Measured Risk
IP 172.94.9.120 threat rating: 5/10 from 23 observations.
Attention-worthy behavior detected. Confidence: 87%.
More threatening than 18% of monitored IPs
IP Address
172.94.9.120
IPv4
Public
IR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Minimal Concern
Iran
Location
Limited Network LTD
ASN 213790
23
Reports
Honeypot
Data Source
Threat Categories
Email Spam
23
Technical Details
Email spam involves mass distribution of unwanted emails, often for advertising, phishing, or malware delivery.
Recommended Mitigations
Implement SPF, DKIM, DMARC, and use reputable email filtering services.
Reputable Network
This IP is hosted on a network (ASN 213790) with generally good reputation. The ISP Limited Network LTD maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Standard security protocols sufficient. Monitor but no immediate blocking required.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
5/10
Medium
Medium
Activity Frequency
8/10
High
Confidence Score
65%
High Confidence
Confidence History
29. May 2026
87%
Current
Stable
Trend
Security Reports (23)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 172.94.9.120
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
IR
- ASN
- AS213790
- ISP
- Limited Network LTD
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 23
- First Reported
- 29 May 2026
- Last Reported
- 29 May 2026, 20:32
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS213790
Limited Network LTD
IR
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
151
Total IPs Monitored
7,957
Total Reports
52.7
Reports per IP
Network Context
This IP address belongs to Limited Network LTD (AS213790), which manages 151 IP addresses in our monitoring system. Out of these, 7,957 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
18
%
Global Threat Ranking
This IP is more threatening than 18% of all IPs in our database.
Low Threat PercentileGlobal Comparison
Compared against 312,304 reported IPs worldwide
Threat Level
5/10
avg: 6.0
-
Total Reports
23
avg: 18
+
Network Comparison
Compared against 245 IPs in ASN 213790
Threat Level
5/10
network avg: 7.6
-
Total Reports
23
network avg: 45
-
Network Limited Network LTD has overall threat level 1/10
Geographic Comparison
Compared against 1,023 IPs in IR
Threat Level
5/10
country avg: 7.3
-
Total Reports
23
country avg: 36
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Friday
23 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
3/10
Current Threat
3/10
Distribution of threat categories reported over time.
Top Threat Categories
Email Spam
23
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
292,711 threat incidents tracked globally • Last 24h: 17,660 Logs
FEED
Top Threat Sources
-
01
United States65,787 22.5% -
02
India49,120 16.8%
-
03
China35,633 12.2%
-
04
Brazil15,556 5.3%
-
05
Germany10,500 3.6%
-
06
Pakistan8,479 2.9%
-
07
Indonesia8,404 2.9%
-
08
Singapore8,312 2.8%
-
09
Russia6,394 2.2%
-
10
Netherlands6,295 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
96%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
185.93.89.27
10/10
Confidence
99%
Reports
75
Location
IR
IR
172.94.9.153
8/10
Confidence
99%
Reports
67
Location
IR
IR
192.253.248.45
8/10
Confidence
99%
Reports
63
Location
IR
IR
185.93.89.147
8/10
Confidence
99%
Reports
12
Location
IR
IR
172.94.9.253
10/10
Confidence
97%
Reports
102
Location
US
US
185.93.89.167
8/10
Confidence
97%
Reports
42
Location
IR
IR
172.94.9.205
8/10
Confidence
97%
Reports
29
Location
IR
IR
192.253.248.124
10/10
Confidence
97%
Reports
23
Location
IR
IR
192.253.248.43
8/10
Confidence
97%
Reports
20
Location
IR
IR
192.253.248.131
8/10
Confidence
97%
Reports
17
Location
IR
IR
172.94.9.65
10/10
Confidence
96%
Reports
59
Location
IR
IR
77.90.185.20
10/10
Confidence
96%
Reports
35
Location
IR
IR
192.253.248.180
10/10
Confidence
94%
Reports
1,340
Location
IR
IR
185.93.89.193
10/10
Confidence
94%
Reports
362
Location
IR
IR
185.93.89.191
10/10
Confidence
94%
Reports
360
Location
IR
IR
185.93.89.192
10/10
Confidence
94%
Reports
358
Location
IR
IR
185.93.89.190
10/10
Confidence
94%
Reports
355
Location
IR
IR
185.93.89.170
8/10
Confidence
94%
Reports
120
Location
IR
IR
77.90.185.78
10/10
Confidence
94%
Reports
87
Location
IR
IR
77.90.185.21
10/10
Confidence
94%
Reports
60
Location
IR
IR
IPs from the same subnet range, likely same network segment.
