Confidence Level

47%

Medium?

Geolocation

🇺🇸

United StatesAshburn

ISPAmazon.com, Inc.

ASNAS14618

Activity Timeline

First seenFeb 18, 2026, 06:33 AM

Last seen2h ago

48Sessions

48Events

Protocol Breakdown

SIP

25 / 25

SMTP

16 / 16

POSTGRES

5 / 5

FTP

1 / 1

SMB

1 / 1

18.97.19.157 has a threat confidence score of 47%. This IP address from United States (AS14618, Amazon.com, Inc.) has been observed in 48 honeypot sessions targeting SIP, SMTP, POSTGRES, FTP, SMB protocols. First observed on February 18, 2026, most recently active March 12, 2026.

Primitives

Individual actions observed

Sip Call Id Alphanumeric Entropy2 Ftp User Probe1 Ftp Help Request1 Ftp Password Attempt1

Related Threats

Explore related threat intelligence

🇺🇸More threats fromUnited States ASMore threats fromAmazon.com, Inc.SIPMore threats targetingSIP SMTPMore threats targetingSMTP POSTGRESMore threats targetingPOSTGRES FTPMore threats targetingFTP SMBMore threats targetingSMB { }Browse allAttack Patterns

WHOIS Lookup

IP Address	Confidence	Events
52.204.132.161	61%	1,179
44.220.185.155	38%	23
13.223.209.95	50%	24
44.220.188.10	34%	8
44.220.185.67	23%	1

IP Address	Confidence	Events
165.227.102.246	100%	1,086
130.12.180.109	91%	27,219
91.92.243.24	91%	28,097
130.12.180.108	90%	17,145
208.3.195.65	100%	67,424