Turkey (TR) Threat Intelligence

TR

Turkey has 23,691 malicious IP addresses with 948,609 abuse reports. Top threat categories include ssh bruteforce, generic bruteforce, web attack, repeat offender, web scanner. Top attacking networks: Turk Telekom (5,221 IPs), Turkcell Iletisim Hizmetleri A.s. (2,225 IPs), Superonline Iletisim Hizmetleri A.S. (1,823 IPs). Data collected since 2022-11-03, last activity 2026-04-16.

Threat Assessment: Turkey shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are ssh bruteforce, generic bruteforce, web attack. The majority of threats originate from networks operated by Turk Telekom and Turkcell Iletisim Hizmetleri A.s..

Total Reports
948,609
Unique IPs
23,691
First Seen
2022-11-03
Last Activity
2026-04-16

Top Threat Categories

Ssh Bruteforce 467
Generic Bruteforce 74
Web Attack 49
Repeat Offender 6
Web Scanner 5

Top Attacking Networks

AS9121 Turk Telekom
5,221 IPs
AS16135 Turkcell Iletisim Hizmetleri A.s.
2,225 IPs
AS34984 Superonline Iletisim Hizmetleri A.S.
1,823 IPs

Most Reported IPs in Turkey

159.146.11.164 253 reports
78.187.21.105 252 reports
89.252.157.42 232 reports
93.113.63.124 225 reports
5.11.162.163 224 reports

Access this data via API

Get Turkey threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/TR

View full API documentation

See how we classify and verify threats →

Check any IP from Turkey

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS9121 Intelligence AS16135 Intelligence AS34984 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...