5.202.149.20
Classification: Malicious
5.202.149.20 is a malicious IP address in Tehran, IR. 77 sightings from 5 threat sources (Proxy, Anonymizer), last seen 2026-10-17.
Current activity
- Known attacker — Seen launching attacks over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2026-10-17 19:52:51 | 2026-10-17 19:52:51 | attacker malicious-activity | |
| Proxy | FireHOL | 2021-12-22 10:36:25 | 2024-03-31 04:00:21 | anonymization | |
| Anonymizer | FireHol | 2022-01-18 08:17:41 | 2022-12-29 11:44:39 | anonymization | |
| Anonymizer | Maltiverse Research Team | 2020-11-21 13:35:57 | 2021-12-21 03:24:34 | anonymization anonymizer | |
| Anonymizer | Maltiverse | 2019-04-02 08:26:56 | 2019-04-02 08:26:56 |
Tags
anonymization anonymizerWhois information
- AS name
- AS49100 Pishgaman Toseeh Ertebatat Company Private Joint Stock
- AS registry
- ripencc
- AS date
- 2012-08-29 00:00:00
- AS CIDR
- 5.202.0.0/16
- Registrant
- Pishgaman Toseeh Ertebatat Company Private Joint Stock
- City
- Tehran
- Postal code
- 1145933187
- Country
- IR — Iran, Islamic Republic of 🇮🇷
- First indexed
- 2019-04-02 08:26:56
- Last updated
- 2026-10-17 19:52:52
Malicious IPs in the same CIDR
5.202.151.62 5.202.149.28 5.202.151.98 5.202.151.48 5.202.162.95 5.202.159.46 5.202.159.40 5.202.151.15 5.202.158.84 5.202.151.96 5.202.177.18 5.202.160.40 5.202.158.24 5.202.151.33 5.202.149.12 5.202.46.0 5.202.220.50 5.202.173.84 5.202.158.76 5.202.167.77 5.202.151.16 5.202.149.64 5.202.158.13 5.202.157.88 5.202.159.34