← Back to Dashboard

197.158.254.18 Threat Intelligence Report

Risk Level: MEDIUM — 25 abuse reports from 3 sources

Threat Intelligence Summary

IP address 197.158.254.18 has been flagged in 25 abuse reports across 3 independent threat intelligence sources, resulting in a threat score of 51.9/100 (medium risk). The primary activity associated with this IP is aggregated threat, along with malware c2, ssh bruteforce.

This IP is geolocated in Seychelles (Victoria) and belongs to the network AirtelSeychelles (AS37343). Reports span from 2025-08-03 to 2026-04-16.

Assessment: Reports from 3 independent sources corroborate suspicious activity from 197.158.254.18, though the severity remains moderate. The detected SSH login attempts may indicate a compromised device being used as part of a larger botnet, rather than a dedicated attacker. Monitoring is recommended; consider rate limiting if this IP contacts your systems directly.

Data aggregated from 3 independent threat intelligence sources.

Geolocation

Country Seychelles
City Victoria
Region La Rivière Anglaise
Timezone Indian/Mahe

Threat Status

Overall Status Medium Risk
Threat Score 51.9%
Report Count 25
Sources 3
First Seen 2025-08-03
Last Seen 2026-04-16
AI Analysis

Check IPs automatically with the WAYSCloud API

Free tier: 1,000 lookups/day. Get threat scores, geolocation, and abuse reports via REST API.

Explore the API →

See how we classify and verify threats →

Related Intelligence

Seychelles Threat Intelligence → AS37343 Network Intelligence → See all top malicious IPs → View latest attacks →
Learn about these threats: