Turkey (TR) Threat Intelligence

TR

Turkey has 39,177 malicious IP addresses with 1,294,633 abuse reports. Top threat categories include suspicious activity, severe abuse, moderate threat, high threat, ssh bruteforce. Top attacking networks: Turk Telekom (7,971 IPs), Turk Telekom (3,955 IPs), Turkcell Iletisim Hizmetleri A.s. (3,393 IPs). Data collected since 2022-11-03, last activity 2026-07-13.

Threat Assessment: Turkey shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, moderate threat. The majority of threats originate from networks operated by Turk Telekom and Turk Telekom.

Total Reports
1,294,633
Unique IPs
39,177
First Seen
2022-11-03
Last Activity
2026-07-13

Top Threat Categories

Suspicious Activity 37,001
Severe Abuse 6,457
Moderate Threat 3,554
High Threat 1,856
Ssh Bruteforce 1,061

Top Attacking Networks

AS9121 Turk Telekom
7,971 IPs
AS47331 Turk Telekom
3,955 IPs
AS16135 Turkcell Iletisim Hizmetleri A.s.
3,393 IPs

Most Reported IPs in Turkey

188.132.232.81 525 reports
185.39.204.145 433 reports
149.34.210.141 431 reports
5.11.162.163 429 reports
85.111.68.99 427 reports

Access this data via API

Get Turkey threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/TR

View full API documentation

See how we classify and verify threats →

Check any IP from Turkey

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS9121 Intelligence AS47331 Intelligence AS16135 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...