Check an IP Address, Domain Name, Subnet, or ASN

159.65.76.40 was found in our database!

$ whois 159.65.76.40

country·🇺🇸 United States

city·Santa Clara

isp·DigitalOcean, LLC

asn·AS14061

network·Standard

$ sikker risk 159.65.76.40scoring →

confidence

53%Medium

first_seen·Feb 28, 2026

last_seen·1h ago

sessions·109

events·109

$ sikker protocols 159.65.76.40

MONGODB

78 / 78

HTTPS

21 / 21

SIP

6 / 6

RDP

1 / 1

SSH

1 / 1

SMTP

1 / 1

ELASTICSEARCH

1 / 1

$ sikker summary 159.65.76.40

159.65.76.40 has a threat confidence score of 53%. This IP address from United States (AS14061, DigitalOcean, LLC) has been observed in 109 honeypot sessions targeting MONGODB, HTTPS, SIP, RDP, SSH and 2 other protocols. First observed on February 28, 2026, most recently active April 2, 2026.

$ sikker behaviors 159.65.76.40catalog →

infoHttps Direct Bad Request Endpoint Access1x

Identifies direct HTTPS requests to the /bad-request path, indicating manual or automated probing of error-handling routes rather than normal application flow.

$ sikker primitives 159.65.76.40

elastic_http_get_request14 elastic_http_bad_request_path_probe12 elastic_root_path_probe2 https_path_bad_request1 https_request_path_my_policy1

$ sikker related 159.65.76.40

🇺🇸·More threats fromUnited States→AS·More threats fromDigitalOcean, LLC→MONG·More threats targetingMONGODB→HTTP·More threats targetingHTTPS→SIP·More threats targetingSIP→RDP·More threats targetingRDP→SSH·More threats targetingSSH→SMTP·More threats targetingSMTP→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
167.71.229.198	38%	20
104.236.205.76	73%	63
138.68.98.239	55%	10
159.203.135.158	23%	1
134.199.158.149	97%	116

IP Address	Confidence	Events
92.118.39.87	100%	262,872
216.218.206.66	100%	2,647
71.6.134.234	100%	992
45.61.184.223	99%	42,562
47.85.109.19	86%	24