# New IP addresses on October 27, 2026

IPDebrief first observed 5,142 new IP addresses on October 27, 2026. 1,153 were analysed, and 8.2% of those scored high risk. The largest share came from United States (77.5%).

Canonical: https://ipdebrief.com/reports/2026-10-27

## Totals

| Metric | Value |
|---|---|
| New addresses | 5,142 |
| Analysed | 1,153 |
| High risk | 95 (8.2%) |
| Moderate risk | 52 |
| Low risk | 1,006 |
| IPv6 | 19 |
| Hosting / cloud | 315 |
| VPN | 0 |
| Proxy | 0 |
| Tor exit | 0 |

## Top countries

| Country | Addresses | High risk |
|---|---:|---:|
| [United States (US)](https://ipdebrief.com/country/US) | 893 | 77 |
| [United Kingdom (GB)](https://ipdebrief.com/country/GB) | 42 | 6 |
| [Ireland (IE)](https://ipdebrief.com/country/IE) | 31 | 1 |
| [Germany (DE)](https://ipdebrief.com/country/DE) | 13 | 1 |
| [Brazil (BR)](https://ipdebrief.com/country/BR) | 12 | 0 |
| [Sweden (SE)](https://ipdebrief.com/country/SE) | 11 | 1 |
| [France (FR)](https://ipdebrief.com/country/FR) | 10 | 0 |
| [Australia (AU)](https://ipdebrief.com/country/AU) | 9 | 0 |
| [India (IN)](https://ipdebrief.com/country/IN) | 9 | 1 |
| [Netherlands (NL)](https://ipdebrief.com/country/NL) | 8 | 1 |
| [Canada (CA)](https://ipdebrief.com/country/CA) | 7 | 0 |
| [Indonesia (ID)](https://ipdebrief.com/country/ID) | 7 | 2 |
| [Japan (JP)](https://ipdebrief.com/country/JP) | 7 | 0 |
| [South Africa (ZA)](https://ipdebrief.com/country/ZA) | 7 | 0 |
| [Israel (IL)](https://ipdebrief.com/country/IL) | 6 | 0 |
| [Denmark (DK)](https://ipdebrief.com/country/DK) | 5 | 0 |
| [Armenia (AM)](https://ipdebrief.com/country/AM) | 4 | 3 |
| [Croatia (HR)](https://ipdebrief.com/country/HR) | 4 | 0 |
| [Moldova (MD)](https://ipdebrief.com/country/MD) | 4 | 0 |
| [Austria (AT)](https://ipdebrief.com/country/AT) | 3 | 0 |
| [Spain (ES)](https://ipdebrief.com/country/ES) | 3 | 0 |
| [Hong Kong (HK)](https://ipdebrief.com/country/HK) | 3 | 0 |
| [Italy (IT)](https://ipdebrief.com/country/IT) | 3 | 0 |
| [Poland (PL)](https://ipdebrief.com/country/PL) | 3 | 0 |
| [Qatar (QA)](https://ipdebrief.com/country/QA) | 3 | 0 |

