Syria (SY) Threat Intelligence

SY

Syria has 4,273 malicious IP addresses with 85,677 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, intrusion attempt, malware distribution. Top attacking networks: Syrian Telecommunication Private Closed Joint Stock Company (1,829 IPs), High Speed For Internet Services L.L.C (1,656 IPs), Space Exploration Technologies Corporation (320 IPs). Data collected since 2025-10-13, last activity 2026-10-13.

Threat Assessment: Syria exhibits moderate cyber threat activity, with a notable number of malicious IPs across multiple attack categories. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Syrian Telecommunication Private Closed Joint Stock Company and High Speed For Internet Services L.L.C.

Total Reports
85,677
Unique IPs
4,273
First Seen
2025-10-13
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 8,000
Suspicious Activity 3,490
High Threat 2,288
Intrusion Attempt 1,621
Malware Distribution 1,592

Top Attacking Networks

AS29256 Syrian Telecommunication Private Closed Joint Stock Company
1,829 IPs
AS216472 High Speed For Internet Services L.L.C
1,656 IPs
AS14593 Space Exploration Technologies Corporation
320 IPs

Most Reported IPs in Syria

91.144.21.210 1,026 reports
205.209.65.70 966 reports
205.209.67.3 938 reports
185.225.41.192 906 reports
91.144.32.178 807 reports

Access this data via API

Get Syria threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/SY

View full API documentation

See how we classify and verify threats →

Check any IP from Syria

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS29256 Intelligence AS216472 Intelligence AS14593 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...