🇹🇷 Turkey: live cyber threat activity

Malicious IPs, malware and ransomware victims in Turkey.

281Malicious IPs listed#28 of 182 countries · 0.42% of the world
66New in the last 24hfirst seen by any feed
90Reported by 2+ feedsindependent sources agree
10Ransomware victimsposted in the last 30 days

View Turkey on the live map →All listed IPs in TurkeyRansomware victims in Turkey

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C234
  2. Malware45
  3. Phishing0
  4. Attacker202

By state or region

  1. Istanbul172
  2. Mersin22
  3. Kayseri19
  4. Ankara13
  5. Bursa Province12
  6. İzmir Province6
  7. Diyarbakır Province5
  8. Adana4
  9. Antalya4
  10. Muğla3
  11. Konya2
  12. Kocaeli2
  13. Denizli2
  14. Eskişehir2
  15. Samsun2

By city

  1. Istanbul72
  2. Ümraniye23
  3. İncesu17
  4. Beyoğlu15
  5. Maltepe15
  6. Esenyurt14
  7. Mersin13
  8. Bursa10
  9. Arkum9
  10. Pendik8
  11. Ankara8
  12. Izmir5
  13. Diyarbakır5
  14. Kızıltoprak5
  15. Şişli4

Networks hosting the most

NetworkIPs
AS9121 Turk Telekomunikasyon Anonim Sirketi 68
AS44382 Fiba Cloud Operation Company, LLC 41
AS16135 TURKCELL ILETISIM HIZMETLERI A.S. 29
AS34984 Superonline Iletisim Hizmetleri A.S. 14
AS209380 Arat Telekominikasyon Tek. Bil.Hiz.San. ve Tic. Ltd.Sti 12
AS44558 Netonline Bilisim Sirketi LTD 9
AS12735 TurkNet Iletisim Hizmetleri A.S. 7
AS153622 Madina IT 7
AS15924 Vodafone Net Iletisim Hizmetler AS 6
AS47524 Turksat Uydu Haberlesme Kablo TV ve Isletme A.S. 5
AS208972 GIBIRNET ILETISIM HIZMETLERI SANAYI VE TICARET LIMITED SIRKETI 4
AS154383 ZORNTECH WEB SOLUTIONS 4
AS205463 Pembe Gul Isguzar Karagoz 4
AS219450 VOYAR VERIMERKEZI TEKNOLOJILERI LTD. STI 3
AS205196 BIG CORE LLC 3

