189.113.8.254

189.113.8.254 is a threat-intelligence indicator (IPv4 address) classified as Malicious, corroborated across 4 independent feeds. It is aggregated and de-duplicated from many open and commercial threat feeds, with confidence scoring and decay over time.

Indicator facts

Type

IPv4 address

Indicator

189.113.8.254

Classification

Malicious

Confidence

85 / 100

Corroboration

4 independent sources

First seen

2026-06-22

Last seen

2026-07-07

Network (ASN)

AS28209 — Under Servicos de Internet Ltda

Country

BR

Tags

• aggregate-source
• attacker
• sshpwauth
• scanner
• malicious

Related CVEs (6)

• CVE-2019-8331
• CVE-2018-20677
• CVE-2018-20676
• CVE-2018-14042
• CVE-2018-14040
• CVE-2016-10735

← Threat intelligence command center · Explore the indicator corpus