Check an IP Address, Domain Name, Subnet, or ASN

137.184.197.57 was found in our database!

$ whois 137.184.197.57

country·🇺🇸 United States

city·North Bergen

isp·DigitalOcean, LLC

asn·AS14061

network·Standard

$ sikker risk 137.184.197.57scoring →

confidence

48%Medium

first_seen·Mar 1, 2026

last_seen·1h ago

sessions·9

events·9

$ sikker protocols 137.184.197.57

RDP

4 / 4

HTTPS

3 / 3

MONGODB

1 / 1

ELASTICSEARCH

1 / 1

$ sikker summary 137.184.197.57

137.184.197.57 has a threat confidence score of 48%. This IP address from United States (AS14061, DigitalOcean, LLC) has been observed in 9 honeypot sessions targeting RDP, HTTPS, MONGODB, ELASTICSEARCH protocols. First observed on March 1, 2026, most recently active March 21, 2026.

$ sikker behaviors 137.184.197.57catalog →

mediumRdp Nla Ntlm Authentication Attempt1x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 137.184.197.57

elastic_http_get_request14 elastic_http_bad_request_path_probe12 elastic_root_path_probe2 rdp_nla_ntlm_auth1

$ sikker related 137.184.197.57

🇺🇸·More threats fromUnited States→AS·More threats fromDigitalOcean, LLC→RDP·More threats targetingRDP→HTTP·More threats targetingHTTPS→MONG·More threats targetingMONGODB→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
45.55.171.27	80%	29
157.230.110.105	35%	1
152.42.221.148	28%	1
167.99.141.235	100%	3,801
188.166.218.20	77%	61

IP Address	Confidence	Events
38.54.104.5	97%	372
3.129.187.38	100%	29,147
162.216.150.89	63%	134
162.142.125.116	50%	2,762
185.242.226.39	98%	1,992