Safaricom IP Ranges
Safaricom is Kenya's largest mobile network operator, and AS33771 is the AFRINIC-registered autonomous system that carries its traffic: mobile data, fixed broadband and general subscriber sessions all originate from the same number. The registry lists it under the as-name SAFARICOM-LIMITED, held by Safaricom Limited under organisation handle ORG-SL70-AFRINIC, registered with AFRINIC on 2005-04-11. It is not the company's only ASN - AFRINIC also lists AS37061 under the identical organisation handle, and what runs there is not documented separately in the registry.
- Provider
- Safaricom
- Primary ASN
- AS33771
- Category
- ISP
- Headquarters
- Nairobi, Kenya
- Announced IPv4 prefixes
- 101
- Registry
- AFRINIC
Known IP ranges
These prefixes are currently announced to the global routing table by AS33771 (Safaricom Limited - Safaricom Limited). Prefix sets change over time - use WHOIS Lookup for the authoritative record on any specific address.
196.96.0.0/12
105.160.0.0/13
41.80.0.0/15
196.96.0.0/16
41.81.0.0/16
105.165.0.0/16
105.160.0.0/16
41.90.0.0/16
105.161.0.0/17
105.161.128.0/17
2c0f:fe38::/32
2c0f:fe38:2100::/43
2c0f:fe38:2000::/43 (IPv6)
What does a Safaricom IP mean in a privacy test?
Reverse DNS on Safaricom's mobile pools returns nothing - sampled addresses in 105.160.0.0/14, 41.80.0.0/15 and 41.90.0.0/16 all come back NXDOMAIN - while some of its non-mobile space does resolve under safaricom.co.ke, so a WHOIS or RIPEstat lookup against AS33771 is the reliable way to confirm the network, not a PTR name.
Where Safaricom's own IP data comes from
Safaricom does not publish a geofeed. RFC 9092 has operators point at one from the RIR record itself, through a geofeed attribute or a remarks Geofeed line on the inetnum, and none of Safaricom's AFRINIC objects carry either; the obvious paths on safaricom.co.ke return 404 as well, so there is no first-party document to check announced space against. What is independently checkable is the AFRINIC registry: AS33771 is filed as SAFARICOM-LIMITED under organisation handle ORG-SL70-AFRINIC, registered 2005-04-11, and the prefix counts on this page come off RIPEstat's live routing-table view of that ASN, currently 101 IPv4 and 20 IPv6 prefixes. That count moves as Safaricom adds or withdraws announcements, so treat it as a snapshot rather than a fixed size.
The individual allocations carry their own netnames in AFRINIC whois, and those are more informative than the ASN record alone. 41.80.0.0/15 is registered as SAFARICOM-20100616, an ALLOCATED PA block held by Safaricom Limited, and it is carved into mobile assignments below that level: 41.80.0.0/17 is SFC-GPRS-EDGE-3G-SERVICE-POOL1, remarked as a mobile broadband dynamic IP pool, and 41.81.0.0/16 is SFC-GPRS-EDGE-3G-SERVICE-POOL3, remarked as a GGSN pool. The registry inetnum 105.160.0.0/14 is netname SFC-GPRS-EDGE-3G, described as KE-SFC-GPRS-EDGE-3G-LTE-Mobile WiFi-SERVICE-IP, and it sits inside the ALLOCATED PA parent 105.160.0.0/13, netname safaricom-2012, which is the block actually routed as a /13. The allocations are mnt-by AFRINIC-HM-MNT with mnt-lower MNT-SAF2004; the assignments beneath them are mnt-by MNT-SAF2004 directly. PeeringDB adds one more figure worth reading carefully: Safaricom's own record there self-reports capacity for up to 1,000 IPv4 prefixes, nearly ten times what RIPEstat shows actually routed - a gap between declared capacity and what is live in the global table that is ordinary on PeeringDB and worth remembering before treating a self-reported figure as a size. The same record shows Safaricom peering publicly only at KIXP in Nairobi, on two 20-gigabit ports with an open policy that asks for no ratio and no contract, plus six listed interconnection facilities, all inside Kenya - a footprint built to serve one country rather than to reach out across the region.
