Iran (IR)
Country threat intelligence — currently active blacklist entries cross-referenced against the ipinsights.io sensor network.
Blacklisted IPs
1,749
Distinct IPs currently on at least one active blacklist.
Most recent listing
Timestamp of the freshest active listing from this country. All times UTC, ISO 8601.
Dominant category
Network Attack
· 1,228 IPs
Most common blacklist category observed across IPs from this country.
Category breakdown
| Category | Distinct IPs | Share |
|---|---|---|
| Network Attack | 1,228 | 70.2% |
| malicious | 701 | 40.1% |
| SSH/Telnet Brute Force | 59 | 3.4% |
| bruteforce | 34 | 1.9% |
| HTTP Probe | 12 | 0.7% |
| malware | 10 | 0.6% |
| spam | 10 | 0.6% |
| VoIP / SIP Probe | 6 | 0.3% |
| ICS/SCADA Probe | 3 | 0.2% |
| SMTP Probe | 2 | 0.1% |
| tor_exit | 2 | 0.1% |
| Android Debug Bridge Probe | 1 | 0.1% |
| compromised | 1 | 0.1% |
Recently listed IPs from Iran
Most recent 50 of 1,749 currently-active blacklisted IPs, newest first.
| IP | Category | Source | Listed at |
|---|---|---|---|
| 5.126.154.255 | Network Attack | IPInsights Honeypot | |
| 5.237.10.131 | Network Attack | IPInsights Honeypot | |
| 80.191.216.9 | Network Attack | IPInsights Honeypot | |
| 151.238.182.184 | Network Attack | IPInsights Honeypot | |
| 2.180.84.42 | Network Attack | IPInsights Honeypot | |
| 185.93.89.64 | Network Attack | IPInsights Honeypot | |
| 2.180.231.125 | Network Attack | IPInsights Honeypot | |
| 2.180.199.186 | Network Attack | IPInsights Honeypot | |
| 5.237.19.80 | Network Attack | IPInsights Honeypot | |
| 185.13.230.247 | Network Attack | IPInsights Honeypot | |
| 78.109.200.147 | SSH/Telnet Brute Force | Malicious IP | |
| 81.28.32.66 | malicious | ipsum | |
| 2.180.32.104 | SSH/Telnet Brute Force | Malicious IP | |
| 176.65.177.123 | Network Attack | IPInsights Honeypot | |
| 5.116.245.36 | Network Attack | IPInsights Honeypot | |
| 37.98.110.88 | Network Attack | IPInsights Honeypot | |
| 151.234.104.16 | Network Attack | IPInsights Honeypot | |
| 5.237.90.98 | Network Attack | IPInsights Honeypot | |
| 62.60.131.43 | malicious | Malicious Outgoing IP | |
| 94.183.207.212 | Network Attack | IPInsights Honeypot | |
| 5.232.2.235 | Network Attack | IPInsights Honeypot | |
| 46.100.248.130 | SSH/Telnet Brute Force | Malicious IP | |
| 62.60.130.91 | malicious | Malicious IP | |
| 62.60.134.150 | Network Attack | ipsum | |
| 2.181.59.128 | Network Attack | IPInsights Honeypot | |
| 93.117.122.78 | Network Attack | IPInsights Honeypot | |
| 87.107.95.106 | Network Attack | IPInsights Honeypot | |
| 2.180.207.252 | Network Attack | IPInsights Honeypot | |
| 79.127.94.79 | Network Attack | IPInsights Honeypot | |
| 5.232.83.195 | Network Attack | IPInsights Honeypot | |
| 5.120.116.136 | Network Attack | IPInsights Honeypot | |
| 185.110.30.146 | Network Attack | ipsum | |
| 2.180.177.134 | Network Attack | IPInsights Honeypot | |
| 78.39.217.248 | Network Attack | IPInsights Honeypot | |
| 172.94.9.55 | Network Attack | Malicious IP | |
| 178.131.9.189 | Network Attack | IPInsights Honeypot | |
| 2.182.115.33 | Network Attack | IPInsights Honeypot | |
| 194.147.142.182 | Network Attack | IPInsights Honeypot | |
| 92.43.161.240 | Network Attack | IPInsights Honeypot | |
| 185.255.91.28 | malicious | ipsum | |
| 5.42.217.221 | Network Attack | IPInsights Honeypot | |
| 86.104.90.120 | SSH/Telnet Brute Force | IPInsights Honeypot | |
| 217.218.10.45 | SSH/Telnet Brute Force | Malicious IP | |
| 5.232.30.43 | Network Attack | IPInsights Honeypot | |
| 5.232.112.27 | Network Attack | IPInsights Honeypot | |
| 5.237.94.10 | Network Attack | IPInsights Honeypot | |
| 37.255.239.81 | malware | ThreatFox IOC IPs | |
| 5.201.188.88 | Network Attack | IPInsights Honeypot | |
| 5.232.27.96 | Network Attack | IPInsights Honeypot | |
| 85.133.221.189 | SSH/Telnet Brute Force | IPInsights Honeypot |