Measured Risk
IP 172.94.9.120 threat rating: 5/10 from 23 observations.
Attention-worthy behavior detected. Confidence: 87%.
More threatening than 30% of monitored IPs
IP Address
172.94.9.120
IPv4
Public
IR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Below Average Risk
Iran
Location
Limited Network LTD
ASN 213790
23
Reports
Honeypot
Data Source
Threat Categories
Email Spam
23
Technical Details
Email spam involves mass distribution of unwanted emails, often for advertising, phishing, or malware delivery.
Recommended Mitigations
Implement SPF, DKIM, DMARC, and use reputable email filtering services.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
29. May 2026
Last Activity
29. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 213790) with generally good reputation. The ISP Limited Network LTD maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Standard security protocols sufficient. Monitor but no immediate blocking required.
Long-term blocking recommended.
Reputation Summary
Threat Level
5/10
Medium
Medium
Activity Frequency
8/10
High
Confidence Score
87%
Verified
Confidence History
29. May 2026
87%
Current
Stable
Trend
Security Reports (23)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 172.94.9.120
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
IR
- ASN
- AS213790
- ISP
- Limited Network LTD
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 23
- First Reported
- 29 May 2026
- Last Reported
- 29 May 2026, 20:32
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS213790
Limited Network LTD
IR
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
151
Total IPs Monitored
7,957
Total Reports
52.7
Reports per IP
Network Context
This IP address belongs to Limited Network LTD (AS213790), which manages 151 IP addresses in our monitoring system. Out of these, 7,957 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
30
%
Global Threat Ranking
This IP is more threatening than 30% of all IPs in our database.
Below Average ThreatGlobal Comparison
Compared against 199,576 reported IPs worldwide
Threat Level
5/10
avg: 5.3
=
Total Reports
23
avg: 23
=
Network Comparison
Compared against 176 IPs in ASN 213790
Threat Level
5/10
network avg: 7.3
-
Total Reports
23
network avg: 51
--
Network Limited Network LTD has overall threat level 1/10
Geographic Comparison
Compared against 591 IPs in IR
Threat Level
5/10
country avg: 7.1
-
Total Reports
23
country avg: 55
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
29 May 2026
23 reports
Daily Average
0.8
reports/day
Most Active
Friday
23 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
3/10
Current Threat
3/10
Distribution of threat categories reported over time.
Top Threat Categories
Email Spam
23
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,273 threat incidents tracked globally • Last 24h: 18,965 Logs
FEED
Top Threat Sources
-
01
United States38,457 20.5% -
02
India29,090 15.5% -
03
China26,027 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.3/10
Avg Threat
96%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
185.93.89.27
10/10
Confidence
99%
Reports
75
Location
IR
IR
172.94.9.154
10/10
Confidence
99%
Reports
70
Location
IR
IR
172.94.9.153
8/10
Confidence
99%
Reports
67
Location
IR
IR
192.253.248.45
8/10
Confidence
99%
Reports
63
Location
IR
IR
172.94.9.253
10/10
Confidence
97%
Reports
102
Location
US
US
172.94.9.205
8/10
Confidence
97%
Reports
29
Location
IR
IR
192.253.248.124
10/10
Confidence
97%
Reports
23
Location
IR
IR
192.253.248.43
8/10
Confidence
97%
Reports
20
Location
IR
IR
192.253.248.131
8/10
Confidence
97%
Reports
17
Location
IR
IR
172.94.9.65
10/10
Confidence
96%
Reports
59
Location
IR
IR
192.253.248.180
10/10
Confidence
94%
Reports
528
Location
IR
IR
185.93.89.193
10/10
Confidence
94%
Reports
362
Location
IR
IR
185.93.89.191
10/10
Confidence
94%
Reports
360
Location
IR
IR
185.93.89.192
10/10
Confidence
94%
Reports
358
