This IP address has been reported a total of
21
times from
20 distinct
sources.
18.222.156.64 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 5 09:22:36 Ubuntu-2204-jammy-amd64-base sshd[645177]: Connection closed by 18.222.156.64 port 5 ...
show moreJun 5 09:22:36 Ubuntu-2204-jammy-amd64-base sshd[645177]: Connection closed by 18.222.156.64 port 51246 [preauth]
...
show less
Honeypot [nx-infrastructure]: HTTP/1.1 request on 8094
GET /
User-Agent: visionheight.com/scan Mozi ...
show moreHoneypot [nx-infrastructure]: HTTP/1.1 request on 8094
GET /
User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip; 8094 [4] TCP
Reported by: Justin F.
show less
OpenCanary honeypot hit on port 22 (no legitimate service runs there); logtype 4000. Automated repor ...
show moreOpenCanary honeypot hit on port 22 (no legitimate service runs there); logtype 4000. Automated report.
show less
[probe-168-134] 2026-06-05 09:03:04, Client: 18.222.156.64, Protocol: 6, Unauthorized activity to HT ...
show more[probe-168-134] 2026-06-05 09:03:04, Client: 18.222.156.64, Protocol: 6, Unauthorized activity to HTTP: GET /
show less
Honeypot [fra-de-honeypot]: HTTP/1.1 request on 4841
GET /
User-Agent: visionheight.com/scan Mozill ...
show moreHoneypot [fra-de-honeypot]: HTTP/1.1 request on 4841
GET /
User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip; 4841 [3] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Honeypot [uk-production01]: HTTP/1.1 request on 9443
GET /
User-Agent: visionheight.com/scan Mozill ...
show moreHoneypot [uk-production01]: HTTP/1.1 request on 9443
GET /
User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip; 9443 [4] TCP
show less
Hacking
Bad Web Bot
Anonymous
Honeypot hit: Unauthorized traffic (1 bytes of payload); 22225 [25] TCP
Reported by: https://github. ...
show moreHoneypot hit: Unauthorized traffic (1 bytes of payload); 22225 [25] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-06-05T20:02:37.338949+11:00 smtp.geddy.au exim[1153754]: SMTP call from ec2-18-222-156-64.us-ea ...
show more2026-06-05T20:02:37.338949+11:00 smtp.geddy.au exim[1153754]: SMTP call from ec2-18-222-156-64.us-east-2.compute.amazonaws.com [18.222.156.64] dropped: too many unrecognized commands (last was "Accept: */*")
2026-06-05T20:03:27.723901+11:00 smtp.geddy.au exim[1153760]: SMTP call from ec2-18-222-156-64.us-east-2.compute.amazonaws.com [18.222.156.64] dropped: too many unrecognized commands (last was "Accept: */*")
2026-06-05T20:04:44.604753+11:00 smtp.geddy.au exim[1153764]: SMTP call from ec2-18-222-156-64.us-east-2.compute.amazonaws.com [18.222.156.64] dropped: too many syntax or protocol errors (last command was "?", NULL)
...
show less