Check an IP Address, Domain Name, Subnet, or ASN

165.227.14.159 was found in our database!

$ whois 165.227.14.159

country·🇺🇸 United States

city·Santa Clara

isp·DigitalOcean, LLC

asn·AS14061

network·Standard

$ sikker risk 165.227.14.159scoring →

confidence

49%Medium

first_seen·Feb 27, 2026

last_seen·1h ago

sessions·58

events·58

$ sikker protocols 165.227.14.159

REDIS

39 / 39

HTTPS

10 / 10

FTP

5 / 5

MONGODB

2 / 2

HTTP

1 / 1

ELASTICSEARCH

1 / 1

$ sikker summary 165.227.14.159

165.227.14.159 has a threat confidence score of 49%. This IP address from United States (AS14061, DigitalOcean, LLC) has been observed in 58 honeypot sessions targeting REDIS, HTTPS, FTP, MONGODB, HTTP and 1 other protocols. First observed on February 27, 2026, most recently active March 26, 2026.

$ sikker behaviors 165.227.14.159catalog →

infoHttps Direct Bad Request Endpoint Access1x

Identifies direct HTTPS requests to the /bad-request path, indicating manual or automated probing of error-handling routes rather than normal application flow.

$ sikker primitives 165.227.14.159

elastic_http_get_request14 elastic_http_bad_request_path_probe12 elastic_root_path_probe2 ftp_help_request1 https_path_bad_request1

$ sikker related 165.227.14.159

🇺🇸·More threats fromUnited States→AS·More threats fromDigitalOcean, LLC→REDI·More threats targetingREDIS→HTTP·More threats targetingHTTPS→FTP·More threats targetingFTP→MONG·More threats targetingMONGODB→HTTP·More threats targetingHTTP→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
167.71.13.226	73%	119
146.190.154.85	99%	582
134.209.115.166	73%	101
64.227.90.185	98%	1,108
143.244.142.61	30%	2

IP Address	Confidence	Events
172.81.128.48	97%	2,139
157.245.223.7	27%	1
208.110.64.186	96%	3,031
92.118.39.87	100%	256,652
92.118.39.62	100%	378,840