Iran (IR) Threat Intelligence

Iran has 16,942 malicious IP addresses with 544,811 abuse reports. Top threat categories include suspicious activity, severe abuse, ssh bruteforce, moderate threat, high threat. Top attacking networks: Iran Telecommunication Company PJS (3,095 IPs), Farahoosh Dena PLC (1,607 IPs), Afranet (1,094 IPs). Data collected since 2023-08-30, last activity 2026-04-05.

Threat Assessment: Iran shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, ssh bruteforce. The majority of threats originate from networks operated by Iran Telecommunication Company PJS and Farahoosh Dena PLC.