Malicious IPs in Kenya

IPv4 networks located in Kenya that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
67
#39 of 179 countries
Per million allocated IPv4
10.7
#33 of 76 countries
Flagged IPv4 addresses
71
ranges count at most as a /24
Allocated IPv4 addresses
6,258,944
RIR delegation statistics

Kenya at a glance

Kenya had 67 flagged IPv4 networks in the snapshot of 2026-10-11, rank #39 of 179 countries by absolute count. Relative to its allocated IPv4 space that is 10.7 flagged networks per million addresses, rank #33 of 76, close to the median of 9.38 across all rated countries. The largest category is brute force sources with 43% of the flagged networks, followed by other malicious networks (40%). The three networks (ASNs) with the most flagged IPs hold 34% of them, led by Safaricom (AS37061). Another 1 flagged IPv6 network is located in Kenya.

Malicious activity in Kenya by category

A network listed in several categories counts once, in the most specific one. Also flagged: 1 IPv6 network.

  • Brute force sources in Kenya

    29 (43%)

    29 flagged networks, #42 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Other malicious networks in Kenya

    27 (40%)

    27 flagged networks, #26 of 143 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

  • Botnet hosts in Kenya

    8 (12%)

    8 flagged networks, #40 of 122 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

  • Spam sources in Kenya

    3 (4%)

    3 flagged networks, #36 of 89 countries for spam sources. Sources of email spam. Spam Sources by Country

Networks with the most flagged IPs in Kenya

Autonomous systems announcing the flagged networks located in Kenya.

#NetworkFlagged networks
1AS37061Safaricom12
2AS30844LIQUID-AS Liquid Telecommunications Ltd6
3AS328856VIJIJI-CONNECT-LIMITED5
4AS15399WANANCHI-5
5AS33771SAFARICOM-LIMITED5
6AS36866JTL3
7AS36926CKL1-ASN3
8AS14593SPACEX-STARLINK - Space Exploration Technologies Corporation2
9AS328847KoTDA2
10AS15808ACCESSKENYA-KE ACCESSKENYA GROUP LTD is an ISP serving2

Compare Kenya with other countries

Ranked by flagged networks per million allocated IPv4 addresses.

Countries ranked next to Kenya by rate

#CountryNetworksPer million
31United Arab Emirates8912.1
32Thailand10411.6
33Kenya6710.7
34Argentina20610.6
35Russia45910.1
36Brazil82810.1

Other countries in the AFRINIC region

#CountryNetworksPer million
6Ethiopia2259.4
13Uganda3725.9
14Tanzania2825.4
24Ghana4018.1
30Nigeria3912.1
45Algeria377.76
56South Africa1314.82
65Tunisia273.43

Questions about Kenya

How many malicious IP addresses are there in Kenya?
On 2026-10-11, 67 IPv4 networks (/24 blocks) located in Kenya were flagged for malicious activity, with 71 listed IPv4 addresses and 1 IPv6 network. Each /24 counts once, however many of its addresses are listed.
Which networks in Kenya host the most flagged IPs?
Safaricom (AS37061, 12 networks), LIQUID-AS Liquid Telecommunications Ltd (AS30844, 6 networks), VIJIJI-CONNECT-LIMITED (AS328856, 5 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Kenya or anywhere else with one API call.

Read the API docsSee pricing
Back to the world threat mapAll networks registered in Kenya