Syria (SY) Threat Intelligence

SY

Syria has 4,034 malicious IP addresses with 82,423 abuse reports. Top threat categories include tcp scan, suspicious activity, intrusion attempt, malware distribution, high threat. Top attacking networks: Syrian Telecommunication Private Closed Joint Stock Company (1,743 IPs), High Speed For Internet Services L.L.C (1,596 IPs), Space Exploration Technologies Corporation (297 IPs). Data collected since 2025-10-13, last activity 2026-09-21.

Threat Assessment: Syria exhibits moderate cyber threat activity, with a notable number of malicious IPs across multiple attack categories. The dominant attack types are tcp scan, suspicious activity, intrusion attempt. The majority of threats originate from networks operated by Syrian Telecommunication Private Closed Joint Stock Company and High Speed For Internet Services L.L.C.

Total Reports
82,423
Unique IPs
4,034
First Seen
2025-10-13
Last Activity
2026-09-21

Top Threat Categories

Tcp Scan 7,326
Suspicious Activity 3,003
Intrusion Attempt 1,452
Malware Distribution 1,327
High Threat 789

Top Attacking Networks

AS29256 Syrian Telecommunication Private Closed Joint Stock Company
1,743 IPs
AS216472 High Speed For Internet Services L.L.C
1,596 IPs
AS14593 Space Exploration Technologies Corporation
297 IPs

Most Reported IPs in Syria

91.144.21.210 868 reports
185.225.41.192 852 reports
185.216.134.126 761 reports
91.144.32.178 740 reports
205.209.65.70 626 reports

Access this data via API

Get Syria threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/SY

View full API documentation

See how we classify and verify threats →

Check any IP from Syria

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS29256 Intelligence AS216472 Intelligence AS14593 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...