Substantial Risk
IP 192.109.200.101 is a high-risk address operating from Sweden that has generated 232 abuse reports since April 2026, with the overwhelming majority documenting WordPress-focused brute-force and user-enumeration activity. With a threat level of 8/10 and an activity frequency rated 8/10, this IP demonstrates persistent, systematic targeting of web authentication systems, primarily WordPress installations.
Security sensors across 20 distinct detection points — 9 automated honeypot installations and 11 community reporting sources — recorded this hostile activity between April and June 2026. The Pfcloud UG (haftungsbeschrankt) network, operating under ASN AS51396, hosts this address, which shows consistent patterns of coordinated WordPress credential attacks, including login brute-forcing and username discovery operations.
WordPress brute-force attacks systematically attempt credential combinations against wp-login.php and XML-RPC interfaces, enabling account takeover, data theft and malware distribution when successful. The concurrent user-enumeration activity observed against this IP identifies valid usernames before launching targeted password attacks — a significantly more efficient and dangerous methodology than generic password guessing alone.
Site operators running WordPress should immediately implement rate limiting on authentication endpoints, enforce account lockout policies after repeated failed login attempts, require multi-factor authentication for all administrative accounts, and consider deploying automated tools such as fail2ban to dynamically block IPs exhibiting this pattern of credential abuse.
NL 
IR 
BG 
LK 
AU 
LT 
JP 
VN