Iran (IR) Threat Intelligence

Iran has 15,394 malicious IP addresses with 518,728 abuse reports. Top threat categories include ssh bruteforce, spam, web attack, generic bruteforce, repeat offender. Top attacking networks: Iran Telecommunication Company PJS (2,457 IPs), Farahoosh Dena PLC (1,600 IPs), Limited Network LTD (1,258 IPs). Data collected since 2023-08-30, last activity 2026-04-16.

Threat Assessment: Iran shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are ssh bruteforce, spam, web attack. The majority of threats originate from networks operated by Iran Telecommunication Company PJS and Farahoosh Dena PLC.