Iran (IR)
Country threat intelligence — currently active blacklist entries cross-referenced against the ipinsights.io sensor network.
Blacklisted IPs
1,694
Distinct IPs currently on at least one active blacklist.
Most recent listing
Timestamp of the freshest active listing from this country. All times UTC, ISO 8601.
Dominant category
Network Attack
· 1,167 IPs
Most common blacklist category observed across IPs from this country.
Category breakdown
| Category | Distinct IPs | Share |
|---|---|---|
| Network Attack | 1,167 | 68.9% |
| malicious | 723 | 42.7% |
| SSH/Telnet Brute Force | 57 | 3.4% |
| bruteforce | 28 | 1.7% |
| HTTP Probe | 12 | 0.7% |
| VoIP / SIP Probe | 11 | 0.6% |
| malware | 10 | 0.6% |
| spam | 10 | 0.6% |
| ICS/SCADA Probe | 3 | 0.2% |
| compromised | 2 | 0.1% |
| SMTP Probe | 2 | 0.1% |
| tor_exit | 2 | 0.1% |
| Android Debug Bridge Probe | 1 | 0.1% |
Recently listed IPs from Iran
Most recent 50 of 1,694 currently-active blacklisted IPs, newest first.
| IP | Category | Source | Listed at |
|---|---|---|---|
| 85.198.19.251 | malicious | Malicious IP | |
| 194.9.57.121 | malicious | ipsum | |
| 151.239.24.141 | malware | ThreatFox IOC IPs | |
| 37.148.101.203 | malicious | ipsum | |
| 31.7.66.163 | malicious | AbuseIPDB Blocklist 30d | |
| 37.255.239.81 | malware | ThreatFox IOC IPs | |
| 93.126.1.30 | malicious | Malicious Outgoing IP | |
| 62.60.130.182 | malicious | Malicious IP | |
| 172.94.9.250 | malware | ThreatFox IOC IPs | |
| 62.60.130.232 | malicious | ipsum | |
| 62.60.130.233 | malicious | ipsum | |
| 62.60.130.142 | malicious | ipsum | |
| 185.93.89.10 | malicious | ipsum | |
| 192.253.248.180 | malicious | CriticalPathSecurity IOCs | |
| 185.93.89.167 | malicious | Malicious IP | |
| 185.93.89.96 | tor_exit | ipsum | |
| 185.221.239.162 | malicious | CriticalPathSecurity IOCs | |
| 62.60.130.227 | malicious | Malicious IP | |
| 62.60.130.117 | malicious | ipsum | |
| 192.253.248.122 | malicious | ipsum | |
| 185.164.72.226 | malicious | CriticalPathSecurity IOCs | |
| 172.94.9.202 | malicious | ipsum | |
| 172.94.9.169 | malicious | AbuseIPDB Blocklist 30d | |
| 185.93.89.138 | malicious | CriticalPathSecurity IOCs | |
| 5.10.249.153 | malicious | Malicious Outgoing IP | |
| 5.127.14.171 | malicious | Malicious Outgoing IP | |
| 5.74.219.200 | malicious | CriticalPathSecurity IOCs | |
| 5.74.198.223 | malicious | CriticalPathSecurity IOCs | |
| 172.94.9.97 | malware | ThreatFox IOC IPs | |
| 188.209.10.4 | malicious | ipsum | |
| 2.179.60.126 | malicious | AbuseIPDB Blocklist 30d | |
| 5.160.103.246 | malicious | ipsum | |
| 2.191.8.173 | malicious | ipsum | |
| 217.218.153.160 | malicious | ipsum | |
| 217.218.152.15 | malicious | ipsum | |
| 217.218.153.62 | malicious | ipsum | |
| 192.253.248.46 | malicious | ipsum | |
| 192.253.248.43 | malicious | AbuseIPDB Blocklist 30d | |
| 217.218.152.91 | malicious | ipsum | |
| 217.218.152.158 | malicious | ipsum | |
| 5.56.132.177 | malicious | Malicious Outgoing IP | |
| 5.236.93.129 | malicious | Malicious Outgoing IP | |
| 5.232.82.14 | malicious | Malicious Outgoing IP | |
| 5.201.184.206 | malicious | Malicious Outgoing IP | |
| 5.201.136.114 | malicious | Malicious Outgoing IP | |
| 5.200.72.26 | malicious | Malicious Outgoing IP | |
| 5.160.3.5 | malicious | Malicious Outgoing IP | |
| 5.160.164.197 | malicious | Malicious Outgoing IP | |
| 5.160.164.176 | malicious | Malicious Outgoing IP | |
| 5.160.161.46 | malicious | Malicious Outgoing IP |