JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 93.99.104.194

93.99.104.194 was found in our database!

This IP was reported 937 times. Confidence of Abuse is 46%: ?

46%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Zdenek Klauda - FinalTek.com
Usage Type	Fixed Line ISP
ASN	AS16019
Hostname(s)	194.104.99.93.finalhosting.cz
Domain Name	finaltek.com
Country	🇨🇿 Czechia
City	Prague, Prague

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 93.99.104.194

Whois 93.99.104.194

IP Abuse Reports for 93.99.104.194:

This IP address has been reported a total of 937 times from 398 distinct sources. 93.99.104.194 was first reported on September 20th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob.fr	2026-06-16 22:30:02 (1 day ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 Ba-Yu	2026-06-12 11:49:56 (6 days ago)	WordPress bruteforce	Web Spam Hacking Brute-Force Exploited Host Web App Attack
Anonymous	2026-06-05 00:26:49 (1 week ago)	This IP was involved in an brute force and password spray attack on 2026/06/04 19:25:03	Port Scan Brute-Force Exploited Host Web App Attack
Anonymous	2026-06-03 07:46:04 (2 weeks ago)	Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/1.1, GET /wp-login.php HTTP/1.1	Hacking Web App Attack
🇺🇸 jennij	2026-05-30 03:28:58 (2 weeks ago)	Fail2Ban sshd ban on luckymc.gg ...	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-05-28 08:06:59 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 93.99.104.194 (194.104.99.93.finalhosting.cz): ... show more (mod_security) mod_security (id:210730) triggered by 93.99.104.194 (194.104.99.93.finalhosting.cz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 04:06:51.724892 2026] [security2:error] [pid 14099:tid 14099] [client 93.99.104.194:49142] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|k-and-l-contractors.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "k-and-l-contractors.com"] [uri "/dump.sql"] [unique_id "ahf3m-ZBh0gia0StytxF-QAAAAo"], referer: k-and-l-contractors.com/dump.sql show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob.fr	2026-05-27 15:45:16 (3 weeks ago)	Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk- ... show more Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk-login jail show less	Brute-Force Web App Attack
🇦🇹 ipi.at	2026-05-26 07:19:59 (3 weeks ago)	2026-05-26T09:19:56.698820+02:00 n23 sshd[2035720]: Connection from 93.99.104.194 port 42078 on 92.6 ... show more 2026-05-26T09:19:56.698820+02:00 n23 sshd[2035720]: Connection from 93.99.104.194 port 42078 on 92.62.22.214 port 22 rdomain "" 2026-05-26T09:19:59.180675+02:00 n23 sshd[2035720]: Invalid user guest from 93.99.104.194 port 42078 ... show less	Brute-Force SSH
🇦🇺 oncord	2026-05-25 03:24:15 (3 weeks ago)	Form spam	Web Spam
🇳🇱 Kotiacat_one	2026-05-23 20:01:28 (3 weeks ago)	2026-05-23T23:01:27.331127+03:00 kotiacat.nexus sshd-session[7678]: Invalid user 1 from 93.99.104.19 ... show more 2026-05-23T23:01:27.331127+03:00 kotiacat.nexus sshd-session[7678]: Invalid user 1 from 93.99.104.194 port 43048 ... show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-05-18 15:59:32 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 93.99.104.194 (194.104.99.93.finalhosting.cz): ... show more (mod_security) mod_security (id:210492) triggered by 93.99.104.194 (194.104.99.93.finalhosting.cz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 11:59:24.390225 2026] [security2:error] [pid 32205:tid 32205] [client 93.99.104.194:57720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "watersideaccommodation.com"] [uri "/.git/config"] [unique_id "ags3XEFgwvAYTNiMFPtjRAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Progetto1	2026-05-16 04:11:05 (1 month ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇺🇸 TPI-Abuse	2026-05-04 22:02:57 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 93.99.104.194 (194.104.99.93.finalhosting.cz): ... show more (mod_security) mod_security (id:210831) triggered by 93.99.104.194 (194.104.99.93.finalhosting.cz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 18:02:53.116251 2026] [security2:error] [pid 11024:tid 11024] [client 93.99.104.194:41410] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.proprocessor.com\|F\|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.proprocessor.com"] [uri "/"] [unique_id "afkXjQY40_hMSij2TLjFIQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇬 OHOST.BG	2026-04-29 17:55:51 (1 month ago)	2026-04-29T20:55:50.593118+03:00 irc sshd[74876]: Invalid user db2inst1 from 93.99.104.194 port 5863 ... show more 2026-04-29T20:55:50.593118+03:00 irc sshd[74876]: Invalid user db2inst1 from 93.99.104.194 port 58634 2026-04-29T20:55:50.593262+03:00 irc sshd[74873]: Invalid user db2inst1 from 93.99.104.194 port 58614 2026-04-29T20:55:50.593385+03:00 irc sshd[74872]: Invalid user db2inst1 from 93.99.104.194 port 58604 2026-04-29T20:55:50.594365+03:00 irc sshd[74875]: Invalid user debian from 93.99.104.194 port 58622 2026-04-29T20:55:50.594770+03:00 irc sshd[74874]: Invalid user db2inst1 from 93.99.104.194 port 58626 ... show less	Brute-Force SSH
🇫🇷 ✨	2026-04-14 23:18:11 (2 months ago)	Rule : PLESK BOT 2026-04-15 01:10:15 Unauthorized login attempt to Plesk Panel from IP 93.99.104.194 ... show more Rule : PLESK BOT 2026-04-15 01:10:15 Unauthorized login attempt to Plesk Panel from IP 93.99.104.194 with username admin show less	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 937 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 217.154.144.111

🇳🇱 178.16.53.230

🇺🇸 104.9.60.148

🇸🇬 95.111.199.201

🇨🇦 85.217.149.71

🇸🇪 81.236.211.54

🇮🇳 13.233.98.33

🇷🇺 5.255.251.132

🇺🇸 216.25.89.153

🇺🇸 192.210.132.212

🇧🇷 20.226.32.175

🇮🇳 202.9.122.32

🇵🇱 185.79.139.16

🇬🇧 176.26.101.76

🇹🇷 159.146.54.178

🇭🇰 154.221.20.92

🇺🇸 142.4.31.180

🇳🇱 45.148.10.152

🇺🇸 31.58.87.216

🇺🇸 2a09:bac5:636b:1173::1bd:114