IP Intelligence Authority Platform
New IP addresses on November 4, 2026
Daily threat report · UTC day
IPDebrief first observed 20,180 new IP addresses on November 4, 2026. 16,041 were analysed, and 1.5% of those scored high risk. The largest share came from Seychelles (20%).
- New addresses
- 20,180
- Analysed
- 16,041
- High risk
- 243 · 1.5%
- Moderate risk
- 1,544
- IPv6
- 5,387
Risk and network type
243 high risk1,544 moderate14,254 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 96 | 0.6% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| Seychelles (SC) | 3,214 | 20% | 0 |
| Brazil (BR) | 1,489 | 9.3% | 25 |
| United States (US) | 1,238 | 7.7% | 43 |
| Spain (ES) | 974 | 6.1% | 6 |
| France (FR) | 643 | 4% | 0 |
| United Kingdom (GB) | 550 | 3.4% | 7 |
| Italy (IT) | 501 | 3.1% | 4 |
| Colombia (CO) | 485 | 3% | 9 |
| Germany (DE) | 462 | 2.9% | 4 |
| Canada (CA) | 440 | 2.7% | 8 |
| Argentina (AR) | 351 | 2.2% | 10 |
| Chile (CL) | 343 | 2.1% | 4 |
| Vietnam (VN) | 316 | 2% | 2 |
| Netherlands (NL) | 307 | 1.9% | 6 |
| Ecuador (EC) | 302 | 1.9% | 12 |
| Mexico (MX) | 280 | 1.7% | 2 |
| United Arab Emirates (AE) | 236 | 1.5% | 1 |
| Portugal (PT) | 202 | 1.3% | 2 |
| Venezuela (VE) | 202 | 1.3% | 2 |
| Indonesia (ID) | 197 | 1.2% | 1 |
| Malaysia (MY) | 175 | 1.1% | 2 |
| Philippines (PH) | 162 | 1% | 2 |
| Saudi Arabia (SA) | 145 | 0.9% | 0 |
| Thailand (TH) | 142 | 0.9% | 0 |
| Lithuania (LT) | 111 | 0.7% | 3 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS214483 sc-rapidseedbox-1-mnt | 1,636 | 10.2% | 0 |
| AS62610 Pilo IP BV | 202 | 1.3% | 1 |
| AS3215 FT-BRX | 166 | 1% | 0 |
| AS57269 AS8708-MNT | 102 | 0.6% | 0 |
| AS16509 Amazon Data Services Northern Virginia | 101 | 0.6% | 9 |
| AS14618 Amazon Data Services Northern Virginia | 83 | 0.5% | 10 |
| AS15557 SFR Legal Contact | 82 | 0.5% | 0 |
| AS12479 JAZZTEL RIPE | 81 | 0.5% | 0 |
| AS14593 SpaceX Services Inc administrator | 77 | 0.5% | 0 |
| AS3269 Assurance Staff Business | 67 | 0.4% | 0 |
| AS45899 IRT-VNNIC-AP | 65 | 0.4% | 2 |
| AS5384 ETISALAT-MNT | 63 | 0.4% | 0 |
| AS28573 Claro NXT Telecomunicacoes Ltda | 62 | 0.4% | 0 |
| AS15704 David Barbarin Aramendia | 60 | 0.4% | 0 |
| AS3209 Kabel Deutschland RIPE | 59 | 0.4% | 0 |
| AS3320 DTAG-NIC | 58 | 0.4% | 0 |
| AS7552 IRT-VNNIC-AP | 58 | 0.4% | 0 |
| AS577 Sympatico HSE | 57 | 0.4% | 2 |
| AS5089 AS5089-MNT | 57 | 0.4% | 0 |
| AS5607 Sky UK Broadband Hostmaster | 53 | 0.3% | 0 |
| AS10620 Telmex Colombia S.A. | 53 | 0.3% | 0 |
| AS4788 IRT-MY-WEBE | 49 | 0.3% | 0 |
| AS18881 TELEFÔNICA BRASIL S.A | 45 | 0.3% | 0 |
| AS30722 Vodafone Italy | 45 | 0.3% | 0 |
| AS12430 VODAFONE IP MANAGER | 44 | 0.3% | 0 |
Highest-risk new addresses
- 101.56.185.187
- 103.11.48.42
- 103.120.167.97
- 103.184.16.108
- 103.252.201.45
- 103.57.204.8
- 103.6.151.87
- 103.96.38.250
- 109.164.51.76
- 109.199.252.161
- 110.74.213.198
- 113.171.152.3
- 114.130.96.185
- 116.87.119.190
- 116.88.79.132
- 118.179.26.107
- 120.23.169.195
- 122.60.54.190
- 131.0.202.45
- 131.186.13.15
- 139.135.76.141
- 14.252.110.120
- 142.127.6.249
- 142.183.237.30
- 142.90.35.239
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← November 3, 2026 · November 2026 report · All reports · November 5, 2026 → · Markdown