Check an IP Address, Domain Name, Subnet, or ASN

41.38.56.120 was found in our database!

$ whois 41.38.56.120

country·🇪🇬 Egypt

city·Cairo

isp·TE Data

asn·AS8452

network·Standard

$ sikker risk 41.38.56.120scoring →

confidence

63%High

first_seen·Mar 17, 2026

last_seen·2h ago

sessions·2

events·2

$ sikker protocols 41.38.56.120

TELNET

2 / 2

$ sikker summary 41.38.56.120

41.38.56.120 has a threat confidence score of 63%. This IP address from Egypt (AS8452, TE Data) has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on March 17, 2026, most recently active March 21, 2026.

$ sikker primitives 41.38.56.120

telnet_command_cd22 telnet_busybox_echo_redirect_file_create22 telnet_shell_execute_writable_hidden_file22 telnet_command_sh8 telnet_busybox_binary_invocation8 telnet_command_ping2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 telnet_command_linuxshell2 telnet_busybox_hostname_set2 telnet_busybox_wget_execution2 telnet_sh_execute_downloaded_script2 telnet_busybox_ftpget_remote_file_download2 telnet_busybox_tftp_get_remote_file_stdout2 telnet_curl_remote_script_stdout_execution2

$ sikker related 41.38.56.120

🇪🇬·More threats fromEgypt→AS·More threats fromTE Data→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
81.10.64.102	12%	9
197.57.221.135	91%	485
196.219.125.58	95%	31
41.32.25.178	51%	13
156.209.38.204	44%	6

IP Address	Confidence	Events
81.10.64.102	12%	9
41.65.226.84	54%	821
31.6.10.10	57%	33
197.57.221.135	91%	485
196.219.125.58	95%	31