JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 183.199.157.93

183.199.157.93 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 28%: ?

28%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS24547
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 183.199.157.93

Whois 183.199.157.93

IP Abuse Reports for 183.199.157.93:

This IP address has been reported a total of 14 times from 7 distinct sources. 183.199.157.93 was first reported on June 27th 2024, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Nerdscave Hosting	2026-06-25 12:37:42 (17 hours ago)	[SMB Honeypot Report] Timestamp: 2026-06-25 12:37:42 UTC Port: 18402 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2026-06-25 12:37:42 UTC Port: 18402 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Brute-Force Port Scan Hacking
🇳🇱 Nerdscave Hosting	2026-06-25 11:49:31 (18 hours ago)	[SMB Honeypot Report] Timestamp: 2026-06-25 11:49:31 UTC Port: 22218 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2026-06-25 11:49:31 UTC Port: 22218 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Brute-Force Port Scan Hacking
🇳🇱 Nerdscave Hosting	2026-06-25 10:31:34 (19 hours ago)	[SMB Honeypot Report] Timestamp: 2026-06-25 10:31:34 UTC Port: 20308 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2026-06-25 10:31:34 UTC Port: 20308 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Brute-Force Port Scan Hacking
🇳🇱 Nerdscave Hosting	2026-06-25 09:49:30 (20 hours ago)	[SMB Honeypot Report] Timestamp: 2026-06-25 09:49:30 UTC Port: 18356 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2026-06-25 09:49:30 UTC Port: 18356 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Brute-Force Port Scan Hacking
🇳🇱 Nerdscave Hosting	2026-06-25 09:02:19 (20 hours ago)	[SMB Honeypot Report] Timestamp: 2026-06-25 09:02:19 UTC Port: 20428 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2026-06-25 09:02:19 UTC Port: 20428 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Brute-Force Port Scan Hacking
🇳🇱 Nerdscave Hosting	2026-06-25 08:21:35 (21 hours ago)	[SMB Honeypot Report] Timestamp: 2026-06-25 08:21:35 UTC Port: 20142 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2026-06-25 08:21:35 UTC Port: 20142 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Brute-Force Port Scan Hacking
🇨🇦 dpinse	2026-06-21 18:43:07 (4 days ago)	Honeypot [honeypot-ca-sensor1]: SMB traffic on port 445	Hacking
🇬🇧 Birdo	2026-06-15 15:39:56 (1 week ago)	[Birdo SMB Honeypot] SMB unauthorized attempt	Exploited Host Brute-Force Port Scan Hacking
🇦🇺 dyln	2026-06-14 03:10:42 (1 week ago)	Dyls honeypot brute-force: SMB (154 total hits)	Brute-Force
🇦🇺 dyln	2026-06-14 01:04:32 (1 week ago)	Dyls honeypot brute-force: SMB (150 total hits)	Brute-Force
🇦🇺 dyln	2026-06-03 13:14:32 (3 weeks ago)	Dyls honeypot brute-force: SMB (6 total hits)	Brute-Force
🇺🇸 TPI-Abuse	2025-09-22 19:33:34 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 183.199.157.93 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 183.199.157.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 15:33:28.977182 2025] [security2:error] [pid 4050:tid 4050] [client 183.199.157.93:8667] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/894/game/90538"] [unique_id "aNGkiI9ZtVZiaau7LgPl8AAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Linuxmalwarehuntingnl	2024-07-03 09:01:10 (1 year ago)	Unauthorized connection attempt	Brute-Force
🇩🇪 IP Analyzer	2024-06-27 10:02:07 (1 year ago)	Unauthorized connection attempt from IP address 183.199.157.93 on Port 445(SMB)	Port Scan

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.193

🇧🇼 168.167.228.123

🇺🇸 71.6.240.19

🇨🇳 220.180.171.157

🇺🇸 217.148.142.94

🇨🇬 197.157.252.162

🇲🇿 196.28.226.125

🇵🇱 194.180.49.217

🇩🇪 193.124.20.235

🇲🇽 189.217.130.86

🇧🇷 187.8.120.90

🇧🇷 186.239.41.74

🇫🇷 185.182.186.243

🇨🇦 178.93.201.244

🇨🇦 178.93.201.240

🇨🇦 178.93.201.237

🇨🇦 178.93.201.200

🇨🇦 178.93.201.189

🇨🇦 178.93.201.172

🇨🇦 178.93.201.166