Check an IP Address, Domain Name, Subnet, or ASN

138.197.131.20 was found in our database!

$ whois 138.197.131.20

country·🇨🇦 Canada

city·Toronto

isp·DigitalOcean, LLC

asn·AS14061

network·Standard

$ sikker risk 138.197.131.20scoring →

confidence

44%Medium

first_seen·Feb 3, 2026

last_seen·1h ago

sessions·69

events·101

$ sikker protocols 138.197.131.20

HTTP

28 / 46

HTTPS

26 / 38

RDP

8 / 8

SSH

6 / 8

ELASTICSEARCH

1 / 1

$ sikker summary 138.197.131.20

138.197.131.20 has a threat confidence score of 44%. This IP address from Canada (AS14061, DigitalOcean, LLC) has been observed in 69 honeypot sessions targeting HTTP, HTTPS, RDP, SSH, ELASTICSEARCH protocols. First observed on February 3, 2026, most recently active March 24, 2026.

$ sikker behaviors 138.197.131.20catalog →

infoHttp Bad Request Route Probe2x

Identifies HTTP GET requests directly targeting the /bad-request path, indicating automated or manual probing of application error-handling routes rather than legitimate navigation flow.

$ sikker primitives 138.197.131.20

http_method_get2 http_path_bad_request2 elastic_http_get_request1 elastic_http_bad_request_path_probe1

$ sikker related 138.197.131.20

🇨🇦·More threats fromCanada→AS·More threats fromDigitalOcean, LLC→HTTP·More threats targetingHTTP→HTTP·More threats targetingHTTPS→RDP·More threats targetingRDP→SSH·More threats targetingSSH→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
188.166.118.40	46%	7
206.189.84.29	77%	77
104.236.88.138	80%	124
157.230.44.79	80%	114
159.65.252.173	80%	122

IP Address	Confidence	Events
86.54.31.32	100%	3,075
204.191.73.133	28%	97
134.122.47.36	23%	1
96.1.40.151	66%	426
70.65.44.183	100%	1,058