High Risk
IP 193.189.100.200 rated at threat level 8/10 based on 13 security reports.
Pattern analysis reveals concerning activity. Confidence: 39%.
More threatening than 75% of monitored IPs
IP Address
193.189.100.200
IPv4
Public
Tor Exit Node
SE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
SE
Location
KeFF Networks Ltd
ASN 41281
13
Reports
Mixed
Data Source
Threat Categories
Brute-Force
12
WP Login Brute Force
6
Exploited Host
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
18. May 2026
Last Activity
6. June 2026
Recent (7 days)
1 incidents
Moderate Network Risk
The network hosting this IP (ASN 41281, operated by KeFF Networks Ltd) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
37%
Medium Confidence
Confidence History
10. Sep 2025 - 6. Jun 2026
39%
Current
Stable
Trend
Security Reports (13)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Exploited Host | Honeypot | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 193.189.100.200
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- Tor Exit Node
- Network Class
- Class C
Geolocation
- Country
-
SE
- ASN
- AS41281
- ISP
- KeFF Networks Ltd
DNS Information
- Reverse DNS
- tor-exit-7
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 13
- First Reported
- 10 Sep 2025
- Last Reported
- 6 Jun 2026, 09:18
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS41281
KeFF Networks Ltd
SE
Network Threat Assessment
6/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
13
Total IPs Monitored
127
Total Reports
9.8
Reports per IP
Network Context
This IP address belongs to KeFF Networks Ltd (AS41281), which manages 13 IP addresses in our monitoring system. Out of these, 127 have been reported for suspicious activities, resulting in a network-wide threat level of 6/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
75
%
Global Threat Ranking
This IP is more threatening than 75% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,229 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
13
avg: 23
-
Network Comparison
Compared against 13 IPs in ASN 41281
Threat Level
8/10
network avg: 7.6
=
Total Reports
13
network avg: 12
=
Network KeFF Networks Ltd has overall threat level 6/10
Geographic Comparison
Compared against 1,018 IPs in SE
Threat Level
8/10
country avg: 5.6
+
Total Reports
13
country avg: 19
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
18 May 2026
1 reports
Daily Average
0.2
reports/day
Most Active
Thursday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
12
WP Login Brute Force
6
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 17:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
186,914 threat incidents tracked globally • Last 24h: 18,893 Logs
FEED
Top Threat Sources
-
01
United States38,421 20.6% -
02
India28,931 15.5% -
03
China26,004 13.9% -
04
Brazil10,236 5.5% -
05
Germany7,138 3.8% -
06
Singapore6,475 3.5% -
07
Indonesia5,522 3% -
08
Russia4,700 2.5% -
09
Pakistan4,646 2.5% -
10
Netherlands4,354 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
12
Related IPs
7.6/10
Avg Threat
22%
Avg Confidence
12
High Threat
High-risk network: Majority of related IPs are flagged
193.189.100.198
8/10
Confidence
31%
Reports
10
Location
SE
SE
193.189.100.194
8/10
Confidence
30%
Reports
13
Location
SE
SE
193.189.100.203
8/10
Confidence
30%
Reports
4
Location
SE
SE
193.189.100.199
8/10
Confidence
26%
Reports
14
Location
SE
SE
193.189.100.197
8/10
Confidence
25%
Reports
16
Location
SE
SE
193.189.100.196
8/10
Confidence
25%
Reports
13
Location
SE
SE
193.189.100.202
8/10
Confidence
18%
Reports
18
Location
SE
SE
193.189.100.204
7/10
Confidence
18%
Reports
17
Location
SE
SE
193.189.100.195
7/10
Confidence
17%
Reports
11
Location
SE
SE
193.189.100.206
7/10
Confidence
17%
Reports
10
Location
SE
SE
193.189.100.201
7/10
Confidence
14%
Reports
13
Location
SE
SE
193.189.100.205
7/10
Confidence
10%
Reports
9
Location
SE
SE
IPs from the same subnet range, likely same network segment.
