SO (SO) Threat Intelligence

SO has 365 malicious IP addresses with 12,970 abuse reports. Top threat categories include tcp scan, suspicious activity, malware distribution, high threat, severe abuse. Top attacking networks: Hormuud Telecom Somalia INC (145 IPs), SOMTEL INTERNATIONAL Ltd (64 IPs), Somtel-Somalia-AS (29 IPs). Data collected since 2025-10-13, last activity 2026-09-22.

Threat Assessment: SO has a relatively low level of observed cyber threat activity. The dominant attack types are tcp scan, suspicious activity, malware distribution. The majority of threats originate from networks operated by Hormuud Telecom Somalia INC and SOMTEL INTERNATIONAL Ltd.