18.97.5.102 has a low threat confidence level of 34%, originating from Ashburn, United States, on the Amazon.com, Inc. network (14618). It has been observed across 2 sessions targeting SIP, SMTP, First observed on March 9, 2026, most recently active March 10, 2026.