## Top networks

| Network | Addresses | High risk |
|---|---:|---:|
| [AS16509 Amazon Data Services Northern Virginia](https://ipdebrief.com/asn/16509) | 285 | 15 |
| [AS8075 Divya Quamara](https://ipdebrief.com/asn/8075) | 214 | 2 |
| [AS14618 Amazon Data Services Northern Virginia](https://ipdebrief.com/asn/14618) | 159 | 38 |
| [AS13335 Cloudflare, Inc.](https://ipdebrief.com/asn/13335) | 40 | 0 |
| [AS20940 Akamai Technologies, Inc.](https://ipdebrief.com/asn/20940) | 39 | 0 |
| [AS714 Apple Inc.](https://ipdebrief.com/asn/714) | 38 | 5 |
| [AS396982 Google LLC](https://ipdebrief.com/asn/396982) | 24 | 1 |
| [AS15169 Google LLC](https://ipdebrief.com/asn/15169) | 19 | 0 |
| [AS174 IRT-DATAUTAMA-ID](https://ipdebrief.com/asn/174) | 13 | 0 |
| [AS16625 Akamai Technologies, Inc.](https://ipdebrief.com/asn/16625) | 11 | 3 |
| [AS32934 meta-mnt](https://ipdebrief.com/asn/32934) | 11 | 0 |
| [AS3356 Level 3 Parent, LLC](https://ipdebrief.com/asn/3356) | 8 | 0 |
| [AS36647 Yahoo Holdings Inc.](https://ipdebrief.com/asn/36647) | 8 | 0 |
| [AS10310 Yahoo Holdings Inc.](https://ipdebrief.com/asn/10310) | 7 | 0 |
| [AS7377 University of California, San Diego](https://ipdebrief.com/asn/7377) | 6 | 0 |
| [AS31898 Oracle Corporation](https://ipdebrief.com/asn/31898) | 6 | 0 |
| [AS6939 Hurricane Electric LLC](https://ipdebrief.com/asn/6939) | 5 | 0 |
| [AS8926 Moldtelecom LIR Adminstrators](https://ipdebrief.com/asn/8926) | 5 | 0 |
| [AS9121 AS9121-MNT](https://ipdebrief.com/asn/9121) | 5 | 0 |
| [AS25369 HYDRA-MNT](https://ipdebrief.com/asn/25369) | 5 | 0 |
| [AS31027 nia-mnt](https://ipdebrief.com/asn/31027) | 5 | 0 |
| [AS36996 Albertine Shipena](https://ipdebrief.com/asn/36996) | 5 | 0 |
| [AS37100 Simon Mayoye](https://ipdebrief.com/asn/37100) | 5 | 0 |
| [AS44684 MYTHIC-MNT](https://ipdebrief.com/asn/44684) | 5 | 5 |
| [AS397162 Sumofiber](https://ipdebrief.com/asn/397162) | 5 | 5 |

## Highest-risk new addresses

| Address | Risk | Country | ASN |
|---|---:|---|---|
| [100.30.253.86](https://ipdebrief.com/100.30.253.86) | 70 | US | AS14618 |
| [100.56.27.61](https://ipdebrief.com/100.56.27.61) | 70 | US | AS14618 |
| [100.57.185.236](https://ipdebrief.com/100.57.185.236) | 70 | US | AS14618 |
| [103.87.184.126](https://ipdebrief.com/103.87.184.126) | 70 | ID | AS136106 |
| [104.237.203.50](https://ipdebrief.com/104.237.203.50) | 70 | US | AS20278 |
| [113.197.110.34](https://ipdebrief.com/113.197.110.34) | 70 | ID | AS55699 |
| [123.108.254.232](https://ipdebrief.com/123.108.254.232) | 70 | US | AS9902 |
| [13.128.249.86](https://ipdebrief.com/13.128.249.86) | 70 | US | AS16509 |
| [13.216.110.213](https://ipdebrief.com/13.216.110.213) | 70 | US | AS14618 |
| [13.223.213.67](https://ipdebrief.com/13.223.213.67) | 70 | US | AS14618 |
| [137.164.11.20](https://ipdebrief.com/137.164.11.20) | 70 | US | AS2152 |
| [137.164.23.177](https://ipdebrief.com/137.164.23.177) | 70 | US | AS2152 |
| [142.254.112.138](https://ipdebrief.com/142.254.112.138) | 70 | US | AS46375 |
| [16.59.255.12](https://ipdebrief.com/16.59.255.12) | 70 | US | AS16509 |
| [16.63.55.221](https://ipdebrief.com/16.63.55.221) | 70 | CH | AS16509 |
| [162.221.117.102](https://ipdebrief.com/162.221.117.102) | 70 | US | AS397162 |
| [162.221.117.117](https://ipdebrief.com/162.221.117.117) | 70 | US | AS397162 |
| [162.221.117.122](https://ipdebrief.com/162.221.117.122) | 70 | US | AS397162 |
| [162.221.118.98](https://ipdebrief.com/162.221.118.98) | 70 | US | AS397162 |
| [17.248.202.161](https://ipdebrief.com/17.248.202.161) | 70 | US | AS714 |
| [17.248.202.162](https://ipdebrief.com/17.248.202.162) | 70 | US | AS714 |
| [17.248.202.18](https://ipdebrief.com/17.248.202.18) | 70 | US | AS714 |
| [17.248.254.77](https://ipdebrief.com/17.248.254.77) | 70 | US | AS714 |
| [17.248.254.78](https://ipdebrief.com/17.248.254.78) | 70 | US | AS714 |
| [176.126.243.3](https://ipdebrief.com/176.126.243.3) | 70 | GB | AS44684 |

Risk bands: high is 70 or more, moderate 40–69, low below 40. Counts reflect analysis at publication; individual profiles keep updating.