Malware families served from Turkey

  1. Remcos21
  2. PureRAT4
  3. Sality3
  4. Jackskid2
  5. XWorm2
  6. AdaptixC21
  7. AsyncRAT1
  8. Darkkomet1
  9. Asyncrat1
  10. DCRat1
  11. Pheonixstealer1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
193.32.204[.]152AttackerAttacking hostIstanbul, IstanbulAS153622 Madina IT1 feed2026-10-12 08:10
193.32.204[.]154AttackerAttacking hostIstanbul, IstanbulAS153622 Madina IT2 feeds2026-10-12 08:10
193.32.204[.]157AttackerAttacking hostIstanbul, IstanbulAS153622 Madina IT2 feeds2026-10-12 08:10
193.32.204[.]181AttackerAttacking hostIstanbul, IstanbulAS153622 Madina IT1 feed2026-10-12 08:10
193.32.204[.]185AttackerAttacking hostIstanbul, IstanbulAS153622 Madina IT1 feed2026-10-12 08:10
193.32.204[.]187AttackerAttacking hostIstanbul, IstanbulAS153622 Madina IT1 feed2026-10-12 08:10
46.29.26[.]133AttackerAttacking hostIstanbul, IstanbulAS132359 M/S ROBI TRADERS1 feed2026-10-12 08:10
151.250.230[.]223AttackerAttacking hostEtimesgut, AnkaraAS34984 Superonline Iletisim Hizmetleri A.S.1 feed2026-10-12 07:15
45.67.155[.]206AttackerAttacking hostMersin, MersinAS209380 Arat Telekominikasyon Tek. Bil.Hiz.San. ve Tic. Ltd.Sti1 feed2026-10-12 07:15
46.196.145[.]222AttackerAttacking hostAnkara, AnkaraAS47524 Turksat Uydu Haberlesme Kablo TV ve Isletme A.S.1 feed2026-10-12 07:15
46.29.26[.]185AttackerAttacking hostIstanbul, IstanbulAS132359 M/S ROBI TRADERS1 feed2026-10-12 06:55
31.40.204[.]121AttackerOn multiple blocklistsIstanbul, IstanbulAS44382 Fiba Cloud Operation Company, LLC1 feed2026-10-12 06:41
149.86.145[.]132AttackerAttacking hostSille, KonyaAS208972 GIBIRNET ILETISIM HIZMETLERI SANAYI VE TICARET LIMITED SIRKETI2 feeds2026-10-12 04:35
154.53.164[.]187AttackerMalicious IPUmraniye, IstanbulAS62425 Mailbox Internet Hizmetleri Ltd. Sti.1 feed2026-10-12 04:35
176.232.122[.]40AttackerAttacking hostŞişli, IstanbulAS34984 Superonline Iletisim Hizmetleri A.S.2 feeds2026-10-12 04:35
176.239.8[.]108MalwareMalicious IPIstanbul, IstanbulAS16135 TURKCELL ILETISIM HIZMETLERI A.S.1 feed2026-10-12 04:35
176.240.132[.]152AttackerAttacking hostIstanbul, IstanbulAS47524 Turksat Uydu Haberlesme Kablo TV ve Isletme A.S.2 feeds2026-10-12 04:35
178.233.158[.]11AttackerAttacking hostIstanbul, IstanbulAS47524 Turksat Uydu Haberlesme Kablo TV ve Isletme A.S.2 feeds2026-10-12 04:35
178.233.68[.]114AttackerAttacking hostİzmit, KocaeliAS47524 Turksat Uydu Haberlesme Kablo TV ve Isletme A.S.2 feeds2026-10-12 04:35
185.208.102[.]226AttackerAttacking hostKilis, KilisAS42083 Guneydogu Telekom int.bil. ve ilt. hiz. tic. ltd. sti.2 feeds2026-10-12 04:35
188.119.13[.]240AttackerAttacking hostBesni, Adıyaman ProvinceAS12735 TurkNet Iletisim Hizmetleri A.S.2 feeds2026-10-12 04:35
201.4.65[.]84AttackerAttacking hostAdana, AdanaAS216472 High Speed For Internet Services L.L.C2 feeds2026-10-12 04:35
201.4.65[.]94AttackerAttacking hostAdana, AdanaAS216472 High Speed For Internet Services L.L.C2 feeds2026-10-12 04:35
212.68.38[.]69AttackerAttacking hostKarahallı, UşakAS42083 Guneydogu Telekom int.bil. ve ilt. hiz. tic. ltd. sti.2 feeds2026-10-12 04:35
213.153.174[.]18AttackerAttacking hostBeyoğlu, IstanbulAS34984 Superonline Iletisim Hizmetleri A.S.2 feeds2026-10-12 04:35

See every listed IP in Turkey →

Ransomware victims in Turkey

10 posted in the last 30 days, 37 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-10-06 20:18Ciftay Insaat Taahhut Ve Ticaret Anonim SirketiqilinManufacturing
2026-10-05 11:53ENKA SchoolsDoommageddonEducation
2026-10-04 17:22OMUR HIRDAVAT LTDemperadorManufacturing
2026-09-29 16:51PolikememperadorManufacturing
2026-09-20 14:11acilnet.comkrybitTechnology
2026-09-20 12:15Zorlu HoldingqilinManufacturing
2026-09-18 15:25AstraZeneca TürkiyeN0nHealthcare
2026-09-17 22:31www.harputyapi.comkrybit—
2026-09-15 15:21Cumar Marble & GraniteDark ProjectManufacturing
2026-09-13 09:20i2i-systemsBarracudaTechnology
2026-09-11 16:59Ozel & Ozel Laws OfficenightspireProfessional Services
2026-09-08 07:23Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, Eco...blacknevasManufacturing
2026-09-07 21:54Yapı MerkezithegentlemenManufacturing
2026-09-02 13:05Uak UniversityqilinEducation
2026-08-30 14:54Erdem HospitaldirewolfHealthcare

All ransomware victims in Turkey →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →