Check an IP Address, Domain Name, Subnet, or ASN

138.197.131.7 was found in our database!

$ whois 138.197.131.7

country·🇨🇦 Canada

city·Toronto

isp·DigitalOcean, LLC

asn·AS14061

network·Standard

$ sikker risk 138.197.131.7scoring →

confidence

55%Medium

first_seen·Jan 21, 2026

last_seen·1h ago

sessions·180

events·266

$ sikker protocols 138.197.131.7

HTTP

78 / 130

HTTPS

87 / 121

RDP

6 / 6

SSH

6 / 6

POSTGRES

2 / 2

ELASTICSEARCH

1 / 1

$ sikker summary 138.197.131.7

138.197.131.7 has a threat confidence score of 55%. This IP address from Canada (AS14061, DigitalOcean, LLC) has been observed in 180 honeypot sessions targeting HTTP, HTTPS, RDP, SSH, POSTGRES and 1 other protocols. First observed on January 21, 2026, most recently active March 30, 2026.

$ sikker behaviors 138.197.131.7catalog →

infoHttp Bad Request Route Probe5x

Identifies HTTP GET requests directly targeting the /bad-request path, indicating automated or manual probing of application error-handling routes rather than legitimate navigation flow.

$ sikker primitives 138.197.131.7

http_method_get11 http_path_bad_request11 elastic_http_get_request1 elastic_http_bad_request_path_probe1

$ sikker related 138.197.131.7

🇨🇦·More threats fromCanada→AS·More threats fromDigitalOcean, LLC→HTTP·More threats targetingHTTP→HTTP·More threats targetingHTTPS→RDP·More threats targetingRDP→SSH·More threats targetingSSH→POST·More threats targetingPOSTGRES→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
165.227.197.65	97%	458
137.184.63.156	97%	442
159.89.231.117	96%	385
157.230.239.197	67%	16
143.244.152.105	84%	338

IP Address	Confidence	Events
66.179.9.227	100%	2,791
147.92.66.188	50%	404
50.72.129.112	23%	1
206.223.161.52	82%	6
136.144.17.81	65%	513