Iran (IR)
Country threat intelligence — currently active blacklist entries cross-referenced against the ipinsights.io sensor network.
Blacklisted IPs
1,769
Distinct IPs currently on at least one active blacklist.
Most recent listing
Timestamp of the freshest active listing from this country. All times UTC, ISO 8601.
Dominant category
Network Attack
· 1,271 IPs
Most common blacklist category observed across IPs from this country.
Category breakdown
| Category | Distinct IPs | Share |
|---|---|---|
| Network Attack | 1,271 | 71.8% |
| malicious | 705 | 39.9% |
| SSH/Telnet Brute Force | 59 | 3.3% |
| bruteforce | 42 | 2.4% |
| HTTP Probe | 12 | 0.7% |
| malware | 10 | 0.6% |
| spam | 10 | 0.6% |
| VoIP / SIP Probe | 6 | 0.3% |
| ICS/SCADA Probe | 3 | 0.2% |
| SMTP Probe | 2 | 0.1% |
| Android Debug Bridge Probe | 1 | 0.1% |
| compromised | 1 | 0.1% |
| tor_exit | 1 | 0.1% |
Recently listed IPs from Iran
Most recent 50 of 1,769 currently-active blacklisted IPs, newest first.
| IP | Category | Source | Listed at |
|---|---|---|---|
| 185.112.150.97 | SSH/Telnet Brute Force | Malicious IP | |
| 185.141.107.79 | Network Attack | Malicious Outgoing IP | |
| 77.237.185.154 | Network Attack | ipsum | |
| 37.156.155.41 | VoIP / SIP Probe | ipsum | |
| 185.93.89.79 | Network Attack | ipsum | |
| 185.93.89.48 | Network Attack | IPInsights Honeypot | |
| 172.94.9.161 | Network Attack | ipsum | |
| 46.245.92.86 | Network Attack | Malicious IP | |
| 185.224.177.129 | Network Attack | Malicious Outgoing IP | |
| 85.185.190.40 | Network Attack | IPInsights Honeypot | |
| 84.241.25.138 | Network Attack | IPInsights Honeypot | |
| 130.193.77.236 | Network Attack | Malicious IP | |
| 89.165.0.66 | Network Attack | IPInsights Honeypot | |
| 84.241.6.230 | Network Attack | IPInsights Honeypot | |
| 94.183.0.70 | Network Attack | ipsum | |
| 178.131.112.85 | Network Attack | IPInsights Honeypot | |
| 5.238.111.68 | Network Attack | Malicious Outgoing IP | |
| 62.60.130.219 | Network Attack | Malicious IP | |
| 87.107.101.30 | Network Attack | ipsum | |
| 84.241.13.118 | malicious | ipsum | |
| 2.189.5.218 | Network Attack | IPInsights Honeypot | |
| 5.62.231.243 | Network Attack | IPInsights Honeypot | |
| 62.60.130.148 | Network Attack | Malicious IP | |
| 80.191.203.16 | Network Attack | IPInsights Honeypot | |
| 109.122.251.18 | malicious | ipsum | |
| 151.239.32.121 | VoIP / SIP Probe | ipsum | |
| 37.137.29.145 | VoIP / SIP Probe | Malicious Outgoing IP | |
| 185.166.104.3 | Network Attack | ipsum | |
| 2.180.180.253 | Network Attack | IPInsights Honeypot | |
| 212.33.201.61 | Network Attack | Malicious Outgoing IP | |
| 78.110.121.101 | Network Attack | Malicious Outgoing IP | |
| 5.125.125.55 | Network Attack | IPInsights Honeypot | |
| 5.122.114.154 | Network Attack | IPInsights Honeypot | |
| 46.100.87.144 | Network Attack | IPInsights Honeypot | |
| 85.9.97.143 | Network Attack | IPInsights Honeypot | |
| 37.32.41.104 | Network Attack | Malicious Outgoing IP | |
| 62.60.135.244 | Network Attack | ipsum | |
| 5.160.228.186 | malicious | Malicious IP | |
| 152.89.12.101 | Network Attack | Malicious IP | |
| 79.127.113.111 | Network Attack | IPInsights Honeypot | |
| 89.41.19.150 | Network Attack | IPInsights Honeypot | |
| 62.133.46.8 | Network Attack | Malicious Outgoing IP | |
| 217.218.48.35 | Network Attack | IPInsights Honeypot | |
| 178.131.90.22 | Network Attack | IPInsights Honeypot | |
| 178.22.124.60 | Network Attack | IPInsights Honeypot | |
| 62.60.130.90 | Network Attack | IPInsights Honeypot | |
| 94.184.22.121 | SSH/Telnet Brute Force | Malicious IP | |
| 84.241.0.107 | Network Attack | ipsum | |
| 86.107.175.254 | Network Attack | IPInsights Honeypot | |
| 94.182.177.206 | malicious | ipsum |