Networks

Connectivity terrain for Iran. ccTLD, telephony, broadband, and broadcast posture from the most recent Factbook update. ASN and IP-range tables remain a TODO.

ccTLD	.ir
Internet users	percent of population: 80% (2023 est.)
Mobile cellular	total subscriptions: 159 million (2024 est.); subscriptions per 100 inhabitants: 174 (2024 est.)
Fixed lines	total subscriptions: 29.02 million (2023 est.); subscriptions per 100 inhabitants: 32 (2023 est.)
Broadband fixed	total: 10.9 million (2023 est.); subscriptions per 100 inhabitants: 12 (2023 est.)

Broadcast

state-run broadcast media with no private, independent broadcasters; Islamic Republic of Iran Broadcasting (IRIB), the state-run TV broadcaster, operates over 60 television channels, over 50 radio stations, and dozens of newspapers and websites; about 20 foreign Persian-language TV stations broadcasting on satellite TV can be seen in Iran; satellite dishes are illegal and sometimes confiscated; most major international broadcasters transmit to Iran (2023)

IP ranges

TODO. ASNs and CIDR blocks, sourced from the regional registry.

Online devices

Exposed services and device counts from internet-wide scans (Shodan, Censys, Quake, FOFA). Operator uses this to scope target discovery, attribute observed activity, and pre-stage payloads. Refresh against live facets before relying on the numbers.

Type	Service	Count
to be filled	to be filled	to be filled

VPN

Commercial VPN providers with servers (points of presence) inside the country. Operators use these for in-country egress, to appear local to defended infrastructure, or to hop into adjacent jurisdictions. Cross-check provider server lists before relying on the entry; vendors add and drop POPs frequently.

Provider	Site	Servers in country	Notes
to be filled	to be filled	to be filled	to be filled

Telecom

Top telecom operators in the country, ranked by subscriber base or revenue. Note state ownership, foreign parents, and the share of the backbone each carrier controls. Operators use this to identify lawful-intercept routing, blocked transit, and the carriers worth pre-staging redirectors against.

Operator	Site	Ownership	Services	Notes
to be filled	to be filled	to be filled	to be filled	to be filled

Data centers

Commercial data centers and major carrier-neutral facilities inside the country. Operators map these to locate target hosting, hyperscaler regions, peering fabric, and submarine-cable landing proximity. Cross-reference DataCenterMap and Cloudscene before relying on the entry.

Facility	Operator	Location	Notes
to be filled	to be filled	to be filled	to be filled

Mobiles

Top mobile device makes, models, and types in the country. Operators use this to scope mobile-implant compatibility, plan device-class lures, and predict baseband, OS, and security-patch posture on target. Cross-reference StatCounter, Kantar, and Counterpoint before relying on the entry.

Make	Model	Type	Share	Notes
to be filled	to be filled	to be filled	to be filled	to be filled

Apps

Mobile and web apps with material user base in the country. Covers messaging, payments, ride-hailing, delivery, banking, government, and ID apps. Operators use this for pretext design, lure infrastructure, implant compatibility, and pattern-of-life inference. Cross-reference Sensor Tower, data.ai, AppMagic, and the country’s app-store top charts.

App	Category	Platforms	Users	Notes
to be filled	to be filled	to be filled	to be filled	to be filled

Keyboards

Standard keyboard layouts the operator encounters on Windows endpoints in the country. KLID is the Windows layout identifier; DLL is the driver shipped with Windows 10/11. Operators use this to predict input behaviour (AZERTY / QWERTY / QWERTZ), build plausible pretexts, and tune implant input handling. Cross- reference kbdlayout.info for full layout maps and dead-key behaviour.

Layout	Tag	KLID	Driver
Persian	fa	00000429	kbdfa.dll
Persian (Standard)	fa	00050429	kbdfa1.dll
Central Kurdish	ckb	00000492	kbdcku.dll