Check an IP Address, Domain Name, Subnet, or ASN

172.70.86.139 was found in our database!

$ whois 172.70.86.139

country·🇬🇧 United Kingdom

city·London

isp·Cloudflare, Inc.

asn·AS13335

network·Standard

$ sikker risk 172.70.86.139scoring →

confidence

19%Low

first_seen·Apr 24, 2026

last_seen·1h ago

sessions·8

events·8

$ sikker protocols 172.70.86.139

HTTP

8 / 8

$ sikker summary 172.70.86.139

172.70.86.139 has a threat confidence score of 19%. This IP address from United Kingdom (AS13335, Cloudflare, Inc.) has been observed in 8 honeypot sessions targeting HTTP protocols. First observed on April 24, 2026, most recently active May 3, 2026.

$ sikker behaviors 172.70.86.139catalog →

mediumWordpress Urlencoded Auth Probe7x

Identifies HTTP sessions where WordPress authentication is attempted through URL-encoded form credential submission. This pattern is commonly associated with automated login probing, credential stuffing frameworks, or scripted reconnaissance against WordPress admin authentication workflows.

$ sikker primitives 172.70.86.139

http_wp_login_form_urlencoded_credentials_unordered7 http_method_get2 http_path_config_json1

$ sikker related 172.70.86.139

🇬🇧·More threats fromUnited Kingdom→AS·More threats fromCloudflare, Inc.→HTTP·More threats targetingHTTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.69.194.220	17%	5
172.69.22.86	19%	6
162.158.62.230	28%	28
172.70.80.167	26%	27
108.162.249.157	16%	3

IP Address	Confidence	Events
51.89.235.201	88%	92,782
34.39.83.247	57%	4
149.102.157.6	94%	938
64.89.160.135	80%	2,123
185.53.211.215	94%	1,349