Elevated Risk
IP address 137.184.112.192 is a high-risk address linked to persistent hacking activity, with 1869 abuse reports filed against it and a threat level of 8/10, indicating aggressive intrusion behavior that poses a concrete danger to any exposed service.
The address belongs to DigitalOcean's autonomous system AS14061 in the United States and has been flagged by 20 automated honeypot sensors since September 2025, with the most recent activity recorded in July 2026. The detection confidence stands at 88%, with an activity frequency rated 8/10. Analysis of recent reports shows that general hacking attempts dominate the threat landscape, accounting for 19 out of 20 recent submissions, while a single exploited host report suggests this IP may itself be operating under unauthorized control. The volume and consistency of reports over approximately ten months establish a reliable pattern of malicious intent rather than isolated incident.
The hacking activity tied to this IP encompasses unauthorized access attempts, vulnerability scanning, and exploitation of weaknesses in internet-facing systems. This behavior directly threatens organizations with exposed SSH, HTTP, or other network services by attempting to compromise them for further attack propagation or data theft. The combination of high report volume, consistent activity, and an active frequency rating means systems encountering this IP are likely experiencing deliberate, automated intrusion efforts rather than incidental traffic.
Administrators should immediately block 137.184.112.192 at the network perimeter to eliminate contact with this threat source. Implementing strict rate-limiting on authentication endpoints and enforcing strong, unique credentials across all services reduces the effectiveness of any attempted intrusion. Keeping all software current with security patches eliminates known vulnerabilities that this IP likely attempts to exploit. Deploying defensive tools such as fail2ban or equivalent log-based monitoring can automate the detection and blocking of repeated attack patterns originating from this or similar addresses.
NL 
GB 
CA 
MU 
IR 
UA