IP Intelligence Authority Platform
New IP addresses in November 2026
Monthly threat report · UTC
158,923 new IP addresses were first observed in November 2026 across 6 daily reports; 0.8% of analysed addresses scored high risk.
- New addresses
- 158,923
- Analysed
- 126,149
- High risk
- 1,052 · 0.8%
- Moderate risk
- 10,519
- IPv6
- 57,199
Daily reports
| Day | New | Analysed | High risk |
|---|---|---|---|
| November 6, 2026 | 37,840 | 25,909 | 96 (0.4%) |
| November 5, 2026 | 15,055 | 11,350 | 125 (1.1%) |
| November 4, 2026 | 20,180 | 16,041 | 243 (1.5%) |
| November 3, 2026 | 30,278 | 26,647 | 254 (1%) |
| November 2, 2026 | 27,818 | 25,015 | 123 (0.5%) |
| November 1, 2026 | 27,752 | 21,187 | 211 (1%) |
Top countries this month
| Country | Addresses | Share | High risk |
|---|---|---|---|
| Seychelles (SC) | 34,651 | 27.5% | 1 |
| Brazil (BR) | 10,019 | 7.9% | 80 |
| United States (US) | 7,647 | 6.1% | 298 |
| Spain (ES) | 5,969 | 4.7% | 26 |
| France (FR) | 4,416 | 3.5% | 4 |
| United Kingdom (GB) | 3,832 | 3% | 23 |
| Colombia (CO) | 3,460 | 2.7% | 31 |
| Italy (IT) | 3,264 | 2.6% | 41 |
| Canada (CA) | 3,033 | 2.4% | 40 |
| Germany (DE) | 2,915 | 2.3% | 12 |
| Netherlands (NL) | 2,740 | 2.2% | 10 |
| Argentina (AR) | 2,496 | 2% | 33 |
| Vietnam (VN) | 2,212 | 1.8% | 4 |
| Chile (CL) | 2,149 | 1.7% | 20 |
| Mexico (MX) | 2,043 | 1.6% | 5 |
| Ecuador (EC) | 2,016 | 1.6% | 30 |
| United Arab Emirates (AE) | 1,505 | 1.2% | 1 |
| Indonesia (ID) | 1,397 | 1.1% | 13 |
| Venezuela (VE) | 1,360 | 1.1% | 12 |
| Portugal (PT) | 1,068 | 0.8% | 5 |
| Malaysia (MY) | 1,053 | 0.8% | 5 |
| Lithuania (LT) | 852 | 0.7% | 6 |
| Saudi Arabia (SA) | 835 | 0.7% | 0 |
| Philippines (PH) | 773 | 0.6% | 5 |
| Turkey (TR) | 736 | 0.6% | 4 |
Top networks this month
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS214483 sc-rapidseedbox-1-mnt | 10,517 | 8.3% | 0 |
| AS62610 Pilo IP BV | 1,268 | 1% | 7 |
| AS3215 FT-BRX | 687 | 0.5% | 0 |
| AS16509 Amazon Data Services Northern Virginia | 504 | 0.4% | 60 |
| AS15557 SFR Legal Contact | 401 | 0.3% | 0 |
| AS57269 AS8708-MNT | 394 | 0.3% | 0 |
| AS14618 Amazon Data Services Northern Virginia | 374 | 0.3% | 65 |
| AS14593 SpaceX Services Inc administrator | 351 | 0.3% | 0 |
| AS5384 ETISALAT-MNT | 321 | 0.3% | 0 |
| AS28573 Claro NXT Telecomunicacoes Ltda | 308 | 0.2% | 0 |
| AS3269 Assurance Staff Business | 304 | 0.2% | 0 |
| AS12479 JAZZTEL RIPE | 301 | 0.2% | 0 |
| AS15704 David Barbarin Aramendia | 284 | 0.2% | 0 |
| AS45899 IRT-VNNIC-AP | 275 | 0.2% | 3 |
| AS3209 Kabel Deutschland RIPE | 266 | 0.2% | 0 |
| AS3320 DTAG-NIC | 250 | 0.2% | 0 |
| AS577 Sympatico HSE | 239 | 0.2% | 2 |
| AS10620 Telmex Colombia S.A. | 234 | 0.2% | 0 |
| AS5089 AS5089-MNT | 227 | 0.2% | 0 |
| AS7552 IRT-VNNIC-AP | 205 | 0.2% | 1 |
| AS18881 TELEFÔNICA BRASIL S.A | 191 | 0.2% | 0 |
| AS5607 Sky UK Broadband Hostmaster | 185 | 0.1% | 0 |
| AS4788 IRT-MY-WEBE | 151 | 0.1% | 0 |
| AS7922 Comcast Cable Communications, Inc. | 139 | 0.1% | 0 |
| AS27947 Clientes NETLIFE Guayaquil - gepon | 95 | 0.1% | 1 |
Monthly country and network totals are combined from each day's top-25 rankings, so smaller contributors may be undercounted.
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.