Mobile subscriber, fixed line, or the other Safaricom ASN
Safaricom is overwhelmingly an eyeball network rather than a hosting or cloud platform - its own PeeringDB record reports a mostly-inbound traffic ratio - so an address inside AS33771 is usually Safaricom's own infrastructure reaching a subscriber: a phone on mobile data, a fixed broadband router, or a similar consumer session, rather than a customer's server running on leased Safaricom space. That is a different reading from a cloud or CDN ASN, where the same origin AS could be the company itself or any tenant paying for capacity. What AS33771 does not tell you is which Safaricom product the address belongs to. The registry splits some space by netname - 105.160.0.0/14 is tagged SFC-GPRS-EDGE-3G for mobile data, and the two assignments inside 41.80.0.0/15 are tagged SFC-GPRS-EDGE-3G-SERVICE-POOL1 and SFC-GPRS-EDGE-3G-SERVICE-POOL3 as mobile broadband pools - but the labelling is uneven rather than a full product map, and reverse DNS is no help across that space either: sampled addresses in 105.160.0.0/14, 41.80.0.0/15 and 41.90.0.0/16 all return NXDOMAIN rather than a hostname.
Nor does an AS33771 result rule out the company's other AFRINIC ASN. AFRINIC lists AS37061 under the identical organisation handle, ORG-SL70-AFRINIC - the only two autnums that handle holds - and it currently announces more prefix entries than AS33771, 127 IPv4 against 101, but far less address space: its announcements de-overlap to roughly 123,000 IPv4 addresses against about 1.77 million on AS33771. No public documentation distinguishes what runs on one versus the other. And because this is carrier-issued space, an address on AS33771 mostly places a session inside Kenya on Safaricom's own network, and says nothing about a location more precise than that, or about whether the connection is a home line or a moving handset. It does not even guarantee Kenya: AFRINIC registers 196.97.16.0/22 as SAFARICOM-ETHIOPIA-STEP-SUBALLOC, country ET, a SUB-ALLOCATED PA block described as Safaricom Telecommunications Ethiopia PLC yet sitting under this same ORG-SL70-AFRINIC handle, and RIPEstat shows it originated by AS33771. That Ethiopian operator is a separate legal entity with its own ASN, AS328988 under ORG-STEP1-AFRINIC, but this /22 of its space routes through AS33771 today.
Related tools
Frequently asked questions
What is AS33771?
AS33771 is the AFRINIC-registered Autonomous System Number for Safaricom Limited, Kenya's largest mobile network operator. Registered on 2005-04-11 under organisation handle ORG-SL70-AFRINIC, it carries Safaricom's mobile data, fixed broadband and general subscriber traffic and is filed in AFRINIC whois under the as-name SAFARICOM-LIMITED.
How large is Safaricom's network?
RIPEstat's live routing-table view currently shows AS33771 announcing 101 IPv4 prefixes and 20 IPv6 prefixes, which de-overlap to roughly 1.77 million IPv4 addresses, though that count moves as Safaricom adds or withdraws announcements. Safaricom's own PeeringDB record separately self-reports capacity for up to 1,000 IPv4 prefixes, a common gap between declared capacity and what is actually live in the global routing table at any given moment.
Does an IP in this range guarantee it's really Safaricom?
Mostly, but not absolutely. Safaricom is an eyeball network rather than a hosting platform, so an address on AS33771 is usually Safaricom's own infrastructure - but these are ALLOCATED PA blocks and AFRINIC does show sub-allocated space inside them, including 196.97.16.0/22 handed to Safaricom Telecommunications Ethiopia PLC. It also does not tell you which Safaricom product the address serves, since the registry labels only some blocks by netname, and it does not rule out the address belonging instead to AS37061, the second AFRINIC ASN registered to the identical organisation handle.
How do I look up an IP against AS33771?
Run a WHOIS or ASN lookup on the address and confirm the origin AS reads 33771 with the holder Safaricom Limited under AFRINIC. Do not rely on reverse DNS to confirm it - a sampled address inside one of Safaricom's largest mobile blocks returns NXDOMAIN rather than a hostname, so the absence of a PTR record proves nothing either way.
What does this page not prove?
It does not prove a precise location, since Safaricom's allocations are registered as country-wide blocks with no published geofeed to check against - and it does not even prove Kenya, because AS33771 currently originates 196.97.16.0/22, a block registered to country ET and sub-allocated to Safaricom Telecommunications Ethiopia PLC under the same organisation handle. It also does not distinguish a home broadband line from a moving mobile handset in most of the space.