JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.204.116.249

116.204.116.249 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	Huawei Public Cloud Service (Huawei Software Technologies Ltd.Co)
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55990
Hostname(s)	ecs-116-204-116-249.compute.hwclouds-dns.com
Domain Name	huawei.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.204.116.249

Whois 116.204.116.249

IP Abuse Reports for 116.204.116.249:

This IP address has been reported a total of 37 times from 35 distinct sources. 116.204.116.249 was first reported on June 3rd 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Modules	2026-06-05 10:00:00 (10 hours ago)	Cowrie: cowrie.session.connect proto=ssh \| Cowrie: cowrie.session.closed proto=ssh (2 events, first: ... show more Cowrie: cowrie.session.connect proto=ssh \| Cowrie: cowrie.session.closed proto=ssh (2 events, first: 2026-06-05T09:23:20.978Z, last: 2026-06-05T09:25:21.184Z) show less	Port Scan SSH
Anonymous	2026-06-05 08:55:46 (11 hours ago)	IP banned by Fail2Ban	Brute-Force SSH
🇩🇪 formality	2026-06-05 07:43:37 (12 hours ago)	Invalid user babylon from 116.204.116.249 port 59794	Brute-Force SSH
🇭🇰 bluecloudwork	2026-06-05 07:27:29 (12 hours ago)	Fail2Ban - Brute-force SSH server ...	Brute-Force SSH
🇩🇪 sobakintech	2026-06-05 07:20:43 (13 hours ago)	2026-06-05T07:11:40.169310+00:00 vps1 sshd[515310]: Invalid user desenvolvimento from 116.204.116.24 ... show more 2026-06-05T07:11:40.169310+00:00 vps1 sshd[515310]: Invalid user desenvolvimento from 116.204.116.249 port 46838 2026-06-05T07:11:40.323903+00:00 vps1 sshd[515310]: Disconnected from invalid user desenvolvimento 116.204.116.249 port 46838 [preauth] 2026-06-05T07:20:42.340469+00:00 vps1 sshd[516188]: Disconnected from authenticating user root 116.204.116.249 port 52638 [preauth] ... show less	Brute-Force SSH
🇫🇮 updown.io	2026-06-05 06:22:50 (14 hours ago)	2026-06-05T06:20:34.445070+00:00 hel.updn.io sshd[1616873]: Failed password for root from 116.204.11 ... show more 2026-06-05T06:20:34.445070+00:00 hel.updn.io sshd[1616873]: Failed password for root from 116.204.116.249 port 53572 ssh2 2026-06-05T06:21:45.479178+00:00 hel.updn.io sshd[1622363]: Invalid user bill from 116.204.116.249 port 36690 2026-06-05T06:21:45.481479+00:00 hel.updn.io sshd[1622363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.204.116.249 2026-06-05T06:21:47.986006+00:00 hel.updn.io sshd[1622363]: Failed password for invalid user bill from 116.204.116.249 port 36690 ssh2 2026-06-05T06:22:49.781969+00:00 hel.updn.io sshd[1627573]: Invalid user mukund from 116.204.116.249 port 48044 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-05 05:44:05 (14 hours ago)	(sshd) Failed SSH login from 116.204.116.249 (CN/China/ecs-116-204-116-249.compute.hwclouds-dns.com) ... show more (sshd) Failed SSH login from 116.204.116.249 (CN/China/ecs-116-204-116-249.compute.hwclouds-dns.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 5 00:27:58 17453 sshd[13049]: Invalid user csg from 116.204.116.249 port 36092 Jun 5 00:28:00 17453 sshd[13049]: Failed password for invalid user csg from 116.204.116.249 port 36092 ssh2 Jun 5 00:43:16 17453 sshd[20236]: Invalid user search from 116.204.116.249 port 55288 Jun 5 00:43:17 17453 sshd[20236]: Failed password for invalid user search from 116.204.116.249 port 55288 ssh2 Jun 5 00:43:52 17453 sshd[20390]: Invalid user down from 116.204.116.249 port 35998 show less	Brute-Force SSH
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-05 04:24:15 (15 hours ago)	Honeypot hit: Unauthorized connection attempt detected on 22/SSH	Hacking SSH Port Scan
