IP Intelligence Authority Platform
New IP addresses on November 3, 2026
Daily threat report · UTC day
IPDebrief first observed 30,278 new IP addresses on November 3, 2026. 26,647 were analysed, and 1% of those scored high risk. The largest share came from Seychelles (14.9%).
- New addresses
- 30,278
- Analysed
- 26,647
- High risk
- 254 · 1%
- Moderate risk
- 2,593
- IPv6
- 7,981
Risk and network type
254 high risk2,593 moderate23,800 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 119 | 0.4% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| Seychelles (SC) | 3,979 | 14.9% | 1 |
| Brazil (BR) | 2,810 | 10.5% | 24 |
| United States (US) | 1,682 | 6.3% | 56 |
| Spain (ES) | 1,558 | 5.8% | 7 |
| France (FR) | 1,167 | 4.4% | 3 |
| Colombia (CO) | 991 | 3.7% | 7 |
| United Kingdom (GB) | 986 | 3.7% | 7 |
| Italy (IT) | 823 | 3.1% | 9 |
| Canada (CA) | 781 | 2.9% | 8 |
| Germany (DE) | 728 | 2.7% | 2 |
| Argentina (AR) | 670 | 2.5% | 7 |
| Vietnam (VN) | 604 | 2.3% | 0 |
| Ecuador (EC) | 553 | 2.1% | 8 |
| Chile (CL) | 552 | 2.1% | 8 |
| Mexico (MX) | 545 | 2% | 1 |
| Netherlands (NL) | 402 | 1.5% | 1 |
| United Arab Emirates (AE) | 401 | 1.5% | 0 |
| Venezuela (VE) | 389 | 1.5% | 6 |
| Indonesia (ID) | 359 | 1.3% | 4 |
| Portugal (PT) | 306 | 1.1% | 2 |
| Malaysia (MY) | 288 | 1.1% | 0 |
| Philippines (PH) | 271 | 1% | 3 |
| Saudi Arabia (SA) | 256 | 1% | 0 |
| Russia (RU) | 242 | 0.9% | 3 |
| Thailand (TH) | 241 | 0.9% | 0 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS214483 sc-rapidseedbox-1-mnt | 1,213 | 4.6% | 0 |
| AS3215 FT-BRX | 194 | 0.7% | 0 |
| AS62610 Pilo IP BV | 160 | 0.6% | 3 |
| AS57269 AS8708-MNT | 110 | 0.4% | 0 |
| AS15557 SFR Legal Contact | 97 | 0.4% | 0 |
| AS16509 Amazon Data Services Northern Virginia | 92 | 0.3% | 11 |
| AS14593 SpaceX Services Inc administrator | 91 | 0.3% | 0 |
| AS14618 Amazon Data Services Northern Virginia | 91 | 0.3% | 19 |
| AS12479 JAZZTEL RIPE | 89 | 0.3% | 0 |
| AS5384 ETISALAT-MNT | 85 | 0.3% | 0 |
| AS10620 Telmex Colombia S.A. | 83 | 0.3% | 0 |
| AS28573 Claro NXT Telecomunicacoes Ltda | 79 | 0.3% | 0 |
| AS3209 Kabel Deutschland RIPE | 74 | 0.3% | 0 |
| AS3269 Assurance Staff Business | 73 | 0.3% | 0 |
| AS7922 Comcast Cable Communications, Inc. | 73 | 0.3% | 0 |
| AS577 Sympatico HSE | 72 | 0.3% | 0 |
| AS15704 David Barbarin Aramendia | 69 | 0.3% | 0 |
| AS3320 DTAG-NIC | 67 | 0.3% | 0 |
| AS5089 AS5089-MNT | 67 | 0.3% | 0 |
| AS7552 IRT-VNNIC-AP | 66 | 0.2% | 0 |
| AS5607 Sky UK Broadband Hostmaster | 65 | 0.2% | 0 |
| AS27947 Clientes NETLIFE Guayaquil - gepon | 59 | 0.2% | 0 |
| AS18881 TELEFÔNICA BRASIL S.A | 55 | 0.2% | 0 |
| AS45899 IRT-VNNIC-AP | 54 | 0.2% | 0 |
| AS4788 IRT-MY-WEBE | 50 | 0.2% | 0 |
Highest-risk new addresses
- 100.51.103.64
- 100.55.114.67
- 100.60.168.206
- 100.63.28.203
- 101.115.137.128
- 103.187.68.224
- 103.189.200.28
- 103.194.152.23
- 103.206.79.39
- 103.248.206.210
- 103.252.201.12
- 103.78.16.152
- 103.84.230.69
- 107.22.83.206
- 108.63.119.107
- 109.164.40.1
- 109.164.53.160
- 109.199.246.245
- 109.56.87.229
- 109.62.45.180
- 116.88.2.70
- 121.101.134.168
- 123.253.93.247
- 128.127.123.160
- 131.153.171.250
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← November 2, 2026 · November 2026 report · All reports · November 4, 2026 → · Markdown