Malicious IPs in Türkiye

IPv4 networks located in Türkiye that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
132
#29 of 176 countries
Per million allocated IPv4
7.84
#44 of 77 countries
Flagged IPv4 addresses
1,448
ranges count at most as a /24
Allocated IPv4 addresses
16,832,192
RIR delegation statistics

Türkiye at a glance

Türkiye had 132 flagged IPv4 networks in the snapshot of 2026-10-10, rank #29 of 176 countries by absolute count. Relative to its allocated IPv4 space that is 7.84 flagged networks per million addresses, rank #44 of 77, close to the median of 10.6 across all rated countries. The largest category is brute force sources with 46% of the flagged networks, followed by other malicious networks (35%). The three networks (ASNs) with the most flagged IPs hold 47% of them, led by TTNET TTNet A.S. (AS47331). Another 3 flagged IPv6 networks are located in Türkiye.

Malicious activity in Türkiye by category

A network listed in several categories counts once, in the most specific one. Also flagged: 3 IPv6 networks.

  • Brute force sources in Türkiye

    61 (46%)

    61 flagged networks, #33 of 159 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Other malicious networks in Türkiye

    46 (35%)

    46 flagged networks, #18 of 147 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

  • Botnet hosts in Türkiye

    14 (11%)

    14 flagged networks, #25 of 126 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

  • Spam sources in Türkiye

    7 (5%)

    7 flagged networks, #23 of 85 countries for spam sources. Sources of email spam. Spam Sources by Country

  • C2 servers in Türkiye

    4 (3%)

    4 flagged networks, #21 of 52 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country

Networks with the most flagged IPs in Türkiye

Autonomous systems announcing the flagged networks located in Türkiye.

#NetworkFlagged networks
1AS47331TTNET TTNet A.S.30
2AS16135TURKCELL-AS TURKCELL ILETISIM HIZMETLERI A.S.16
3AS9299IPG-AS-AP - Philippine Long Distance Telephone Company16
4AS34984TELLCOM-AS Superonline Iletisim Hizmetleri A.S.12
5AS12735ASTurkNet TurkNet Iletisim Hizmetleri A.S.5
6AS9121TTNet Turk Telekomunikasyon Anonim Sirketi5
7AS15897VodafoneTurkey Vodafone Telekomunikasyon A.S.3
8AS15924BORUSANTELEKOM-AS Vodafone Net Iletisim Hizmetler AS3
9AS212238CDNEXT Datacamp Limited2
10AS44558NETONLINE Netonline Bilisim Sirketi LTD2

Compare Türkiye with other countries

Ranked by flagged networks per million allocated IPv4 addresses.

Countries ranked next to Türkiye by rate

#CountryNetworksPer million
42South Korea1,0669.47
43Lithuania378.95
44Türkiye1327.84
45Israel637.81
46Poland1557.73
47Iran827.55

Other countries in the RIPE NCC region

#CountryNetworksPer million
1Iraq65142
2Uzbekistan41122
7Albania3059.3
10Jordan2233.9
13Azerbaijan2328.8
15Qatar2326.9
16Oman2425.2
17Moldova3023.8

Questions about Türkiye

How many malicious IP addresses are there in Türkiye?
On 2026-10-10, 132 IPv4 networks (/24 blocks) located in Türkiye were flagged for malicious activity, with 1,448 listed IPv4 addresses and 3 IPv6 networks. Each /24 counts once, however many of its addresses are listed.
Which networks in Türkiye host the most flagged IPs?
TTNET TTNet A.S. (AS47331, 30 networks), TURKCELL-AS TURKCELL ILETISIM HIZMETLERI A.S. (AS16135, 16 networks), IPG-AS-AP - Philippine Long Distance Telephone Company (AS9299, 16 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Türkiye or anywhere else with one API call.

Read the API docsSee pricing
Back to the world threat mapAll networks registered in Türkiye