12
Related IPs
7.6/10
Avg Threat
22%
Avg Confidence
12
High Threat
High-risk network: Majority of related IPs are flagged
193.189.100.198
8/10
Confidence
31%
Reports
10
Location
SE
SE
193.189.100.194
8/10
Confidence
30%
Reports
13
Location
SE
SE
193.189.100.203
8/10
Confidence
30%
Reports
4
Location
SE
SE
193.189.100.199
8/10
Confidence
26%
Reports
14
Location
SE
SE
193.189.100.197
8/10
Confidence
25%
Reports
16
Location
SE
SE
193.189.100.196
8/10
Confidence
25%
Reports
13
Location
SE
SE
193.189.100.202
8/10
Confidence
18%
Reports
18
Location
SE
SE
193.189.100.204
7/10
Confidence
18%
Reports
17
Location
SE
SE
193.189.100.195
7/10
Confidence
17%
Reports
11
Location
SE
SE
193.189.100.206
7/10
Confidence
17%
Reports
10
Location
SE
SE
193.189.100.201
7/10
Confidence
14%
Reports
13
Location
SE
SE
193.189.100.205
7/10
Confidence
10%
Reports
9
Location
SE
SE
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
192.109.200.101
8/10
Confidence
100%
Reports
266
ISP
Pfcloud UG (haf...
192.176.172.166
8/10
Confidence
100%
Reports
248
ISP
Kepler Technolo...
83.68.248.161
10/10
Confidence
100%
Reports
94
ISP
Arkaden Konsult AB
171.25.158.58
10/10
Confidence
100%
Reports
56
ISP
Patrik Lagerman
4.225.39.110
10/10
Confidence
100%
Reports
53
ISP
Microsoft Corpo...
192.109.200.237
10/10
Confidence
100%
Reports
35
ISP
Pfcloud UG (haf...
171.25.158.24
10/10
Confidence
99%
Reports
71
ISP
Patrik Lagerman
171.25.158.82
10/10
Confidence
99%
Reports
67
ISP
Patrik Lagerman
171.25.158.80
10/10
Confidence
99%
Reports
37
ISP
Patrik Lagerman
90.143.178.70
10/10
Confidence
97%
Reports
26
ISP
Tele2 SWIPnet
195.47.238.177
10/10
Confidence
96%
Reports
131
ISP
No ACK Group Ho...
171.25.158.74
10/10
Confidence
96%
Reports
86
ISP
Patrik Lagerman
195.47.238.91
8/10
Confidence
96%
Reports
77
ISP
No ACK Group Ho...
171.25.158.70
10/10
Confidence
95%
Reports
124
ISP
Patrik Lagerman
185.246.128.133
10/10
Confidence
94%
Reports
5,106
ISP
w1n ltd
IPs with similar threat level and confidence scores.
15
Related IPs
7.7/10
Avg Threat
39%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
178.16.53.170
8/10
Confidence
39%
Reports
51
Location
NL
NL
198.71.60.118
8/10
Confidence
39%
Reports
40
Location
US
US
167.71.64.12
7/10
Confidence
39%
Reports
30
Location
NL
NL
129.121.74.194
8/10
Confidence
39%
Reports
28
Location
US
US
114.119.157.118
6/10
Confidence
39%
Reports
28
Location
SG
SG
2a09:bac1:b40:10::23:4a4
7/10
Confidence
39%
Reports
21
Location
BD
BD
185.220.101.106
8/10
Confidence
39%
Reports
20
Location
DE
DE
45.149.173.217
8/10
Confidence
39%
Reports
20
Location
US
US
162.0.216.102
8/10
Confidence
39%
Reports
16
Location
US
US
130.12.180.15
8/10
Confidence
39%
Reports
15
Location
US
US
185.220.101.102
8/10
Confidence
39%
Reports
13
Location
DE
DE
185.220.100.246
10/10
Confidence
39%
Reports
13
Location
DE
DE
185.223.152.92
7/10
Confidence
39%
Reports
12
Location
US
US
160.187.221.29
7/10
Confidence
39%
Reports
11
Location
PH
PH
103.145.55.183
7/10
Confidence
39%
Reports
11
Location
IN
IN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203