IPMediumSignal 62/100
197.248.170.29
Location
Nairobi, Nairobi City
ASN
AS37061
Safaricom Limited
First Seen
Feb 9, 2026
Last Seen
Jun 7, 2026
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
62%
Signal Score
62 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
Country
Kenya
RegionNairobi, Nairobi City
ASNAS37061
OrganizationSafaricom Limited
Feed Intelligence Summary
7 reports62% confidence
7
Source reports
62%
Confidence score
Category tags
active scanactive scanningafricaaptbad web botblocklist_allbotnet activitybrute forcebruteforceddosddos attackindicatorkekenyanetworkreconnaissanceresearchedscannerssht1595.001t1595.002t1595.003threat actor
Activity Timeline
Jun 7Jun 7
Threat Activity Heatmap
· Peak: 2026-06-07LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
62
SIGNAL
Signal Score
62%
Confidence
7
Reports
First seenFeb 9, 2026
Last seenJun 7, 2026
GeolocationKE
CountryKenya
LocationNairobi, Nairobi City
ASNAS37061
OrgSafaricom Limited
Coords-1.2833, 36.8167
VirusTotal
Not checked
WHOIS
- raw
- inetnum: 197.248.128.0 - 197.248.191.255 netname: Safaricom-Business descr: For Safaricom KENYA Enterprise Business Unit country: KE admin-c: JM27-AFRINIC admin-c: DA1485-AFRINIC tech-c: DA1485-AFRINIC status: ASSIGNED PA remarks: For Safaricom KENYA Enterprise Business Unit mnt-by: MNT-SAF2004 source: AFRINIC # Filtered parent: 197.248.0.0 - 197.248.255.255 person: Domain Admin address: Safaricom Limited address: Safaricom House address: POBox 46350-00100 Nairobi address: Kenya address: Nairobi address: Kenya phone: tel:+254-020427 nic-hdl: DA1485-AFRINIC mnt-by: MNT-SAF2004 source: AFRINIC # Filtered person: John Muita address: P.O Box 66827, 00800 address: Nairobi address: Kenya address: Nairobi address: Kenya phone: tel:+254-722-002829 fax-no: tel:+254-722-003272 nic-hdl: JM27-afrinic mnt-by: GENERATED-UNS1E7EXFG6F7TJILQ9DMMHDN4Y0VRSV-MNT source: AFRINIC # Filtered route: 197.248.170.0/24 descr: Safaricom Limited origin: AS33771 mnt-by: MNT-SAF2004 source: AFRINIC # Filtered
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 4 months ago · Last seen 5 days ago
Appeared in 7 threat reports