Country Threat Intelligence Summary: Iran
Loading country intelligence data...
Iran (IR) Threat Intelligence
IRIran has 30,551 malicious IP addresses with 1,066,909 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, severe abuse. Top attacking networks: Iran Telecommunication Company PJS (6,839 IPs), Afranet (2,173 IPs), Limited Network LTD (2,075 IPs). Data collected since 2023-08-30, last activity 2026-10-13.
Threat Assessment: Iran shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Iran Telecommunication Company PJS and Afranet.
Total Reports
1,066,909
Unique IPs
30,551
First Seen
2023-08-30
Last Activity
2026-10-13
Top Threat Categories
Tcp Scan
176,106
Suspicious Activity
91,099
High Threat
37,145
Malware Distribution
21,704
Severe Abuse
5,943
Top Attacking Networks
Most Reported IPs in Iran
62.60.130.219
3,108 reports
62.60.130.148
2,740 reports
78.109.200.147
1,386 reports
85.133.193.72
1,348 reports
2.180.32.104
1,256 reports
Access this data via API
Get Iran threat intelligence programmatically.
curl https://ip.wayscloud.services/api/country/IR
Check any IP from Iran
Look up threat intelligence for a specific IP address.
Related:
Country Threat Ranking
Country Risk Trends →
Top Malicious IPs →
AS58224 Intelligence
AS25184 Intelligence
AS213790 Intelligence
Global Attack Trends
Detect Malicious Traffic
Loading threat intelligence data...