Check an IP Address, Domain Name, Subnet, or ASN

18.97.5.40 was found in our database!

$ whois 18.97.5.40

country·🇺🇸 United States

city·Ashburn

isp·Amazon.com, Inc.

asn·AS14618

network·Standard

$ sikker risk 18.97.5.40scoring →

confidence

36%Low

first_seen·Feb 16, 2026

last_seen·2h ago

sessions·6

events·6

$ sikker protocols 18.97.5.40

SSH

2 / 2

DOCKER

2 / 2

FTP

1 / 1

ELASTICSEARCH

1 / 1

$ sikker summary 18.97.5.40

18.97.5.40 has a threat confidence score of 36%. This IP address from United States (AS14618, Amazon.com, Inc.) has been observed in 6 honeypot sessions targeting SSH, DOCKER, FTP, ELASTICSEARCH protocols. First observed on February 16, 2026, most recently active March 26, 2026.

$ sikker primitives 18.97.5.40

docker_get_method7 elastic_http_get_request3 docker_bad_request_uri2 ftp_user_probe1 ftp_help_request1 elastic_root_path_probe1

$ sikker related 18.97.5.40

🇺🇸·More threats fromUnited States→AS·More threats fromAmazon.com, Inc.→SSH·More threats targetingSSH→DOCK·More threats targetingDOCKER→FTP·More threats targetingFTP→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
3.227.192.235	65%	1,828
3.213.226.45	62%	1,449
18.97.5.32	36%	39
52.5.178.59	45%	25
52.204.80.140	32%	11

IP Address	Confidence	Events
159.65.110.231	53%	19
134.209.221.227	63%	37
96.65.238.178	85%	2,316
198.211.112.185	30%	16
45.79.9.251	41%	52