IP Intelligence Authority Platform
New IP addresses on November 5, 2026
Daily threat report · UTC day
IPDebrief first observed 15,055 new IP addresses on November 5, 2026. 11,350 were analysed, and 1.1% of those scored high risk. The largest share came from Seychelles (26.9%).
- New addresses
- 15,055
- Analysed
- 11,350
- High risk
- 125 · 1.1%
- Moderate risk
- 938
- IPv6
- 4,292
Risk and network type
125 high risk938 moderate10,287 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 77 | 0.7% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| Seychelles (SC) | 3,053 | 26.9% | 0 |
| Brazil (BR) | 912 | 8% | 11 |
| United States (US) | 780 | 6.9% | 26 |
| Spain (ES) | 527 | 4.6% | 4 |
| France (FR) | 350 | 3.1% | 1 |
| United Kingdom (GB) | 343 | 3% | 3 |
| Colombia (CO) | 325 | 2.9% | 1 |
| Canada (CA) | 316 | 2.8% | 4 |
| Germany (DE) | 289 | 2.5% | 2 |
| Italy (IT) | 271 | 2.4% | 2 |
| Argentina (AR) | 238 | 2.1% | 6 |
| Netherlands (NL) | 231 | 2% | 1 |
| Chile (CL) | 228 | 2% | 3 |
| Ecuador (EC) | 198 | 1.7% | 4 |
| Vietnam (VN) | 191 | 1.7% | 2 |
| Mexico (MX) | 171 | 1.5% | 0 |
| United Arab Emirates (AE) | 158 | 1.4% | 0 |
| Venezuela (VE) | 144 | 1.3% | 1 |
| Indonesia (ID) | 103 | 0.9% | 1 |
| Portugal (PT) | 102 | 0.9% | 1 |
| Saudi Arabia (SA) | 102 | 0.9% | 0 |
| Lithuania (LT) | 98 | 0.9% | 3 |
| India (IN) | 93 | 0.8% | 1 |
| Thailand (TH) | 84 | 0.7% | 0 |
| Turkey (TR) | 83 | 0.7% | 1 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS214483 sc-rapidseedbox-1-mnt | 1,651 | 14.5% | 0 |
| AS62610 Pilo IP BV | 191 | 1.7% | 3 |
| AS16509 Amazon Data Services Northern Virginia | 73 | 0.6% | 9 |
| AS3215 FT-BRX | 69 | 0.6% | 0 |
| AS15557 SFR Legal Contact | 61 | 0.5% | 0 |
| AS5384 ETISALAT-MNT | 51 | 0.4% | 0 |
| AS14593 SpaceX Services Inc administrator | 49 | 0.4% | 0 |
| AS14618 Amazon Data Services Northern Virginia | 48 | 0.4% | 11 |
| AS12479 JAZZTEL RIPE | 47 | 0.4% | 0 |
| AS57269 AS8708-MNT | 45 | 0.4% | 0 |
| AS15704 David Barbarin Aramendia | 43 | 0.4% | 0 |
| AS5607 Sky UK Broadband Hostmaster | 40 | 0.4% | 0 |
| AS3209 Kabel Deutschland RIPE | 39 | 0.3% | 0 |
| AS45899 IRT-VNNIC-AP | 39 | 0.3% | 1 |
| AS3269 Assurance Staff Business | 36 | 0.3% | 0 |
| AS7552 IRT-VNNIC-AP | 36 | 0.3% | 1 |
| AS27947 Clientes NETLIFE Guayaquil - gepon | 36 | 0.3% | 1 |
| AS1267 MNT-IUNET | 34 | 0.3% | 0 |
| AS3320 DTAG-NIC | 32 | 0.3% | 0 |
| AS577 Sympatico HSE | 31 | 0.3% | 0 |
| AS10620 Telmex Colombia S.A. | 31 | 0.3% | 0 |
| AS28573 Claro NXT Telecomunicacoes Ltda | 31 | 0.3% | 0 |
| AS5089 AS5089-MNT | 30 | 0.3% | 0 |
| AS17072 TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V. | 30 | 0.3% | 0 |
| AS12353 AS12353-MNT | 28 | 0.2% | 0 |
Highest-risk new addresses
- 100.24.162.191
- 100.56.198.129
- 102.207.191.38
- 103.11.48.66
- 103.151.47.236
- 103.152.147.112
- 103.167.233.38
- 103.226.195.63
- 103.6.10.41
- 103.76.45.164
- 109.245.27.225
- 113.171.87.233
- 115.79.196.11
- 120.19.31.171
- 128.127.121.195
- 13.128.249.42
- 134.224.4.41
- 145.40.149.243
- 149.107.253.162
- 149.19.25.8
- 149.62.205.44
- 157.119.83.170
- 16.148.159.176
- 16.58.198.229
- 170.247.215.96
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← November 4, 2026 · November 2026 report · All reports · November 6, 2026 → · Markdown