Country Threat Intelligence Summary: Kenya
Loading country intelligence data...
Kenya (KE) Threat Intelligence
KEKenya has 11,806 malicious IP addresses with 581,422 abuse reports. Top threat categories include tcp scan, high threat, suspicious activity, malware distribution, intrusion attempt. Top attacking networks: Safaricom Limited (2,248 IPs), Liquid Telecommunications Ltd (1,618 IPs), CKL1-ASN (1,523 IPs). Data collected since 2022-12-10, last activity 2026-10-13.
Threat Assessment: Kenya shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, high threat, suspicious activity. The majority of threats originate from networks operated by Safaricom Limited and Liquid Telecommunications Ltd.
Total Reports
581,422
Unique IPs
11,806
First Seen
2022-12-10
Last Activity
2026-10-13
Top Threat Categories
Tcp Scan
78,402
High Threat
22,175
Suspicious Activity
22,150
Malware Distribution
6,982
Intrusion Attempt
2,774
Top Attacking Networks
Most Reported IPs in Kenya
197.248.8.33
1,580 reports
197.248.207.139
1,571 reports
41.90.100.147
1,392 reports
196.207.177.56
1,171 reports
41.203.213.8
1,106 reports
Access this data via API
Get Kenya threat intelligence programmatically.
curl https://ip.wayscloud.services/api/country/KE
Check any IP from Kenya
Look up threat intelligence for a specific IP address.
Related:
Country Threat Ranking
Country Risk Trends →
Top Malicious IPs →
AS33771 Intelligence
AS30844 Intelligence
AS36926 Intelligence
Global Attack Trends
Detect Malicious Traffic
Loading threat intelligence data...