Check an IP Address, Domain Name, Subnet, or ASN

172.70.39.159 was found in our database!

$ whois 172.70.39.159

country·🇺🇸 United States

city·Ashburn

isp·Cloudflare, Inc.

asn·AS13335

network·Standard

$ sikker risk 172.70.39.159scoring →

confidence

12%Low

first_seen·Apr 8, 2026

last_seen·1h ago

sessions·1

events·1

$ sikker protocols 172.70.39.159

HTTP

1 / 1

$ sikker summary 172.70.39.159

172.70.39.159 has a threat confidence score of 12%. This IP address from United States (AS13335, Cloudflare, Inc.) has been observed in 1 honeypot sessions targeting HTTP protocols. First observed on April 8, 2026, most recently active April 8, 2026.

$ sikker behaviors 172.70.39.159catalog →

mediumWordpress Urlencoded Auth Probe1x

Identifies HTTP sessions where WordPress authentication is attempted through URL-encoded form credential submission. This pattern is commonly associated with automated login probing, credential stuffing frameworks, or scripted reconnaissance against WordPress admin authentication workflows.

$ sikker primitives 172.70.39.159

http_wp_login_form_urlencoded_credentials_unordered1

$ sikker related 172.70.39.159

🇺🇸·More threats fromUnited States→AS·More threats fromCloudflare, Inc.→HTTP·More threats targetingHTTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.64.217.4	10%	10
104.22.24.38	12%	17
172.71.111.60	10%	1
172.68.213.244	11%	9
104.22.7.166	21%	16

IP Address	Confidence	Events
198.235.24.68	99%	332
5.253.86.23	97%	10,391
18.116.101.220	100%	42,284
91.230.168.179	81%	107
91.230.168.181	63%	76