Check an IP Address, Domain Name, Subnet, or ASN

41.56.227.241 was found in our database!

$ whois 41.56.227.241

country·🇿🇦 South Africa

city·Cape Town

isp·RAIN-GROUP-HOLDINGS

asn·AS37105

network·Standard

$ sikker risk 41.56.227.241scoring →

confidence

51%Medium

first_seen·Mar 1, 2026

last_seen·21d ago

sessions·1

events·1

$ sikker protocols 41.56.227.241

TELNET

1 / 1

$ sikker summary 41.56.227.241

41.56.227.241 has a threat confidence score of 51%. This IP address from South Africa (AS37105, RAIN-GROUP-HOLDINGS) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 1, 2026, most recently active March 1, 2026.

$ sikker primitives 41.56.227.241

telnet_shell_execute_writable_hidden_file11 telnet_command_cd10 telnet_busybox_echo_redirect_file_create10 telnet_command_sh2 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_command_iptables_flush1 telnet_busybox_binary_invocation1

$ sikker related 41.56.227.241

🇿🇦·More threats fromSouth Africa→AS·More threats fromRAIN-GROUP-HOLDINGS→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
197.185.153.224	35%	3
197.185.153.162	49%	9
41.56.246.123	49%	9
197.184.78.88	42%	5
197.184.113.10	52%	12

IP Address	Confidence	Events
196.251.137.80	50%	107
66.8.6.150	35%	168
102.33.152.138	99%	914
164.151.136.50	62%	1,883
66.8.6.148	34%	164