JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.93.9.74

5.93.9.74 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 0%: ?

ISP	Fastweb SpA
Usage Type	Fixed Line ISP
ASN	AS30722
Hostname(s)	mob-5-93-9-74.net.vodafone.it
Domain Name	fastweb.it
Country	🇮🇹 Italy
City	Rome, Lazio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.93.9.74

Whois 5.93.9.74

IP Abuse Reports for 5.93.9.74:

This IP address has been reported a total of 37 times from 25 distinct sources. 5.93.9.74 was first reported on March 20th 2026, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 stinpriza	2026-03-28 08:10:31 (5 months ago)	Web App Attack	Web App Attack
🇺🇸 juguemosalacarioca.com	2026-03-28 06:56:31 (5 months ago)	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	Web App Attack
Anonymous	2026-03-28 06:13:32 (5 months ago)	(wordpress) Failed wordpress login from 5.93.9.74 (IT/Italy/mob-5-93-9-74.net.vodafone.it)	Brute-Force
Anonymous	2026-03-28 03:26:02 (5 months ago)	Bot / scanning and/or hacking attempts: GET /xmlrpc.php HTTP/1.1, POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇬🇧 andypiper	2026-03-28 02:02:41 (5 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 myagent.site	2026-03-28 01:52:12 (5 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇺🇸 Void Vendor	2026-03-28 01:09:31 (5 months ago)	VoidTrap [15,21]: [offense #1 → 30 minutes] Honeypot: /xmlrpc.php \| ip: 5.93.9.74 \| loc: Rome, Lazio ... show more VoidTrap [15,21]: [offense #1 → 30 minutes] Honeypot: /xmlrpc.php \| ip: 5.93.9.74 \| loc: Rome, Lazio, IT, AS30722 Fastweb SpA \| path: /xmlrpc.php \| ua: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/5 show less	Hacking Web App Attack
🇨🇦 polycoda	2026-03-26 12:25:50 (5 months ago)	📡 Port scan	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-03-26 11:22:49 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 5.93.9.74 (mob-5-93-9-74.net.vodafone.it): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 5.93.9.74 (mob-5-93-9-74.net.vodafone.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 07:22:41.659580 2026] [security2:error] [pid 31684:tid 31684] [client 5.93.9.74:52101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|redlitephotos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "redlitephotos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acUXAbv34JF4CcIF0uJGSwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 neo72	2026-03-26 06:13:40 (5 months ago)	Detected malicious activity - bulk block	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-03-26 06:13:08 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 5.93.9.74 (mob-5-93-9-74.net.vodafone.it): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 5.93.9.74 (mob-5-93-9-74.net.vodafone.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 02:12:59.684947 2026] [security2:error] [pid 26977:tid 26977] [client 5.93.9.74:52340] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|naturalacu.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "naturalacu.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acTOaymm6LyFDejse49c3AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Mario Silber	2026-03-26 00:16:19 (5 months ago)	(wordpress) Failed wordpress login from 5.93.9.74 (IT/Italy/mob-5-93-9-74.net.vodafone.it)	Brute-Force
🇺🇸 TPI-Abuse	2026-03-25 19:10:41 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 5.93.9.74 (mob-5-93-9-74.net.vodafone.it): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 5.93.9.74 (mob-5-93-9-74.net.vodafone.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 15:10:33.710176 2026] [security2:error] [pid 15500:tid 15500] [client 5.93.9.74:50253] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cynosurehomeservices.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cynosurehomeservices.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acQzKbb1rHjB4ZEjIGtSQgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-25 18:51:31 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 5.93.9.74 (mob-5-93-9-74.net.vodafone.it): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 5.93.9.74 (mob-5-93-9-74.net.vodafone.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 14:51:27.112174 2026] [security2:error] [pid 11959:tid 11962] [client 5.93.9.74:63079] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cynosurepressurewashing.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cynosurepressurewashing.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acQur30kdhrloJH6V3fTwQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ambor	2026-03-25 18:18:44 (5 months ago)	Honeypot triggered: /xmlrpc.php on ifebridge.com. User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64 ... show more Honeypot triggered: /xmlrpc.php on ifebridge.com. User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/68.0.0.0 Safari/537.36. Method: POST show less	Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 217.154.160.154

🇺🇸 205.210.31.3

🇩🇪 172.253.1.208

🇺🇸 162.216.149.207

🇨🇳 139.227.161.107

🇮🇩 101.255.101.17

🇫🇷 91.231.89.251

🇺🇸 91.230.168.179

🇺🇸 85.239.151.10

🇳🇱 51.159.91.169

🇩🇪 47.254.134.251

🇰🇿 37.99.17.197

🇺🇸 9.234.10.114

🇧🇷 200.149.213.242

🇺🇸 162.216.150.186

🇬🇧 159.65.18.197

🇮🇳 152.59.147.214

🇮🇳 147.93.169.104

🇮🇳 110.173.190.221

🇲🇾 104.28.205.51