JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 93.99.104.128

93.99.104.128 was found in our database!

This IP was reported 1,026 times. Confidence of Abuse is 40%: ?

40%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Zdenek Klauda - FinalTek.com
Usage Type	Fixed Line ISP
ASN	AS16019
Hostname(s)	128.104.99.93.finalhosting.cz
Domain Name	finaltek.com
Country	🇨🇿 Czechia
City	Prague, Prague

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 93.99.104.128

Whois 93.99.104.128

IP Abuse Reports for 93.99.104.128:

This IP address has been reported a total of 1,026 times from 400 distinct sources. 93.99.104.128 was first reported on May 27th 2022, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-07 02:11:23 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 93.99.104.128 (128.104.99.93.finalhosting.cz): ... show more (mod_security) mod_security (id:210492) triggered by 93.99.104.128 (128.104.99.93.finalhosting.cz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 22:11:19.512354 2026] [security2:error] [pid 10533:tid 10533] [client 93.99.104.128:34780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.makaihe.com"] [uri "/.git/config"] [unique_id "aiTTR_jizaVSBktrmSNPiwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2026-05-31 21:09:22 (6 days ago)	(From [email protected]) SgAkCVqQUwecjLkGhjFN	Phishing Web Spam
🇨🇭 Origon	2026-05-28 02:11:23 (1 week ago)	http-bad-user-agent - IP: 93.99.104.128 - time="2026-05-28T04:11:23+02:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 93.99.104.128 - time="2026-05-28T04:11:23+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 93.99.104.128 (CZ/16019) : 4h ban on Ip 93.99.104.128" module=db show less	Bad Web Bot
🇩🇪 LRob.fr	2026-05-27 13:15:18 (1 week ago)	Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk- ... show more Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk-login jail show less	Brute-Force Web App Attack
🇳🇱 Kotiacat_one	2026-05-26 01:24:36 (1 week ago)	2026-05-26T04:24:35.405545+03:00 kotiacat.nexus sshd-session[11511]: Invalid user 1 from 93.99.104.1 ... show more 2026-05-26T04:24:35.405545+03:00 kotiacat.nexus sshd-session[11511]: Invalid user 1 from 93.99.104.128 port 48234 ... show less	Brute-Force SSH
🇳🇱 Kotiacat_one	2026-05-24 17:09:21 (1 week ago)	2026-05-24T20:09:20.416667+03:00 kotiacat.nexus sshd-session[2809]: Invalid user admin from 93.99.10 ... show more 2026-05-24T20:09:20.416667+03:00 kotiacat.nexus sshd-session[2809]: Invalid user admin from 93.99.104.128 port 42536 ... show less	Brute-Force SSH
🇳🇱 Kotiacat_one	2026-05-23 16:52:18 (2 weeks ago)	2026-05-23T19:52:17.443989+03:00 kotiacat.nexus sshd-session[7348]: Invalid user admin from 93.99.10 ... show more 2026-05-23T19:52:17.443989+03:00 kotiacat.nexus sshd-session[7348]: Invalid user admin from 93.99.104.128 port 36022 ... show less	Brute-Force SSH
🇩🇪 conseilgouz	2026-05-14 06:45:03 (3 weeks ago)	vew-(visforms) : try to access forms...	Hacking
🇧🇪 cmbplf	2026-05-02 03:31:07 (1 month ago)	583 limiting connections by zone (3mos2w5d)	DDoS Attack
🇺🇸 TPI-Abuse	2026-04-24 04:42:40 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 93.99.104.128 (128.104.99.93.finalhosting.cz): ... show more (mod_security) mod_security (id:210350) triggered by 93.99.104.128 (128.104.99.93.finalhosting.cz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 00:42:34.793815 2026] [security2:error] [pid 6978:tid 6978] [client 93.99.104.128:42406] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|bywaterpress.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bywaterpress.com"] [uri "/"] [unique_id "aer0uiFqHiXr4bpPSm7jpQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇪 gnom4ik	2026-04-12 04:38:58 (1 month ago)	ban-reviewer auto report; ip=93.99.104.128; scenario=http:scan; verdict=valid_ban; confidence=0.92; ... show more ban-reviewer auto report; ip=93.99.104.128; scenario=http:scan; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
🇩🇪 LRob.fr	2026-04-07 21:30:07 (1 month ago)	Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk- ... show more Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk-login jail show less	Brute-Force Web App Attack
Anonymous	2026-04-07 12:10:32 (2 months ago)	REPM WEBFORM SPAM 93.99.104.128 (128.104.99.93.finalhosting.cz)	Web Spam
🇺🇸 TPI-Abuse	2026-03-24 07:54:22 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 93.99.104.128 (128.104.99.93.finalhosting.cz): ... show more (mod_security) mod_security (id:210492) triggered by 93.99.104.128 (128.104.99.93.finalhosting.cz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 03:54:15.272796 2026] [security2:error] [pid 22188:tid 22188] [client 93.99.104.128:56310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.arklatexds.com"] [uri "/.git/config"] [unique_id "acJDJxIP6kI7G9qY2WmjDgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 KI-Netzwerk	2026-03-22 05:35:23 (2 months ago)	Bad Calls: Webpage scraping, Web App Attack	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 1026 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.133.184.59

🇨🇳 182.204.180.51

🇮🇳 115.98.176.124

🇩🇿 105.96.13.6

🇺🇸 45.8.19.13

🇩🇪 212.227.88.225

🇿🇼 197.221.232.44

🇸🇬 194.5.82.68

🇺🇸 193.19.109.153

🇯🇵 156.227.235.173

🇺🇸 147.185.132.98

🇨🇭 85.5.148.125

🇺🇸 64.227.24.55

🇧🇩 58.145.188.176

🇩🇪 45.86.202.182

🇺🇸 43.153.12.68

🇺🇸 34.26.201.15

🇺🇸 24.149.98.78

🇺🇸 20.65.178.1

🇷🇴 2.57.122.177