IP Intelligence Authority Platform
New IP addresses on November 6, 2026
Daily threat report · UTC day
IPDebrief first observed 37,840 new IP addresses on November 6, 2026. 25,909 were analysed, and 0.4% of those scored high risk. The largest share came from Seychelles (32%).
- New addresses
- 37,840
- Analysed
- 25,909
- High risk
- 96 · 0.4%
- Moderate risk
- 2,122
- IPv6
- 12,084
Risk and network type
96 high risk2,122 moderate23,691 low
| Network type | Addresses | Share of analysed |
|---|---|---|
| Hosting / cloud | 49 | 0.2% |
| VPN | 0 | 0% |
| Proxy | 0 | 0% |
| Tor exit | 0 | 0% |
Top countries
| Country | Addresses | Share | High risk |
|---|---|---|---|
| Seychelles (SC) | 8,299 | 32% | 0 |
| Brazil (BR) | 1,527 | 5.9% | 13 |
| Spain (ES) | 1,158 | 4.5% | 4 |
| United States (US) | 927 | 3.6% | 15 |
| France (FR) | 761 | 2.9% | 0 |
| Canada (CA) | 733 | 2.8% | 5 |
| United Kingdom (GB) | 704 | 2.7% | 4 |
| Italy (IT) | 583 | 2.3% | 4 |
| Colombia (CO) | 580 | 2.2% | 4 |
| Netherlands (NL) | 559 | 2.2% | 1 |
| Germany (DE) | 522 | 2% | 0 |
| Argentina (AR) | 492 | 1.9% | 7 |
| Ecuador (EC) | 412 | 1.6% | 2 |
| Chile (CL) | 406 | 1.6% | 3 |
| United Arab Emirates (AE) | 389 | 1.5% | 0 |
| Mexico (MX) | 389 | 1.5% | 1 |
| Vietnam (VN) | 337 | 1.3% | 0 |
| Saudi Arabia (SA) | 332 | 1.3% | 0 |
| Venezuela (VE) | 330 | 1.3% | 1 |
| Iraq (IQ) | 325 | 1.3% | 2 |
| Turkey (TR) | 304 | 1.2% | 0 |
| Lithuania (LT) | 287 | 1.1% | 0 |
| Thailand (TH) | 241 | 0.9% | 0 |
| Malaysia (MY) | 201 | 0.8% | 0 |
| Indonesia (ID) | 196 | 0.8% | 1 |
Top networks
| Network | Addresses | Share | High risk |
|---|---|---|---|
| AS214483 sc-rapidseedbox-1-mnt | 1,918 | 7.4% | 0 |
| AS62610 Pilo IP BV | 217 | 0.8% | 0 |
| AS3215 FT-BRX | 81 | 0.3% | 0 |
| AS5384 ETISALAT-MNT | 54 | 0.2% | 0 |
| AS15557 SFR Legal Contact | 54 | 0.2% | 0 |
| AS14593 SpaceX Services Inc administrator | 42 | 0.2% | 0 |
| AS812 Rogers Communications Canada Inc. | 40 | 0.2% | 0 |
| AS57269 AS8708-MNT | 38 | 0.1% | 0 |
| AS3269 Assurance Staff Business | 36 | 0.1% | 0 |
| AS12430 VODAFONE IP MANAGER | 36 | 0.1% | 0 |
| AS15704 David Barbarin Aramendia | 35 | 0.1% | 0 |
| AS577 Sympatico HSE | 33 | 0.1% | 0 |
| AS12479 JAZZTEL RIPE | 33 | 0.1% | 0 |
| AS25019 SAUDINET-STC | 31 | 0.1% | 0 |
| AS4788 IRT-MY-WEBE | 30 | 0.1% | 0 |
| AS16509 Amazon Data Services Northern Virginia | 29 | 0.1% | 6 |
| AS3209 Kabel Deutschland RIPE | 28 | 0.1% | 0 |
| AS3320 DTAG-NIC | 28 | 0.1% | 0 |
| AS5089 AS5089-MNT | 28 | 0.1% | 0 |
| AS28573 Claro NXT Telecomunicacoes Ltda | 28 | 0.1% | 0 |
| AS5607 Sky UK Broadband Hostmaster | 27 | 0.1% | 0 |
| AS30722 Vodafone Italy | 27 | 0.1% | 0 |
| AS45899 IRT-VNNIC-AP | 27 | 0.1% | 0 |
| AS7552 IRT-VNNIC-AP | 26 | 0.1% | 0 |
| AS9121 AS9121-MNT | 26 | 0.1% | 0 |
Highest-risk new addresses
- 103.182.174.49
- 103.226.194.247
- 103.229.85.125
- 103.248.217.218
- 112.201.189.200
- 113.212.108.84
- 116.68.162.194
- 128.65.37.92
- 138.59.2.107
- 143.208.15.61
- 152.37.118.150
- 158.47.218.217
- 158.47.219.158
- 158.47.240.109
- 170.199.96.28
- 170.247.215.225
- 176.100.214.58
- 176.56.66.92
- 177.185.21.192
- 177.221.76.157
- 177.36.178.91
- 177.55.226.65
- 178.120.150.73
- 179.54.16.106
- 181.209.97.188
How these reports work
An address is counted on the UTC day it was first observed. A report is published about six hours after that day ends, so most addresses have been analysed by then. Risk bands follow the dossier pages: high is 70 or more, moderate 40–69, low below 40. Counts are a snapshot at publication; each address's own page shows its current assessment.
See also the network directory, provider IP ranges and the IP lookup tool.
← November 5, 2026 · November 2026 report · All reports · Markdown