police.co.ke
Classification: Malicious
police.co.ke is a malicious hostname. Linked to Konni malware. Reported by ThreatFox Abuse.ch, last seen 2025-04-03. Resolves to 46.166.184.119 and 7 more.
Current activity
- Offline — no longer resolving. Last online 2025-08-29 00:01:58.
MITRE ATT&CK associations
Malware families: KONNI (S0356)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Konni | ThreatFox Abuse.ch | 2025-04-01 13:05:11 | 2025-04-03 14:39:45 | malicious-activity | S0356 KONNI |
Tags
lilithIP addresses resolved by this hostname
- 46.166.184.119 (2025-08-18 12:01:03)
- 2a00:1768:2001:63::46:119 (2025-08-18 12:01:03)
- ::1 (2025-08-25 12:12:29)
- 127.0.0.1 (2025-08-25 12:12:29)
- 2a01:4f8:1c1c:8720::2 (2025-08-29 00:01:58)
- 195.201.248.87 (2025-08-29 00:01:58)
- 2a0b:1640:1:1:1:1:e51:8afc (2025-08-29 00:01:58)
- 185.206.180.113 (2025-08-29 00:01:58)
Whois information
- Domain
- police.co.ke
- TLD
- co.ke
- First indexed
- 2025-04-01 13:17:14
- Last updated
- 2026-05-21 14:19:30