Name: Threat Intelligence: 45.142.89.138
Creator: UnwantedIP
License: https://creativecommons.org/licenses/by/4.0/

Threat LevelCRITICAL72/1001 rule type

2 incidents on record · last seen 37d ago

PTR	user-45-142-89-138.masternet.zp.ua
Org / ASN	FOP Razin
Country	🇺🇦 Ukraine
City	Kyiv, Kyiv City
Timezone	Europe/Kyiv

Attack Analysis

Port 22 Honeypot Probe

This IP connected to a fake SSH honeypot — a port 22 listener that is not a real SSH server. This is an automated scanner fingerprinting targets before launching a brute-force campaign. Legitimate systems never probe port 22 without a specific reason; this activity is virtually 100% malicious.

Reports (2)

Date	Severity	Description
29 Sep 2026 - 02:29	high	IDS: Honeypot probe — port 22 listener that is not a real SSH server — Honeypot: probe to closed SSH port 22
29 Sep 2026 - 02:29	high	IDS: Honeypot probe — port 22 listener that is not a real SSH server

Report for IP: 45.142.89.138

Attack Analysis

Reports (2)

Related IPs — Same /24 Block (45.142.89.0/24)