🇺🇸 paradoxnetworks	2026-06-05 01:24:09 (19 hours ago)	2026-06-05T01:24:07.380755+00:00 edge-sea-con01.int.pdx.net.uk sshd[3212048]: Invalid user louis fro ... show more 2026-06-05T01:24:07.380755+00:00 edge-sea-con01.int.pdx.net.uk sshd[3212048]: Invalid user louis from 116.204.116.249 port 37960 2026-06-05T01:24:07.396301+00:00 edge-sea-con01.int.pdx.net.uk sshd[3212048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.204.116.249 2026-06-05T01:24:08.975258+00:00 edge-sea-con01.int.pdx.net.uk sshd[3212048]: Failed password for invalid user louis from 116.204.116.249 port 37960 ssh2 ... show less	Brute-Force SSH
🇫🇷 COMAITE	2026-06-05 01:07:54 (19 hours ago)	Honeypot login success	Brute-Force
Anonymous	2026-06-05 00:46:07 (19 hours ago)	2026-06-05T02:45:55.585636 prodWEB sshd[23617]: Connection from 116.204.116.249 port 39292 on 57.128 ... show more 2026-06-05T02:45:55.585636 prodWEB sshd[23617]: Connection from 116.204.116.249 port 39292 on 57.128.10.223 port 22 rdomain "" 2026-06-05T02:45:57.332887 prodWEB sshd[23617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.204.116.249 user=root 2026-06-05T02:45:59.534360 prodWEB sshd[23617]: Failed password for root from 116.204.116.249 port 39292 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-06-04 19:33:37 (1 day ago)	$f2bV_matches	DDoS Attack FTP Brute-Force Port Scan Hacking SQL Injection Spoofing Bad Web Bot Brute-Force SSH IoT Targeted
🇸🇬 Jack Ma	2026-06-04 18:07:58 (1 day ago)	Automatic report from SSH反爆破计划. SSH brute-force source was banned by fail2ban (jail=sshd). IP=116.20 ... show more Automatic report from SSH反爆破计划. SSH brute-force source was banned by fail2ban (jail=sshd). IP=116.204.116.249 timeOfBan=2026-06-04T18:04:38.000Z banCount=1 attempts=8 location=China/Beijing/Beijing [2026-06-04T18:04:40.000Z] failed-user user=krd :: 2026-06-05T02:04:40+08:00 localhost sshd-session[145998]: Failed password for invalid user krd from 116.204.116.249 port 39178 ssh2 [2026-06-04T18:04:38.000Z] invalid-user user=krd :: 2026-06-05T02:04:38+08:00 localhost sshd-session[145998]: Invalid user krd from 116.204.116.249 port 39178 [2026-06-04T18:04:38.000Z] auth-failure user=unknown :: 2026-06-05T02:04:38+08:00 localhost sshd-session[145998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.204.116.249 [2026-06-04T18:02:55.000Z] failed-user user=aladdin :: 2026-06-05T02:02:55+08:00 localhost sshd-session[145982]: Failed password for invalid user aladdin from 116.204.116.249 port 42234 ssh2 [2026-06-04T18:02:53.000Z] invalid-user user=aladdin :: 2026-06-05T02:02:53 show less	Brute-Force SSH
🇺🇸 z3rg	2026-06-04 15:26:47 (1 day ago)	2026-06-04T15:09:18.779425+00:00 vps-331c9132 sshd[2129839]: pam_unix(sshd:auth): authentication fai ... show more 2026-06-04T15:09:18.779425+00:00 vps-331c9132 sshd[2129839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.204.116.249 2026-06-04T15:09:20.473339+00:00 vps-331c9132 sshd[2129839]: Failed password for invalid user developer from 116.204.116.249 port 52574 ssh2 2026-06-04T15:26:46.016232+00:00 vps-331c9132 sshd[2129961]: Invalid user project from 116.204.116.249 port 35286 ... show less	Brute-Force SSH
🇧🇾 lns.bz	2026-06-04 15:13:44 (1 day ago)	SSH bruteforce [BY]	SSH

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2a02:c207:2326:294::1

🇳🇱 45.148.10.157

🇲🇲 37.111.53.110

🇺🇸 18.188.251.76

🇦🇫 160.191.191.22

🇫🇮 147.185.133.14

🇰🇷 125.138.175.113

🇨🇳 110.241.126.69

🇺🇸 74.125.80.156

🇮🇪 63.32.88.34

🇱🇹 45.227.254.170

🇩🇪 185.242.3.230

🇨🇳 123.150.80.157

🇮🇩 103.122.67.223

🇬🇧 35.203.210.195

🇳🇱 178.62.217.82

🇸🇬 128.199.231.249

🇩🇪 2a01:4f8:150:13a5::100:21

🇺🇸 216.25.89.71

🇧🇪 198.235.24.178