Turkey (TR) Threat Intelligence

TR

Turkey has 67,171 malicious IP addresses with 1,664,050 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, intrusion attempt. Top attacking networks: Turk Telekom (12,638 IPs), Superonline Iletisim Hizmetleri A.S. (4,255 IPs), Turk Telekom (4,135 IPs). Data collected since 2022-11-03, last activity 2026-10-13.

Threat Assessment: Turkey shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Turk Telekom and Superonline Iletisim Hizmetleri A.S..

Total Reports
1,664,050
Unique IPs
67,171
First Seen
2022-11-03
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 215,996
Suspicious Activity 93,513
High Threat 54,263
Malware Distribution 21,568
Intrusion Attempt 13,986

Top Attacking Networks

AS9121 Turk Telekom
12,638 IPs
AS34984 Superonline Iletisim Hizmetleri A.S.
4,255 IPs
AS47331 Turk Telekom
4,135 IPs

Most Reported IPs in Turkey

78.186.54.65 1,257 reports
88.255.189.50 1,246 reports
81.214.75.248 1,223 reports
5.11.162.163 1,207 reports
88.249.195.23 1,164 reports

Access this data via API

Get Turkey threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/TR

View full API documentation

See how we classify and verify threats →

Check any IP from Turkey

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS9121 Intelligence AS34984 Intelligence AS47331 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...