Check an IP Address, Domain Name, Subnet, or ASN

41.89.173.90 was found in our database!

$ whois 41.89.173.90

country·🇰🇪 Kenya

city·Nairobi

isp·Kenya Education Network

asn·AS36914

network·Standard

$ sikker risk 41.89.173.90scoring →

confidence

27%Low

first_seen·Mar 20, 2026

last_seen·1d ago

sessions·1

events·1

$ sikker protocols 41.89.173.90

REDIS

1 / 1

$ sikker summary 41.89.173.90

41.89.173.90 has a threat confidence score of 27%. This IP address from Kenya (AS36914, Kenya Education Network) has been observed in 1 honeypot sessions targeting REDIS protocols. First observed on March 20, 2026, most recently active March 20, 2026.

$ sikker behaviors 41.89.173.90catalog →

infoRedis Info Command Invocation1x

Identifies execution of the Redis INFO command (case-insensitive), which retrieves server configuration, version, memory usage, and runtime statistics. This behavior reflects service interrogation and environment fingerprinting activity. While INFO can be used legitimately by administrators, it is also commonly observed during automated scanning and pre-exploitation reconnaissance of exposed Redis instances.

$ sikker primitives 41.89.173.90

redis_info_lowercase1

$ sikker related 41.89.173.90

🇰🇪·More threats fromKenya→AS·More threats fromKenya Education Network→REDI·More threats targetingREDIS→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
41.89.96.153	54%	616
41.89.183.252	24%	64
197.136.53.2	21%	46
41.89.55.158	27%	75
41.89.51.26	25%	64

IP Address	Confidence	Events
105.161.118.10	84%	199
41.90.100.147	100%	641
41.89.96.153	54%	616
197.248.147.186	36%	185
41.139.177.151	95%	456