Check an IP Address, Domain Name, Subnet, or ASN

165.232.138.158 was found in our database!

$ whois 165.232.138.158

country·🇺🇸 United States

city·Santa Clara

isp·DigitalOcean, LLC

asn·AS14061

network·Standard

$ sikker risk 165.232.138.158scoring →

confidence

44%Medium

first_seen·Jan 20, 2026

last_seen·1h ago

sessions·112

events·185

$ sikker protocols 165.232.138.158

HTTP

57 / 107

HTTPS

40 / 60

SSH

7 / 10

RDP

8 / 8

$ sikker summary 165.232.138.158

165.232.138.158 has a threat confidence score of 44%. This IP address from United States (AS14061, DigitalOcean, LLC) has been observed in 112 honeypot sessions targeting HTTP, HTTPS, SSH, RDP protocols. First observed on January 20, 2026, most recently active March 28, 2026.

$ sikker behaviors 165.232.138.158catalog →

infoHttp Bad Request Route Probe1x

Identifies HTTP GET requests directly targeting the /bad-request path, indicating automated or manual probing of application error-handling routes rather than legitimate navigation flow.

$ sikker primitives 165.232.138.158

http_method_get5 http_path_bad_request5

$ sikker related 165.232.138.158

🇺🇸·More threats fromUnited States→AS·More threats fromDigitalOcean, LLC→HTTP·More threats targetingHTTP→HTTP·More threats targetingHTTPS→SSH·More threats targetingSSH→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
138.197.81.20	94%	132
165.232.66.142	62%	200
64.226.89.158	72%	34
167.99.246.149	87%	13
104.248.59.26	49%	126

IP Address	Confidence	Events
157.254.223.80	95%	1,202
170.130.55.164	52%	4
66.132.224.235	80%	67
92.118.39.62	100%	380,865
92.118.39.95	100%	83,963