Check an IP Address, Domain Name, Subnet, or ASN

172.69.220.139 was found in our database!

$ whois 172.69.220.139

country·🇱🇺 Luxembourg

city·Luxembourg

isp·Cloudflare, Inc.

asn·AS13335

network·Standard

$ sikker risk 172.69.220.139scoring →

confidence

13%Low

first_seen·Mar 20, 2026

last_seen·19h ago

sessions·1

events·1

$ sikker protocols 172.69.220.139

HTTP

1 / 1

$ sikker summary 172.69.220.139

172.69.220.139 has a threat confidence score of 13%. This IP address from Luxembourg (AS13335, Cloudflare, Inc.) has been observed in 1 honeypot sessions targeting HTTP protocols. First observed on March 20, 2026, most recently active March 20, 2026.

$ sikker behaviors 172.69.220.139catalog →

mediumWordpress Urlencoded Auth Probe1x

Identifies HTTP sessions where WordPress authentication is attempted through URL-encoded form credential submission. This pattern is commonly associated with automated login probing, credential stuffing frameworks, or scripted reconnaissance against WordPress admin authentication workflows.

$ sikker primitives 172.69.220.139

http_wp_login_form_urlencoded_credentials_unordered1

$ sikker related 172.69.220.139

🇱🇺·More threats fromLuxembourg→AS·More threats fromCloudflare, Inc.→HTTP·More threats targetingHTTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
104.23.166.141	5%	2
172.69.221.8	15%	6
172.69.11.7	11%	14
162.158.167.188	15%	7
172.70.231.92	16%	40

IP Address	Confidence	Events
107.189.7.59	52%	7
107.189.30.132	37%	15
107.189.1.154	34%	2
172.69.220.137	12%	4
172.69.220.136	8%	1