Check an IP Address, Domain Name, Subnet, or ASN

172.70.240.37 was found in our database!

$ whois 172.70.240.37

country·🇩🇪 Germany

city·Frankfurt am Main

isp·Cloudflare, Inc.

asn·AS13335

network·Standard

$ sikker risk 172.70.240.37scoring →

confidence

11%Low

first_seen·Mar 9, 2026

last_seen·1h ago

sessions·8

events·8

$ sikker protocols 172.70.240.37

HTTP

8 / 8

$ sikker summary 172.70.240.37

172.70.240.37 has a threat confidence score of 11%. This IP address from Germany (AS13335, Cloudflare, Inc.) has been observed in 8 honeypot sessions targeting HTTP protocols. First observed on March 9, 2026, most recently active March 23, 2026.

$ sikker behaviors 172.70.240.37catalog →

mediumWordpress Urlencoded Auth Probe1x

Identifies HTTP sessions where WordPress authentication is attempted through URL-encoded form credential submission. This pattern is commonly associated with automated login probing, credential stuffing frameworks, or scripted reconnaissance against WordPress admin authentication workflows.

$ sikker primitives 172.70.240.37

http_wp_login_form_urlencoded_credentials_unordered3

$ sikker related 172.70.240.37

🇩🇪·More threats fromGermany→AS·More threats fromCloudflare, Inc.→HTTP·More threats targetingHTTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
104.23.172.80	9%	2
104.23.172.73	9%	13
172.71.124.52	15%	16
104.23.190.150	15%	5
172.69.150.80	12%	1

IP Address	Confidence	Events
181.214.173.120	80%	4,778
87.106.147.36	99%	216,150
49.51.162.14	94%	47
217.154.152.145	80%	350
152.53.191.128	83%	55,780