// actor profile

197.248.207.138

geo Kenya · Nairobi[KE]asn AS37061 Safaricom Limitedisp Safaricom Limited

// observed 18d · refreshed 2026-08-25 17:07:48 UTC

Behavior

actor.persistent asn.coordinated ssh.bruteforce ssh.stuffing subnet.coordinated

Stats

Total events

SSH events

60 failures

Distinct users tried

Distinct paths tried

0 HTTP 4xx

Observed tactics

ssh.dictionary ssh.enum

Recent activity

// last 25 events · successful exploits filtered

When	Source	Category	Detail	Status	Tags
2026-08-19 03:27:05	ssh	auth.failure	user administrator	warn	ssh.enumssh.dictionary
2026-08-19 03:22:11	ssh	auth.failure	user richard	warn	ssh.enum
2026-08-19 03:19:40	ssh	auth.failure	user random	warn	ssh.enum
2026-08-19 03:17:11	ssh	auth.failure	user user1	warn	ssh.enum
2026-08-19 03:09:40	ssh	auth.failure	user user3	warn	ssh.enum
2026-08-19 03:07:08	ssh	auth.failure	user backend	warn	ssh.enum
2026-08-19 02:59:38	ssh	auth.failure	user developer	warn	ssh.enumssh.dictionary
2026-08-19 02:49:33	ssh	auth.failure	user garrysmod	warn	ssh.enum
2026-08-19 02:42:02	ssh	auth.failure	user vault	warn	ssh.enum
2026-08-19 02:37:03	ssh	auth.failure	user hadoop	warn	ssh.enumssh.dictionary
2026-08-19 02:31:46	ssh	auth.failure	user user2	warn	ssh.enum
2026-08-19 02:23:16	ssh	auth.failure	user backupuser	warn	ssh.enum
2026-08-19 02:18:05	ssh	auth.failure	user taufik	warn	ssh.enum
2026-08-19 02:15:31	ssh	auth.failure	user sdc	warn	ssh.enum
2026-08-19 02:13:03	ssh	auth.failure	user angelica	warn	ssh.enum
2026-08-19 02:07:58	ssh	auth.failure	user user	warn	ssh.enumssh.dictionary
2026-08-19 02:05:26	ssh	auth.failure	user vadim	warn	ssh.enum
2026-08-19 02:02:47	ssh	auth.failure	user patrick	warn	ssh.enum
2026-08-19 02:00:19	ssh	auth.failure	user liujie	warn	ssh.enum
2026-08-19 01:57:49	ssh	auth.failure	user training	warn	ssh.enum
2026-08-19 01:55:21	ssh	auth.failure	user alex	warn	ssh.enum
2026-08-19 01:50:15	ssh	auth.failure	user admini	warn	ssh.enum
2026-08-19 01:42:27	ssh	auth.failure	user obc	warn	ssh.enum
2026-08-19 01:40:01	ssh	auth.failure	user user6	warn	ssh.enum
2026-08-19 01:35:03	ssh	auth.failure	user ftpuser	warn	ssh.enumssh.dictionary

// machine-readable

JSON →tactic catalog →