Name: Threat Intelligence: 91.218.89.22
Creator: UnwantedIP
License: https://creativecommons.org/licenses/by/4.0/

Threat LevelCRITICAL72/1001 rule type

2 incidents on record · last seen 26d ago

PTR	host6-22.radionet.com.ua
Org / ASN	Private Enterprise RadioNet
Country	🇺🇦 Ukraine
City	Vinnytsia, Vinnytsia
Timezone	Europe/Kyiv

Attack Analysis

Port 22 Honeypot Probe

This IP connected to a fake SSH honeypot — a port 22 listener that is not a real SSH server. This is an automated scanner fingerprinting targets before launching a brute-force campaign. Legitimate systems never probe port 22 without a specific reason; this activity is virtually 100% malicious.

Reports (2)

Date	Severity	Description
10 Oct 2026 - 22:23	high	IDS: Honeypot probe — port 22 listener that is not a real SSH server
10 Oct 2026 - 22:23	high	IDS: Honeypot probe — port 22 listener that is not a real SSH server — Honeypot: probe to closed SSH port 22

Report for IP: 91.218.89.22

Attack Analysis

Reports (2)

Related IPs — Same /24 Block (91.218.89.0/24)