164.23.177
- 142.254.112.138
- 16.59.255.12
- 16.63.55.221
- 162.221.117.102
- 162.221.117.117
- 162.221.117.122
- 162.221.118.98
- 17.248.202.161
- 17.248.202.162
- 17.248.202.18
- 17.248.254.77
- 17.248.254.78
- 176.126.243.3
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← October 26, 2026 · October 2026 report · All reports · October 28, 2026 → · Markdown