IOC Radar
IPMediumSignal 35/100

197.248.67.75

Location
KenyaKenya
Nairobi, Kajiado County
ASN
AS37061
Safaricom Limited
First Seen
Mar 4, 2026
Last Seen
May 28, 2026
Mar 4
First Seen
102d ago
May 28
Last Seen
17d ago
7
Reports
source reports
35%
Confidence
medium
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
35%
Signal Score
35 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

7 techniques

Network Information

CountryKEKenya
RegionNairobi, Kajiado County
ASNAS37061
OrganizationSafaricom Limited

Feed Intelligence Summary

7 reports35% confidence
7
Source reports
35%
Confidence score
Category tags
abuseactive scanactive scanningafricabad reputationbad web botblocklistbotnet activitybrute forcebrute force attackcredential accesscredential stuffingddosddos attackexploitation activityexploited hostidentity & access exploitationimapimap attackindicatorkekenyanetworkpassword attacksreconnaissanceresearchedscannersmtpsmtp attackert1110.001t1110.002t1110.003t1110.004t1595.001t1595.002t1595.003

Activity Timeline

1 total obs
May 28May 28

Threat Activity Heatmap

· Peak: 2026-05-28
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreLow Risk
35
SIGNAL
Signal Score
35%
Confidence
7
Reports
First seenMar 4, 2026
Last seenMay 28, 2026
GeolocationKE
CountryKenya
LocationNairobi, Kajiado County
ASNAS37061
OrgSafaricom Limited
Coords-1.4761, 36.9614

VirusTotal

Not checked

WHOIS

raw
inetnum: 197.248.64.0 - 197.248.127.255 netname: Safaricom-Business descr: For Safaricom KENYA Enterprise Business Unit country: KE admin-c: JM27-AFRINIC admin-c: DA1485-AFRINIC tech-c: DA1485-AFRINIC status: ASSIGNED PA remarks: For Safaricom KENYA Enterprise Business Unit mnt-by: MNT-SAF2004 source: AFRINIC # Filtered parent: 197.248.0.0 - 197.248.255.255 person: Domain Admin address: Safaricom Limited address: Safaricom House address: POBox 46350-00100 Nairobi address: Kenya address: Nairobi address: Kenya phone: tel:+254-020427 nic-hdl: DA1485-AFRINIC mnt-by: MNT-SAF2004 source: AFRINIC # Filtered person: John Muita address: P.O Box 66827, 00800 address: Nairobi address: Kenya address: Nairobi address: Kenya phone: tel:+254-722-002829 fax-no: tel:+254-722-003272 nic-hdl: JM27-afrinic mnt-by: GENERATED-UNS1E7EXFG6F7TJILQ9DMMHDN4Y0VRSV-MNT source: AFRINIC # Filtered route: 197.248.64.0/18 descr: Safaricom Limited origin: AS33771 mnt-by: MNT-SAF2004 source: AFRINIC # Filtered

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 3 months ago · Last seen 17 days ago
Appeared in 7 threat reports