218.28.18.2 has a moderate threat confidence level of 47%, originating from China, on the CHINA UNICOM China169 Backbone network (4837). It has been observed across 134 sessions targeting SSH, First observed on January 22, 2026, most recently active March 5, 2026.