Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
93.99.104.87 has been reported 55
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
IP Abuse Reports for 93.99.104.87:
This IP address has been reported a total of
55
times from
38 distinct
sources.
93.99.104.87 was first reported on
, and the most recent report was
.
Brute-forced creds root/root via SSH-2.0-OpenSSH_9.9. Executed recon cmds: getprop, ps, $OSTYPE. Dep ...
show moreBrute-forced creds root/root via SSH-2.0-OpenSSH_9.9. Executed recon cmds: getprop, ps, $OSTYPE. Deployed malware 'apcid' to /bin/apcid, /sbin/apcid, /usr/bin/apcid via cat redirection indicating multi-stage infection and persistence intent. Ran killall -9 .f targeting hidden processes. Attempted exec /var/tmp/apcid suggesting staged dl or temp placement. Set LC_ALL=C env var to force C locale and evade detection. Pattern consistent with Linux botnet deployment. No legitimate reason for simultaneous multi-directory bin deployment. 36-second session indicates automated attack chain.
show less
(mod_security) mod_security triggered on hostname [redacted] 93.99.104.87 (CZ/Czechia/tor-exit.hofmi ...
show more(mod_security) mod_security triggered on hostname [redacted] 93.99.104.87 (CZ/Czechia/tor-exit.hofmistr.cz)
show less
2026-03-13T13:39:58.521619 honorable-confusion sshd[915936]: pam_unix(sshd:auth): authentication fai ...
show more2026-03-13T13:39:58.521619 honorable-confusion sshd[915936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.99.104.87
2026-03-13T13:40:00.451002 honorable-confusion sshd[915936]: Failed password for invalid user default from 93.99.104.87 port 46696 ssh2
...
show less