JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

193.19.109.44

Activity Trending Down

Abuse Confidence Score

21% Elevated

215 reports

105 reporters · latest 1 month ago

ISP: VPN Consumer Seattle, United States of America
Usage Type: Data Center/Web Hosting/Transit
ASN: AS206092
Domain Name: vpnconsumer.com
Country: 🇺🇸 United States of America
City: Seattle, Washington

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

215 from 105 distinct reporters

First reported

July 13th 2021

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 3 🇪🇸 Spain 1 🇫🇷 France 1

Most common categories Web App Attack 6 Exploited Host 1 Bad Web Bot 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-09-23 06:29:23 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇺🇸 lostswordfish.com	2026-09-22 15:16:03 (1 month ago)	Wordfence waf block on fypeducation	Web App Attack
Anonymous	2026-09-20 14:18:33 (1 month ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇬🇧 gigatech	2026-09-18 00:05:06 (1 month ago)	Webserver Probing	Web App Attack
🇪🇸 masterguru	2026-09-17 01:29:10 (1 month ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (5001900-122)	Web App Attack
🇩🇪 neckaralb-admin.de	2026-09-16 13:44:56 (1 month ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 mrcrassi	2026-09-15 12:33:43 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15 This report was gen ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 gadix	2026-08-26 21:34:54 (2 months ago)	[26/Aug/2026:23:34:52.351773 +0200] ao9b_CTNZ6BBigd_bngPZQAAAAQ 193.19.109.44 60760 127.0.0.1 7080 [26/Aug/2026:23:34:52.643316 +0200] ao9b_CcNxH9rf8aCZM04UwAAAAU 193.19.109.44 60774 127.0.0.1 7080 [26/Aug/2026:23:34:53.411619 +0200] ao9b_TTpdVg-jBk1 ... show more [26/Aug/2026:23:34:52.351773 +0200] ao9b_CTNZ6BBigd_bngPZQAAAAQ 193.19.109.44 60760 127.0.0.1 7080 [26/Aug/2026:23:34:52.643316 +0200] ao9b_CcNxH9rf8aCZM04UwAAAAU 193.19.109.44 60774 127.0.0.1 7080 [26/Aug/2026:23:34:53.411619 +0200] ao9b_TTpdVg-jBk1h-4IBAAAAAg 193.19.109.44 60372 127.0.0.1 7080 ... show less	Web App Attack
🇺🇸 NXTwoThou	2026-08-26 07:35:24 (2 months ago)	174.78	Web App Attack
🇺🇸 Starburst SysOp Team	2026-08-26 04:23:20 (2 months ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-17)	Hacking Bad Web Bot
🇺🇸 HamSammich	2026-08-26 02:16:48 (2 months ago)	Automated sensor: 1 HTTPS connection/probe attempts over the last 24h (latest 2026-08-26T02:16Z).	Brute-Force Web App Attack
🇫🇷 guillaume illien	2026-08-25 00:08:34 (2 months ago)	193.19.109.44 - - [25/Aug/2026:00:08:29 +0000] "POST /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0" 193.19.109.44 - - [25/Aug/2026:00:08:30 +0000] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Wi ... show more 193.19.109.44 - - [25/Aug/2026:00:08:29 +0000] "POST /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0" 193.19.109.44 - - [25/Aug/2026:00:08:30 +0000] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 193.19.109.44 - - [25/Aug/2026:00:08:32 +0000] "GET /.env.save HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 193.19.109.44 - - [25/Aug/2026:00:08:32 +0000] "GET /.env.old HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0" 193.19.109.44 - - [25/Aug/2026:00:08:33 +0000] "GET /.env.prod HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 193.19.109.44 - - [25/Aug/2026:00:08:33 +0000] "GET /.env.production HTTP/1.1" 301 178 "-" ... show less	Hacking Brute-Force Web App Attack SSH
Anonymous	2026-08-24 15:52:52 (2 months ago)	"GET /cms/.env HTTP/1.1"	Hacking Web App Attack
Anonymous	2026-08-23 18:15:09 (2 months ago)	193.19.109.44 - - [23/Aug/2026:21:14:40 +0300] "GET /.env.dist HTTP/1.1" 403 248 193.19.109.44 - - [23/Aug/2026:21:14:55 +0300] "GET /enviroments/.env HTTP/1.1" 403 255 193.19.109.44 - - [23/Aug/2026:21:15:08 +0300] "GET /web/debug/default/view HTTP/ ... show more 193.19.109.44 - - [23/Aug/2026:21:14:40 +0300] "GET /.env.dist HTTP/1.1" 403 248 193.19.109.44 - - [23/Aug/2026:21:14:55 +0300] "GET /enviroments/.env HTTP/1.1" 403 255 193.19.109.44 - - [23/Aug/2026:21:15:08 +0300] "GET /web/debug/default/view HTTP/1.1" 404 268 show less	Bad Web Bot
Anonymous	2026-08-23 00:56:42 (2 months ago)	193.19.109.44 - - [22/Aug/2026:21:56:40 -0300] "POST /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" 193.19.109.44 - - [22/Aug/2026:21:56:41 -0300] "GET /.env HTTP/1.1" 404 548 "-" "Mozil ... show more 193.19.109.44 - - [22/Aug/2026:21:56:40 -0300] "POST /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" 193.19.109.44 - - [22/Aug/2026:21:56:41 -0300] "GET /.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" ... show less	Port Scan

Showing 1 to 15 of 215 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇿 198.163.192.153

🇧🇷 177.223.160.39

🇧🇪 104.199.31.254

🇺🇸 54.89.226.110

🇺🇸 50.17.101.4

🇩🇪 47.254.170.206

🇬🇧 45.135.142.130

🇺🇸 43.153.71.12

🇧🇪 35.210.226.156

🇧🇪 35.210.212.141

🇬🇧 2a06:4880:4000::63

🇧🇪 207.175.112.45

🇺🇸 195.184.76.51

🇺🇸 195.184.76.50

🇺🇸 195.184.76.9

🇳🇱 195.178.110.30

🇰🇬 185.117.149.64

🇺🇸 162.216.149.191

🇹🇭 128.1.44.38

🇹🇭 124.122.126.205