SO (SO) Threat Intelligence

SO has 348 malicious IP addresses with 12,160 abuse reports. Top threat categories include suspicious activity, severe abuse, ssh bruteforce, moderate threat, spam. Top attacking networks: Hormuud Telecom Somalia INC (135 IPs), SOMTEL INTERNATIONAL Ltd (59 IPs), Somtel-Somalia-AS (28 IPs). Data collected since 2025-10-13, last activity 2026-09-06.

Threat Assessment: SO has a relatively low level of observed cyber threat activity. The dominant attack types are suspicious activity, severe abuse, ssh bruteforce. The majority of threats originate from networks operated by Hormuud Telecom Somalia INC and SOMTEL INTERNATIONAL Ltd.