IPMediumSignal 46/100
137.184.2.31
Location
United StatesSanta Clara, California
ASN
AS14061
Digital Ocean
First Seen
Jun 4, 2025
Last Seen
Aug 2, 2025
Found in 9 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
46%
Signal Score
46 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryUnited States
United StatesRegionSanta Clara, California
ASNAS14061
OrganizationDigital Ocean
Feed Intelligence Summary
9 reports46% confidence
9
Source reports
46%
Confidence score
Category tags
abuseaccess controlaccount compromiseaccount securityactive scanningadministrative accessbotnetbrute forcebrute force attackcommand and controlcommunication protocolcredential accesscredential stuffingdata exfiltrationddosddos attacksdecoy systemdenial of servicedistributed attacksexploit attemptsftp brute forcehttp brute forceinternet of thingsintrusion detectioniot botnetiot/ics attacklateral movementmalicious softwaremalwaremalware propagationmalware scanningmirai botnetnetworknetwork activitynetwork attacksnetwork probingnetwork scanningnetwork securitynorth americaoperating systemoperating system securitypassword attackspotential vulnerability scanprivilege escalationprocess injectionproxyreconnaissanceremote accessremote servicesresearchedscanscannerscanning activitysecurity policysmtp brute forcesql injection attemptsssh attackt1018t1021t1021.001t1040t1046t1055t1059t1059.001t1069.001t1071.001t1076t1078t1088t1110t1110.001t1110.002t1110.003t1110.004t1133t1187t1190t1199t1210t1486t1496t1499.001t1499.002t1499.003t1563t1565t1588t1589t1595t1595.001t1595.002t1595.003tcp protocolthreat intelligencethreat preventionunited states
Activity Timeline
Aug 2Aug 2
Threat Activity Heatmap
· Peak: 2025-08-02LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreMedium Risk
46
SIGNAL
Signal Score
46%
Confidence
9
Reports
First seenJun 4, 2025
Last seenAug 2, 2025
GeolocationUS
CountryUnited States
LocationSanta Clara, California
ASNAS14061
OrgDigital Ocean
Coords37.7510, -97.8220
VirusTotal
Not checked
WHOIS
- description
- Scans hitting the server at TCP port 3389 RDP. Same IP should not appear more than once in 96 hours in our lists S3#.
- raw
- NetRange: 137.184.0.0 - 137.184.255.255 CIDR: 137.184.0.0/16 NetName: DIGITALOCEAN-137-184-0-0 NetHandle: NET-137-184-0-0-1 Parent: NET137 (NET-137-0-0-0-0) NetType: Direct Allocation OriginAS: AS14061 Organization: DigitalOcean, LLC (DO-13) RegDate: 2019-11-13 Updated: 2025-03-03 Comment: Routing and Peering Policy can be found at https://www.as14061.net Comment: Comment: Please submit abuse reports at https://www.digitalocean.com/company/contact/#abuse Ref: https://rdap.arin.net/registry/ip/137.184.0.0 OrgName: DigitalOcean, LLC OrgId: DO-13 Address: 105 Edgeview Drive, Suite 425 City: Broomfield StateProv: CO PostalCode: 80021 Country: US RegDate: 2012-05-14 Updated: 2025-04-11 Ref: https://rdap.arin.net/registry/entity/DO-13 OrgNOCHandle: NOC32014-ARIN OrgNOCName: Network Operations Center OrgNOCPhone: +1-646-827-4366 OrgNOCEmail: [email protected] OrgNOCRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN OrgAbuseHandle: DIGIT19-ARIN OrgAbuseName: DigitalOcean Abuse OrgAbusePhone: +1-646-827-4366 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/DIGIT19-ARIN OrgTechHandle: NOC32014-ARIN OrgTechName: Network Operations Center OrgTechPhone: +1-646-827-4366 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 10 months ago
Appeared in 9 threat reports