Kenya (KE) Threat Intelligence

Kenya has 5,021 malicious IP addresses with 373,445 abuse reports. Top threat categories include ssh bruteforce, generic bruteforce, rdp bruteforce, web attack. Top attacking networks: Liquid Telecommunications Ltd (1,149 IPs), CKL1-ASN (554 IPs), SAFARICOM-LIMITED (523 IPs). Data collected since 2022-12-10, last activity 2026-04-16.

Threat Assessment: Kenya exhibits moderate cyber threat activity, with a notable number of malicious IPs across multiple attack categories. The dominant attack types are ssh bruteforce, generic bruteforce, rdp bruteforce. The majority of threats originate from networks operated by Liquid Telecommunications Ltd and CKL1-ASN.