Kenya (KE) Threat Intelligence

KE

Kenya has 11,220 malicious IP addresses with 555,930 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, intrusion attempt. Top attacking networks: Safaricom Limited (2,084 IPs), Liquid Telecommunications Ltd (1,607 IPs), CKL1-ASN (1,446 IPs). Data collected since 2022-12-10, last activity 2026-09-22.

Threat Assessment: Kenya shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Safaricom Limited and Liquid Telecommunications Ltd.

Total Reports
555,930
Unique IPs
11,220
First Seen
2022-12-10
Last Activity
2026-09-22

Top Threat Categories

Tcp Scan 71,997
Suspicious Activity 19,116
High Threat 8,196
Malware Distribution 6,446
Intrusion Attempt 2,263

Top Attacking Networks

AS33771 Safaricom Limited
2,084 IPs
AS30844 Liquid Telecommunications Ltd
1,607 IPs
AS36926 CKL1-ASN
1,446 IPs

Most Reported IPs in Kenya

197.248.8.33 1,044 reports
197.248.207.139 1,043 reports
41.90.100.147 912 reports
196.207.177.56 902 reports
197.248.15.98 865 reports

Access this data via API

Get Kenya threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/KE

View full API documentation

See how we classify and verify threats →

Check any IP from Kenya

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS33771 Intelligence AS30844 Intelligence AS36926 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...