← Back to Dashboard

81.215.228.18 Threat Intelligence Report

Risk Level: CRITICAL — 455 abuse reports from 21 sources

Threat Intelligence Summary

IP address 81.215.228.18 has been flagged in 455 abuse reports across 21 independent threat intelligence sources, resulting in a threat score of 100.0/100 (critical risk). The primary activity associated with this IP is aggregated threat, along with attacks, brute force, bruteforce, malware c2, scanning, severe abuse, ssh-bruteforce, ssh brute force, ssh bruteforce, web attack, web brute force.

This IP is geolocated in Türkiye (Istanbul) and belongs to the network Turk Telekom (AS9121). Reports span from 2024-11-02 to 2026-02-08.

Assessment: With 455 abuse reports, 81.215.228.18 shows persistent malicious activity that has been flagged by multiple threat intelligence feeds. The IP has been observed conducting automated SSH login attempts against internet-facing servers, a technique commonly used to gain unauthorized access to systems.

Data aggregated from 21 independent threat intelligence sources.

Geolocation

Country Türkiye
City Istanbul
Region Istanbul
ISP/ASN Turk Telekom
Timezone Europe/Istanbul

Threat Status

Overall Status Critical
Threat Score 100.0%
Report Count 455
Sources 21
First Seen 2024-11-02
Last Seen 2026-02-08

Check IPs automatically with the WAYSCloud API

Free tier: 1,000 lookups/day. Get threat scores, geolocation, and abuse reports via REST API.

Explore the API →

See how we classify and verify threats →

Related Intelligence

Türkiye Threat Intelligence → AS9121 Network Intelligence → See all top malicious IPs → View latest attacks →
Learn about these threats: