Check an IP Address, Domain Name, Subnet, or ASN

45.15.226.100 was found in our database!

$ whois 45.15.226.100

country·🇲🇩 Moldova

isp·Primanet Srl

asn·AS207164

network·Standard

$ sikker risk 45.15.226.100scoring →

confidence

66%High

first_seen·Feb 20, 2026

last_seen·6d ago

sessions·16

events·16

$ sikker protocols 45.15.226.100

SSH

16 / 16

$ sikker summary 45.15.226.100

45.15.226.100 has a threat confidence score of 66%. This IP address from Moldova (AS207164, Primanet Srl) has been observed in 16 honeypot sessions targeting SSH protocols. Detected attack patterns include ssh routeros cloud probe and telegram sms artifact discovery. First observed on February 20, 2026, most recently active March 26, 2026.

$ sikker behaviors 45.15.226.100catalog →

highSsh Routeros Cloud Probe And Telegram Sms Artifact Discovery2x

SSH post-auth sequence running RouterOS cloud/DDNS commands, Telegram data path checks, GSM/SMS artifact searches, and miner process lookups (`ps | grep miner`), preceded by basic system enumeration.

$ sikker primitives 45.15.226.100

ssh_routeros_ip_cloud_print_probe4 ssh_uname_all2 ssh_cat_proc_cpuinfo2 ssh_ps_ef_grep_miner_bracket_case2 ssh_ifconfig_interface_enumeration2 ssh_routeros_user_set_password_id02 ssh_echo_hi_pipe_cat_numbering_test2 ssh_locate_telegram_tdata_identifier2 ssh_routeros_interface_lte_print_probe2 ssh_routeros_ip_cloud_set_ddns_enabled2 ssh_ps_pipe_grep_miner_case_insensitive2 ssh_ls_telegram_tdata_and_gsm_sms_artifacts2

$ sikker related 45.15.226.100

🇲🇩·More threats fromMoldova→AS·More threats fromPrimanet Srl→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
45.15.224.178	90%	136
45.15.225.120	76%	25
185.164.80.171	59%	1
45.15.227.120	69%	77
185.164.81.156	59%	1

IP Address	Confidence	Events
45.15.224.178	90%	136
91.225.219.211	75%	3
185.70.189.82	18%	28
178.132.144.161	44%	256
45.15.225.120	76%	25