🇰🇪 Kenya: live cyber threat activity

Malicious IPs, malware and ransomware victims in Kenya.

58Malicious IPs listed#60 of 182 countries · 0.09% of the world
16New in the last 24hfirst seen by any feed
24Reported by 2+ feedsindependent sources agree
2Ransomware victimsposted in the last 30 days

View Kenya on the live map →All listed IPs in KenyaRansomware victims in Kenya

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C21
  2. Malware0
  3. Phishing0
  4. Attacker57

By state or region

  1. Nairobi County32
  2. Kiambu County8
  3. Machakos County3
  4. Laikipia3
  5. Mombasa County2
  6. Nakuru County2
  7. Kirinyaga County1
  8. Siaya County1
  9. Samburu County1
  10. Meru County1
  11. Murang'A1
  12. Tharaka - Nithi1
  13. Nyandarua County1
  14. Nairobi Area1

By city

  1. Nairobi28
  2. Ruiru5
  3. Nanyuki3
  4. Imara Daima Estate3
  5. Mombasa2
  6. Nakuru2
  7. Kiambu2
  8. Thika2
  9. Githunguri1
  10. Kerugoya1
  11. Athi River1
  12. Rironi1
  13. Mlolongo1
  14. Bondo1
  15. Archers Post1

Networks hosting the most

NetworkIPs
AS37061 Safaricom Limited 11
AS328856 VIJIJI CONNECT LIMITED 6
AS15399 Wananchi Group (K) LTD 4
AS30844 Liquid Telecommunications Ltd 4
AS328847 THE KONZA TECHNOPOLIS DEVELOPMENT AUTHORITY 3
AS33771 Safaricom Limited 3
AS15808 AccessKenya Group 3
AS329261 NEXT THING NETWORKS Limited 2
AS329255 Telcoptics Solutions Ltd 2
AS36866 Jamii Telecommunications Limited 2
AS36914 Kenya Education Network 2
AS328331 POA INTERNET KENYA LIMITED 1
AS329804 SPEEDMAXNET BROADBAND LIMITED 1
AS329658 Net Point Solutions Limited 1
AS329535 ONSITE AFRICA LIMITED 1

Malware families served from Kenya

  1. PureRAT1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
102.208.82[.]93AttackerAttacking hostNairobi, Nairobi CountyAS329468 ELEPHANT TECHNOLOGY LIMITED1 feed2026-10-12 07:15
102.135.172[.]59AttackerAttacking hostGithunguri, Machakos CountyAS328331 POA INTERNET KENYA LIMITED2 feeds2026-10-12 04:35
102.140.196[.]19AttackerAttacking hostNairobi, Nairobi CountyAS15399 Wananchi Group (K) LTD2 feeds2026-10-12 04:35
102.204.4[.]22AttackerAttacking hostNairobi, Nairobi CountyAS329658 Net Point Solutions Limited2 feeds2026-10-12 04:35
102.205.237[.]235AttackerAttacking hostRironi, Kiambu CountyAS329535 ONSITE AFRICA LIMITED3 feeds2026-10-12 04:35
102.208.190[.]254AttackerAttacking hostMombasa, Mombasa CountyAS329255 Telcoptics Solutions Ltd2 feeds2026-10-12 04:35
196.207.161[.]90AttackerAttacking hostMlolongo, Machakos CountyAS15399 Wananchi Group (K) LTD2 feeds2026-10-12 04:35
196.96.218[.]43AttackerAttacking hostArchers Post, Samburu CountyAS33771 Safaricom Limited2 feeds2026-10-12 04:35
41.139.163[.]161AttackerAttacking hostKangare, Murang'AAS37061 Safaricom Limited2 feeds2026-10-12 04:35
41.60.144[.]208AttackerAttacking hostImara Daima Estate, Nairobi CountyAS30844 Liquid Telecommunications Ltd2 feeds2026-10-12 04:35
62.12.117[.]20AttackerAttacking hostNairobi, Nairobi AreaAS37684 Angani Limited2 feeds2026-10-12 04:35
41.90.166[.]215AttackerAttacking hostSouth Kinangop, Nyandarua CountyAS37061 Safaricom Limited1 feed2026-10-12 04:35
102.209.76[.]158AttackerOn multiple blocklistsNairobi, Nairobi CountyAS329422 SAFHOME FIBRE LIMITEDaggregated list2026-10-12 04:35
196.96.171[.]212AttackerAttacking hostBondo, Siaya CountyAS33771 Safaricom Limited1 feed2026-10-11 18:41
2605[:]59c1[:]449f[:]3a08[:]c447[:]ce9d[:]1a48[:]4fa6AttackerAttacking hostNairobi, Nairobi CountyAS14593 Space Exploration Technologies Corporation1 feed2026-10-11 18:41
2c0f[:]fe38[:]2031[:]db3[:]188d[:]7332[:]b74b[:]aa62AttackerAttacking hostRuiru, Kiambu CountyAS33771 Safaricom Limited1 feed2026-10-11 18:41
102.206.174[.]176AttackerMalicious IPNanyuki, LaikipiaAS328977 Wavex Internet Service Provider LTD1 feed2026-10-11 04:31
102.209.58[.]102AttackerMalicious IPRuiru, Kiambu CountyAS328856 VIJIJI CONNECT LIMITED1 feed2026-10-11 04:31
102.211.145[.]101AttackerAttacking hostNakuru, Nakuru CountyAS328490 Unwired Communications Limited2 feeds2026-10-11 04:31
102.213.49[.]141AttackerMalicious IPKiambu, Kiambu CountyAS328856 VIJIJI CONNECT LIMITED1 feed2026-10-11 04:31
102.213.49[.]142AttackerMalicious IPKiambu, Kiambu CountyAS328856 VIJIJI CONNECT LIMITED1 feed2026-10-11 04:31
154.70.14[.]187AttackerAttacking hostNairobi, Nairobi CountyAS15399 Wananchi Group (K) LTD2 feeds2026-10-11 04:31
197.232.63[.]170AttackerAttacking hostNairobi, Nairobi CountyAS36866 Jamii Telecommunications Limited3 feeds2026-10-11 04:31
197.254.97[.]50AttackerAttacking hostNairobi, Nairobi CountyAS15808 AccessKenya Group2 feeds2026-10-11 04:31
41.60.141[.]54AttackerAttacking hostImara Daima Estate, Nairobi CountyAS30844 Liquid Telecommunications Ltd2 feeds2026-10-11 04:31

See every listed IP in Kenya →

Ransomware victims in Kenya

2 posted in the last 30 days, 3 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-09-25 13:24Majani Insurance BrokersVexy RansomwareFinancial Services
2026-09-12 10:26www.eac-airports.comkrybitTransportation
2026-07-25 17:55KeNHADeadlockGovernment & Defense

All ransomware victims in Kenya →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →