Malicious IPs in Somalia
IPv4 networks located in Somalia that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.
Somalia at a glance
Somalia had 3 flagged IPv4 networks in the snapshot of 2026-10-11, rank #135 of 179 countries by absolute count. Somalia has too little allocated IPv4 space for a meaningful per-million rate, so it is ranked by absolute count only. The largest category is brute force sources with 67% of the flagged networks, followed by other malicious networks (33%). The three networks (ASNs) with the most flagged IPs hold 100% of them, led by HORMUUD (AS37371).
Malicious activity in Somalia by category
A network listed in several categories counts once, in the most specific one.
Brute force sources in Somalia
2 (67%)2 flagged networks, #116 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country
Other malicious networks in Somalia
1 (33%)1 flagged network, #118 of 143 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country
Networks with the most flagged IPs in Somalia
Autonomous systems announcing the flagged networks located in Somalia.
Compare Somalia with other countries
Ranked by flagged IPv4 networks.
Questions about Somalia
- How many malicious IP addresses are there in Somalia?
- On 2026-10-11, 3 IPv4 networks (/24 blocks) located in Somalia were flagged for malicious activity, with 3 listed IPv4 addresses. Each /24 counts once, however many of its addresses are listed.
- Which networks in Somalia host the most flagged IPs?
- HORMUUD (AS37371, 1 network), SOMTEL (AS37563, 1 network), Golis-Telecom-AS (AS328250, 1 network). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.
Query this data per IP via the API
Look up threat categories, reputation score, ASN and geolocation for any address in Somalia or anywhere else with one API call.