IP Intelligence Authority Platform
New IP addresses on November 1, 2026
Daily threat report · UTC day
IPDebrief first observed 27,752 new IP addresses on November 1, 2026. 21,187 were analysed, and 1% of those scored high risk. The largest share came from Seychelles (52.7%).
- New addresses
- 27,752
- Analysed
- 21,187
- High risk
- 211 · 1%
- Moderate risk
- 1,015
- IPv6
- 18,039
Risk and network type
211 high risk1,015 moderate19,961 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 187 | 0.9% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| Seychelles (SC) | 11,156 | 52.7% | 0 |
| United States (US) | 1,306 | 6.2% | 126 |
| Brazil (BR) | 1,073 | 5.1% | 3 |
| Netherlands (NL) | 810 | 3.8% | 1 |
| Spain (ES) | 437 | 2.1% | 1 |
| France (FR) | 391 | 1.8% | 0 |
| Lithuania (LT) | 356 | 1.7% | 0 |
| United Kingdom (GB) | 338 | 1.6% | 1 |
| Colombia (CO) | 308 | 1.5% | 3 |
| Italy (IT) | 298 | 1.4% | 14 |
| Germany (DE) | 250 | 1.2% | 3 |
| Argentina (AR) | 217 | 1% | 1 |
| Vietnam (VN) | 202 | 1% | 0 |
| Mexico (MX) | 183 | 0.9% | 0 |
| Canada (CA) | 174 | 0.8% | 12 |
| Indonesia (ID) | 170 | 0.8% | 4 |
| Ecuador (EC) | 151 | 0.7% | 0 |
| Russia (RU) | 145 | 0.7% | 0 |
| Ukraine (UA) | 143 | 0.7% | 2 |
| Chile (CL) | 137 | 0.6% | 0 |
| Portugal (PT) | 135 | 0.6% | 0 |
| Philippines (PH) | 121 | 0.6% | 0 |
| Turkey (TR) | 121 | 0.6% | 2 |
| India (IN) | 120 | 0.6% | 1 |
| Malaysia (MY) | 116 | 0.5% | 2 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS214483 sc-rapidseedbox-1-mnt | 2,880 | 13.6% | 0 |
| AS62610 Pilo IP BV | 351 | 1.7% | 0 |
| AS16509 Amazon Data Services Northern Virginia | 101 | 0.5% | 10 |
| AS13335 Cloudflare, Inc. | 78 | 0.4% | 0 |
| AS16276 OVH SAS | 72 | 0.3% | 10 |
| AS14618 Amazon Data Services Northern Virginia | 60 | 0.3% | 11 |
| AS7979 Servers Guy | 59 | 0.3% | 32 |
| AS3215 FT-BRX | 51 | 0.2% | 0 |
| AS15557 SFR Legal Contact | 34 | 0.2% | 0 |
| AS28573 Claro NXT Telecomunicacoes Ltda | 33 | 0.2% | 0 |
| AS45899 IRT-VNNIC-AP | 32 | 0.2% | 0 |
| AS18881 TELEFÔNICA BRASIL S.A | 29 | 0.1% | 0 |
| AS401678 BisectHosting | 28 | 0.1% | 28 |
| AS701 Verizon Business | 27 | 0.1% | 1 |
| AS3269 Assurance Staff Business | 27 | 0.1% | 0 |
| AS10620 Telmex Colombia S.A. | 27 | 0.1% | 0 |
| AS14593 SpaceX Services Inc administrator | 26 | 0.1% | 0 |
| AS57269 AS8708-MNT | 24 | 0.1% | 0 |
| AS3209 Kabel Deutschland RIPE | 22 | 0.1% | 0 |
| AS4788 IRT-MY-WEBE | 22 | 0.1% | 0 |
| AS3320 DTAG-NIC | 21 | 0.1% | 0 |
| AS3352 Administradores Telefonica de Espana | 21 | 0.1% | 0 |
| AS5410 BYTEL-MNT | 20 | 0.1% | 0 |
| AS15704 David Barbarin Aramendia | 20 | 0.1% | 0 |
| AS7552 IRT-VNNIC-AP | 19 | 0.1% | 0 |
Highest-risk new addresses
- 100.31.11.44
- 100.55.206.36
- 100.59.212.250
- 100.60.174.211
- 100.61.68.66
- 101.58.194.251
- 103.206.79.171
- 108.170.0.85
- 109.105.102.105
- 109.105.97.248
- 109.245.35.3
- 111.92.16.159
- 116.68.169.252
- 116.68.169.254
- 121.101.131.105
- 123.108.254.40
- 124.158.118.2
- 124.158.118.21
- 124.158.118.25
- 124.158.118.3
- 124.158.118.30
- 124.158.118.46
- 124.158.118.58
- 13.184.129.207
- 13.223.221.5
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← October 31, 2026 · November 2026 report · All reports · November 2, 2026 → · Markdown