Location
IR
IR
185.93.89.190
10/10
Confidence
94%
Reports
355
Location
IR
IR
185.93.89.170
8/10
Confidence
94%
Reports
120
Location
IR
IR
192.253.248.169
10/10
Confidence
94%
Reports
37
Location
IR
IR
185.93.89.111
10/10
Confidence
94%
Reports
30
Location
IR
IR
185.93.89.110
8/10
Confidence
94%
Reports
24
Location
IR
IR
172.94.9.168
10/10
Confidence
94%
Reports
17
Location
IR
IR
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.5/10
Avg Threat
87%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
172.94.9.154
10/10
Confidence
99%
Reports
70
Location
IR
IR
172.94.9.153
8/10
Confidence
99%
Reports
67
Location
IR
IR
172.94.9.62
10/10
Confidence
97%
Reports
112
Location
US
US
172.94.9.253
10/10
Confidence
97%
Reports
102
Location
US
US
172.94.9.205
8/10
Confidence
97%
Reports
29
Location
IR
IR
172.94.9.65
10/10
Confidence
96%
Reports
59
Location
IR
IR
172.94.9.168
10/10
Confidence
94%
Reports
17
Location
IR
IR
172.94.9.159
8/10
Confidence
90%
Reports
68
Location
IR
IR
172.94.9.59
8/10
Confidence
87%
Reports
64
Location
IR
IR
172.94.9.63
8/10
Confidence
86%
Reports
119
Location
US
US
172.94.9.157
8/10
Confidence
86%
Reports
52
Location
IR
IR
172.94.9.126
8/10
Confidence
85%
Reports
14
Location
IR
IR
172.94.9.61
8/10
Confidence
83%
Reports
60
Location
US
US
172.94.9.125
8/10
Confidence
83%
Reports
56
Location
IR
IR
172.94.9.204
8/10
Confidence
79%
Reports
12
Location
IR
IR
172.94.9.48
8/10
Confidence
77%
Reports
62
Location
IR
IR
172.94.9.66
8/10
Confidence
77%
Reports
58
Location
US
US
172.94.9.156
8/10
Confidence
77%
Reports
56
Location
IR
IR
172.94.9.127
8/10
Confidence
77%
Reports
51
Location
IR
IR
172.94.9.158
8/10
Confidence
76%
Reports
59
Location
IR
IR
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
62.60.130.233
8/10
Confidence
100%
Reports
144
ISP
Cipher Operatio...
62.60.130.227
8/10
Confidence
100%
Reports
122
ISP
Cipher Operatio...
62.60.130.230
8/10
Confidence
100%
Reports
103
ISP
Cipher Operatio...
62.60.130.235
8/10
Confidence
100%
Reports
90
ISP
Cipher Operatio...
217.60.241.103
8/10
Confidence
100%
Reports
52
ISP
Pfcloud UG (haf...
62.60.130.182
8/10
Confidence
100%
Reports
46
ISP
Cipher Operatio...
62.60.130.128
8/10
Confidence
100%
Reports
40
ISP
Cipher Operatio...
185.93.89.27
10/10
Confidence
99%
Reports
75
ISP
Limited Network...
172.94.9.154
10/10
Confidence
99%
Reports
70
ISP
Limited Network...
172.94.9.153
8/10
Confidence
99%
Reports
67
ISP
Limited Network...
192.253.248.45
8/10
Confidence
99%
Reports
63
ISP
Limited Network...
62.60.130.239
8/10
Confidence
99%
Reports
28
ISP
Cipher Operatio...
94.101.184.145
10/10
Confidence
98%
Reports
15
ISP
Noyan Abr Arvan...
62.60.130.224
10/10
Confidence
97%
Reports
78
ISP
Cipher Operatio...
62.60.130.223
8/10
Confidence
97%
Reports
55
ISP
Cipher Operatio...
IPs with similar threat level and confidence scores.
15
Related IPs
8.1/10
Avg Threat
87%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
207.90.244.27
8/10
Confidence
87%
Reports
9,893
Location
US
US
137.184.32.56
8/10
Confidence
87%
Reports
6,898
Location
US
US
146.190.153.30
8/10
Confidence
87%
Reports
6,802
Location
US
US
24.199.126.56
8/10
Confidence
87%
Reports
6,734
Location
US
US
209.38.70.156
8/10
Confidence
87%
Reports
6,693
Location
US
US
143.198.225.197
8/10
Confidence
87%
Reports
6,442
Location
US
US
64.89.160.82
8/10
Confidence
87%
Reports
1,099
Location
GB
GB
81.29.142.100
8/10
Confidence
87%
Reports
978
Location
RU
RU
130.12.180.65
10/10
Confidence
87%
Reports
823
Location
NL
NL
81.168.83.103
8/10
Confidence
87%
Reports
723
Location
GB
GB
62.60.130.169
7/10
Confidence
87%
Reports
700
Location
IR
IR
92.63.197.78
7/10
Confidence
87%
Reports
660
Location
UA
UA
167.94.146.51
10/10
Confidence
87%
Reports
646
Location
US
US
65.49.20.66
8/10
Confidence
87%
Reports
641
Location
US
US
178.16.54.141
7/10
Confidence
87%
Reports
578
Location
NL
NL
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203