132.248.15.189

132.248.15.189 is a threat-intelligence indicator (IPv4 address) classified as Suspicious, corroborated across 4 independent feeds. It is aggregated and de-duplicated from many open and commercial threat feeds, with confidence scoring and decay over time.

Indicator facts

Type

IPv4 address

Indicator

132.248.15.189

Classification

Suspicious

Confidence

85 / 100

Corroboration

4 independent sources

First seen

2026-07-18

Last seen

2026-09-06

Network (ASN)

AS278 — Universidad Nacional Autonoma de Mexico

Country

MX

Tags

• brute-force
• attacker
• sshpwauth
• scanner
• web

Related CVEs (7)

• CVE-2026-33709
• CVE-2025-23419
• CVE-2024-41942
• CVE-2024-28233
• CVE-2023-44487
• CVE-2021-3618
• CVE-2021-23017

← Threat intelligence command center · Explore the indicator corpus