🇸🇴 Somalia: live cyber threat activity
Malicious IPs, malware and ransomware victims in Somalia.
3Malicious IPs listed#147 of 182 countries · 0% of the world
0New in the last 24hfirst seen by any feed
2Reported by 2+ feedsindependent sources agree
1Ransomware victimsposted in the last 30 days
View Somalia on the live map →All listed IPs in SomaliaRansomware victims in Somalia
Newly listed, last 30 days
IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.
2026-09-13 – 2026-10-12 (UTC)
What it is
Listed IPs by role.
By state or region
By city
Networks hosting the most
Malware families served from Somalia
No malware family attributed to IPs here.
Most recently reported
| IP | Role | Family / threat | Where | Network | Reported by | Last reported (UTC) |
|---|---|---|---|---|---|---|
| 197.220.72[.]23 | Attacker | Attacking host | Mogadishu, Banaadir | AS37371 Hormuud Telecom Somalia INC | 1 feed | — |
| 197.220.92[.]185 | Attacker | Attacking host | Mogadishu, Banaadir | AS37371 Hormuud Telecom Somalia INC | 2 feeds | — |
| 197.231.202[.]201 | Attacker | Attacking host | Hargeisa, Woqooyi Galbeed | AS37563 SOMTEL INTERNATIONAL Ltd | 2 feeds | — |
Ransomware victims in Somalia
1 posted in the last 30 days, 1 in 90.
Sectors hit (30 days)
Groups (30 days)
| Posted (UTC) | Victim | Group | Sector |
|---|---|---|---|
| 2026-09-21 06:10 | siinqeebank.com | lockbit5 | Financial Services |
Other countries
🇺🇸 United States 17,790🇨🇳 China 10,829🇩🇪 Germany 4,280🇬🇧 United Kingdom 3,643🇷🇺 Russia 3,594🇳🇱 Netherlands 2,316🇮🇳 India 2,051🇫🇷 France 1,534🇧🇷 Brazil 1,405🇸🇬 Singapore 1,360🇰🇷 South Korea 1,332🇭🇰 Hong Kong 1,323🇮🇩 Indonesia 1,189🇨🇦 Canada 888🇵🇰 Pakistan 854🇧🇪 Belgium 759🇯🇵 Japan 735🇺🇦 Ukraine 679🇵🇱 Poland 564🇿🇦 South Africa 558🇲🇾 Malaysia 556🇻🇳 Vietnam 550🇮🇹 Italy 410🇸🇪 Sweden 383All countries →