20
Related IPs
9.3/10
Avg Threat
94%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
172.94.9.153
8/10
Confidence
99%
Reports
67
Location
IR
IR
172.94.9.62
10/10
Confidence
97%
Reports
112
Location
US
US
172.94.9.253
10/10
Confidence
97%
Reports
102
Location
US
US
172.94.9.205
8/10
Confidence
97%
Reports
29
Location
IR
IR
172.94.9.65
10/10
Confidence
96%
Reports
59
Location
IR
IR
172.94.9.199
10/10
Confidence
94%
Reports
41
Location
IR
IR
172.94.9.218
10/10
Confidence
94%
Reports
37
Location
IR
IR
172.94.9.178
10/10
Confidence
94%
Reports
36
Location
IR
IR
172.94.9.166
10/10
Confidence
94%
Reports
31
Location
IR
IR
172.94.9.229
10/10
Confidence
94%
Reports
29
Location
IR
IR
172.94.9.74
10/10
Confidence
94%
Reports
20
Location
IR
IR
172.94.9.168
10/10
Confidence
94%
Reports
17
Location
IR
IR
172.94.9.73
10/10
Confidence
94%
Reports
15
Location
IR
IR
172.94.9.77
8/10
Confidence
93%
Reports
29
Location
IR
IR
172.94.9.87
8/10
Confidence
93%
Reports
22
Location
IR
IR
172.94.9.95
8/10
Confidence
93%
Reports
21
Location
IR
IR
172.94.9.222
10/10
Confidence
92%
Reports
13
Location
IR
IR
172.94.9.107
7/10
Confidence
89%
Reports
9
Location
IR
IR
172.94.9.98
10/10
Confidence
88%
Reports
12
Location
IR
IR
172.94.9.59
8/10
Confidence
87%
Reports
64
Location
IR
IR
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
62.60.130.230
8/10
Confidence
100%
Reports
160
ISP
Cipher Operatio...
62.60.130.182
8/10
Confidence
100%
Reports
88
ISP
Cipher Operatio...
185.109.244.91
10/10
Confidence
100%
Reports
79
ISP
Asiatech Data T...
217.60.241.103
8/10
Confidence
100%
Reports
66
ISP
Pfcloud UG (haf...
62.60.130.231
8/10
Confidence
100%
Reports
40
ISP
Cipher Operatio...
212.80.9.235
8/10
Confidence
100%
Reports
37
ISP
Giti Secure Clo...
62.60.131.175
10/10
Confidence
100%
Reports
26
ISP
Feo Prest SRL
62.60.131.165
10/10
Confidence
100%
Reports
24
ISP
Feo Prest SRL
62.60.131.177
8/10
Confidence
100%
Reports
21
ISP
Feo Prest SRL
62.60.131.159
10/10
Confidence
100%
Reports
20
ISP
Feo Prest SRL
62.60.131.169
8/10
Confidence
100%
Reports
20
ISP
Feo Prest SRL
62.60.131.232
10/10
Confidence
100%
Reports
20
ISP
Feo Prest SRL
79.127.127.39
8/10
Confidence
100%
Reports
16
ISP
Asiatech Data T...
185.252.86.65
10/10
Confidence
100%
Reports
16
ISP
Vandad Vira Hoo...
62.60.131.166
8/10
Confidence
100%
Reports
14
ISP
Feo Prest SRL
IPs with similar threat level and confidence scores.
15
Related IPs
8.6/10
Avg Threat
87%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.246.128.133
10/10
Confidence
87%
Reports
8,230
Location
SE
SE
46.151.178.13
8/10
Confidence
87%
Reports
4,206
Location
NL
NL
45.205.1.5
10/10
Confidence
87%
Reports
3,981
Location
MU
MU
80.66.83.43
10/10
Confidence
87%
Reports
3,260
Location
RU
RU
3.130.168.2
8/10
Confidence
87%
Reports
2,569
Location
US
US
137.184.112.192
8/10
Confidence
87%
Reports
2,337
Location
US
US
193.32.162.34
8/10
Confidence
87%
Reports
1,846
Location
RO
RO
62.60.130.169
7/10
Confidence
87%
Reports
1,527
Location
IR
IR
64.89.160.82
8/10
Confidence
87%
Reports
1,099
Location
GB
GB
81.29.142.100
8/10
Confidence
87%
Reports
978
Location
RU
RU
152.53.81.25
10/10
Confidence
87%
Reports
962
Location
US
US
204.76.203.213
10/10
Confidence
87%
Reports
817
Location
NL
NL
167.94.146.52
8/10
Confidence
87%
Reports
803
Location
US
US
81.168.83.103
8/10
Confidence
87%
Reports
723
Location
GB
GB
207.90.244.18
8/10
Confidence
87%
Reports
714
Location
US
US