Check an IP Address, Domain Name, Subnet, or ASN

90.227.44.4 was found in our database!

$ whois 90.227.44.4

country·🇸🇪 Sweden

isp·Telia Company AB

asn·AS3301

network·Standard

$ sikker risk 90.227.44.4scoring →

confidence

59%Medium

first_seen·Mar 30, 2026

last_seen·3h ago

sessions·1

events·1

$ sikker protocols 90.227.44.4

SSH

1 / 1

$ sikker summary 90.227.44.4

90.227.44.4 has a threat confidence score of 59%. This IP address from Sweden (AS3301, Telia Company AB) has been observed in 1 honeypot sessions targeting SSH protocols. Detected attack patterns include ssh routeros cloud probe and telegram sms artifact discovery. First observed on March 30, 2026, most recently active March 30, 2026.

$ sikker behaviors 90.227.44.4catalog →

highSsh Routeros Cloud Probe And Telegram Sms Artifact Discovery1x

SSH post-auth sequence running RouterOS cloud/DDNS commands, Telegram data path checks, GSM/SMS artifact searches, and miner process lookups (`ps | grep miner`), preceded by basic system enumeration.

$ sikker primitives 90.227.44.4

ssh_routeros_ip_cloud_print_probe2 ssh_uname_all1 ssh_cat_proc_cpuinfo1 ssh_ps_ef_grep_miner_bracket_case1 ssh_ifconfig_interface_enumeration1 ssh_routeros_user_set_password_id01 ssh_echo_hi_pipe_cat_numbering_test1 ssh_locate_telegram_tdata_identifier1 ssh_routeros_interface_lte_print_probe1 ssh_routeros_ip_cloud_set_ddns_enabled1 ssh_ps_pipe_grep_miner_case_insensitive1 ssh_ls_telegram_tdata_and_gsm_sms_artifacts1

$ sikker related 90.227.44.4

🇸🇪·More threats fromSweden→AS·More threats fromTelia Company AB→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
90.230.115.5	20%	5
81.226.105.235	97%	38
2.248.74.151	59%	9
213.65.190.48	30%	8
217.208.209.215	57%	433

IP Address	Confidence	Events
193.46.242.52	27%	1
90.230.115.5	21%	6
185.246.128.133	80%	9,201
85.229.46.153	49%	460
155.4.245.222	100%	921