New IP addresses on November 2, 2026

Daily threat report · UTC day

IPDebrief first observed 27,818 new IP addresses on November 2, 2026. 25,015 were analysed, and 0.5% of those scored high risk. The largest share came from Seychelles (19.8%).

New addresses
27,818
Analysed
25,015
High risk
123 · 0.5%
Moderate risk
2,307
IPv6
9,416

Risk and network type

123 high risk2,307 moderate22,585 low
Network typeAddressesShare of analysed
Hosting / cloud990.4%
VPN00%
Proxy00%
Tor exit00%

Top countries

CountryAddressesShareHigh risk
Seychelles (SC)4,95019.8%0
Brazil (BR)2,2088.8%4
United States (US)1,7146.9%32
Spain (ES)1,3155.3%4
France (FR)1,1044.4%0
United Kingdom (GB)9113.6%1
Italy (IT)7883.2%8
Colombia (CO)7713.1%7
Germany (DE)6642.7%1
Canada (CA)5892.4%3
Vietnam (VN)5622.2%0
Argentina (AR)5282.1%2
Chile (CL)4831.9%2
Mexico (MX)4751.9%1
Netherlands (NL)4311.7%0
Ecuador (EC)4001.6%4
Indonesia (ID)3721.5%2
Portugal (PT)3231.3%0
United Arab Emirates (AE)3211.3%0
Venezuela (VE)2951.2%2
Malaysia (MY)2731.1%1
Ukraine (UA)2511%2
Russia (RU)2370.9%1
Turkey (TR)2280.9%1
Philippines (PH)2190.9%0

Top networks

NetworkAddressesShareHigh risk
AS214483 sc-rapidseedbox-1-mnt1,2194.9%0
AS62610 Pilo IP BV1470.6%0
AS3215 FT-BRX1260.5%0
AS16509 Amazon Data Services Northern Virginia1080.4%15
AS14618 Amazon Data Services Northern Virginia920.4%14
AS28573 Claro NXT Telecomunicacoes Ltda750.3%0
AS57269 AS8708-MNT750.3%0
AS15557 SFR Legal Contact730.3%0
AS5384 ETISALAT-MNT680.3%0
AS7922 Comcast Cable Communications, Inc.660.3%0
AS14593 SpaceX Services Inc administrator660.3%0
AS3269 Assurance Staff Business650.3%0
AS18881 TELEFÔNICA BRASIL S.A620.2%0
AS45899 IRT-VNNIC-AP580.2%0
AS15704 David Barbarin Aramendia570.2%0
AS5410 BYTEL-MNT560.2%0
AS12479 JAZZTEL RIPE510.2%0
AS577 Sympatico HSE460.2%0
AS8075 Divya Quamara460.2%1
AS5089 AS5089-MNT450.2%0
AS3209 Kabel Deutschland RIPE440.2%0
AS3320 DTAG-NIC440.2%0
AS1267 MNT-IUNET410.2%0
AS27901 Pacifico Cable SPA.410.2%0
AS10620 Telmex Colombia S.A.400.2%0

Highest-risk new addresses

How these reports work

An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.

See also the network directory, provider IP ranges and the IP lookup tool.

← November 1, 2026 · November 2026 report · All reports · November 3, 2026 → · Markdown