18.97.26.70 has a low threat confidence level of 32%, originating from Ashburn, United States, on the Amazon.com, Inc. network (14618). It has been observed across 5 sessions targeting FTP, SMTP, MSSQL, First observed on February 4, 2026, most recently active March 5, 2026.