JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.204.5.89

116.204.5.89 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 38%: ?

38%

ISP	Huawei Public Cloud Service (Huawei Software Technologies Ltd.Co)
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55990
Hostname(s)	ecs-116-204-5-89.compute.hwclouds-dns.com
Domain Name	huawei.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.204.5.89

Whois 116.204.5.89

IP Abuse Reports for 116.204.5.89:

This IP address has been reported a total of 17 times from 12 distinct sources. 116.204.5.89 was first reported on April 22nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-13 07:45:46 (1 day ago)	(mod_security) mod_security (id:210381) triggered by 116.204.5.89 (ecs-116-204-5-89.compute.hwclouds ... show more (mod_security) mod_security (id:210381) triggered by 116.204.5.89 (ecs-116-204-5-89.compute.hwclouds-dns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 03:45:37.630919 2026] [security2:error] [pid 7188:tid 7201] [client 116.204.5.89:37694] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|www.mentzlaw.com\|F\|4"] [data "REQUEST_URI=/louisianaparkinsonsdiseaselawyer/%url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mentzlaw.com"] [uri "/louisianaparkinsonsdiseaselawyer/%url%"] [unique_id "ai0KoVgYcb-zzplmn64YTQAAAEs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2026-05-22 14:06:09 (3 weeks ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -41.558 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -41.558 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇨🇭 backslash	2026-05-16 03:18:01 (4 weeks ago)	block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1	Bad Web Bot
🇦🇺 MAGIC	2026-05-16 00:02:29 (4 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇮 YF	2026-05-15 19:03:49 (4 weeks ago)	WordPress content enumeration	Web App Attack
🇫🇷 vtchost.com	2026-05-13 16:53:40 (1 month ago)	requested honeypot page - ignored robots.txt - scraping botnet or virus ...	Bad Web Bot Exploited Host
🇺🇸 pduggusa	2026-05-12 03:40:32 (1 month ago)	Detected attacking dugganusa.com at 2026-05-12T03:40:32.802Z \| Attack: Proxy \| Source: DugganUSA Pre ... show more Detected attacking dugganusa.com at 2026-05-12T03:40:32.802Z \| Attack: Proxy \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-05-06 00:38:43 (1 month ago)	Detected attacking dugganusa.com at 2026-05-06T00:38:43.549Z \| Attack: Proxy \| Source: DugganUSA Pre ... show more Detected attacking dugganusa.com at 2026-05-06T00:38:43.549Z \| Attack: Proxy \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-05-05 06:40:11 (1 month ago)	Detected attacking dugganusa.com at 2026-05-05T06:40:11.681Z \| Attack: Proxy \| Source: DugganUSA Pre ... show more Detected attacking dugganusa.com at 2026-05-05T06:40:11.681Z \| Attack: Proxy \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-05-05 05:38:10 (1 month ago)	Detected attacking dugganusa.com at 2026-05-05T05:38:10.629Z \| Attack: Proxy \| Source: DugganUSA Pre ... show more Detected attacking dugganusa.com at 2026-05-05T05:38:10.629Z \| Attack: Proxy \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-05-05 04:37:22 (1 month ago)	Detected attacking dugganusa.com at 2026-05-05T04:37:22.425Z \| Attack: Proxy \| Source: DugganUSA Pre ... show more Detected attacking dugganusa.com at 2026-05-05T04:37:22.425Z \| Attack: Proxy \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-05-05 03:37:59 (1 month ago)	Detected attacking dugganusa.com at 2026-05-05T03:37:59.961Z \| Attack: Proxy \| Source: DugganUSA Pre ... show more Detected attacking dugganusa.com at 2026-05-05T03:37:59.961Z \| Attack: Proxy \| Source: DugganUSA PreCog auto-block show less	Hacking
🇹🇷 baku.hosting	2026-05-03 06:33:47 (1 month ago)	CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 116.204.5.89 (CN/China/ecs-116 ... show more CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 116.204.5.89 (CN/China/ecs-116-204-5-89.compute.hwclouds-dns.com): 5 in the last 3600 secs show less	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-04-30 07:46:14 (1 month ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇸🇬 mypatricks	2026-04-30 03:19:59 (1 month ago)	116.204.5.89 \| Port: 11971 \| DNS: ecs-116-204-5-89.compute.hwclouds-dns.com 2026-04-30T11:19:58+08:0 ... show more 116.204.5.89 \| Port: 11971 \| DNS: ecs-116-204-5-89.compute.hwclouds-dns.com 2026-04-30T11:19:58+08:00 Asia/Shanghai \| HWCLOUDS-DNS Data Center/Web Hosting/Transit Spam list \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /zh/page/2?e8adb8cb8eabc8c9ae9=218&1776099368 \| Ref: https://xxxxxx/zh/page/2?e8adb8cb8eabc8c9ae9=218&1776099368= \| Country: CN/China/+08:00 IP City: Beijing macOS 9f43685acc2a0d82-LAX/Los Angeles, CA, United States 1 hits/0 secs Browser 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.154.158.195

🇰🇷 112.184.21.53

🇯🇵 8.211.172.246

🇺🇸 147.185.132.105

🇮🇳 125.19.154.150

🇨🇳 124.221.192.164

🇨🇳 114.238.74.92

🇿🇼 74.244.195.217

🇺🇸 64.236.141.177

🇰🇪 41.203.213.8

🇮🇩 34.101.87.108

🇯🇵 34.84.11.241

🇨🇭 34.65.91.204

🇩🇪 213.209.159.242

🇺🇸 205.210.31.108

🇨🇳 120.48.147.111

🇳🇱 81.19.216.77

🇺🇸 47.85.47.96

🇺🇸 45.33.41.118

🇮🇳 34.131.145.149