JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.250.53.219

104.250.53.219 was found in our database!

This IP was reported 315 times. Confidence of Abuse is 78%: ?

78%

ISP	Kingsoft Cloud Corporation Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137280
Domain Name	kingsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.250.53.219

Whois 104.250.53.219

IP Abuse Reports for 104.250.53.219:

This IP address has been reported a total of 315 times from 90 distinct sources. 104.250.53.219 was first reported on August 3rd 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 NXTwoThou	2026-07-07 18:25:42 (1 day ago)	IMAP	Port Scan
Anonymous	2026-07-06 18:43:06 (2 days ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 shaunc	2026-07-05 18:59:44 (3 days ago)	Jul 5 13:59:40 mailman postfix/smtpd[31617]: lost connection after UNKNOWN from unknown[104.250.53. ... show more Jul 5 13:59:40 mailman postfix/smtpd[31617]: lost connection after UNKNOWN from unknown[104.250.53.219] Jul 5 13:59:41 mailman postfix/smtpd[31617]: lost connection after UNKNOWN from unknown[104.250.53.219] show less	Port Scan
🇬🇧 gbzret4d	2026-07-02 17:33:49 (6 days ago)	Honeypot [uk-production01]: Unauthorized traffic (259 bytes of payload); 1027 [14] TCP	Port Scan
Anonymous	2026-06-30 18:40:51 (1 week ago)	Honeypot hit: Unauthorized traffic (1 bytes of payload); 5901 [6] TCP Reported by: https://github.co ... show more Honeypot hit: Unauthorized traffic (1 bytes of payload); 5901 [6] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 withfallback.com	2026-06-28 19:34:40 (1 week ago)	sends \r\n\r\n and waits; probably looking for telnet	Port Scan
🇹🇼 joehorn.tw	2026-06-27 17:19:59 (1 week ago)	2026-06-28T01:19:58.129489+08:00 DevOps postfix/smtpd[1051088]: improper command pipelining after CO ... show more 2026-06-28T01:19:58.129489+08:00 DevOps postfix/smtpd[1051088]: improper command pipelining after CONNECT from unknown[104.250.53.219]: \026\003\001\000\376\001\000\000\372\003\003\312\2315\276\247\347O\317\310\201Z{61\224\223\373Wj8\347dg\347\332\342\255a\325\306\005: \371Ja\345>ZiM\362\214\277\362Y):\032q\371\031~\211C\261\277\265\217m\000\370\202\364=\0002\300+\300/\300,\3000\314\251\314\250\300\t\300\023\300\n\300\024\000\234 2026-06-28T01:19:58.193962+08:00 DevOps postfix/smtpd[1051088]: lost connection after CONNECT from unknown[104.250.53.219] 2026-06-28T01:19:58.251916+08:00 DevOps postfix/smtpd[1051088]: improper command pipelining after CONNECT from unknown[104.250.53.219]: EHLO example.com\r\n ... show less	Email Spam
🇺🇸 SuperCores Hosting	2026-06-26 18:48:43 (1 week ago)	[2026-06-26 18:48:43.322242] SSH/22 Unautorized connection. Suspicious SSH Brute-force.	SSH Exploited Host Brute-Force Hacking Port Scan
🇺🇸 drewf.ink	2026-06-25 18:58:38 (1 week ago)	[18:58] Port scanning. Port(s) scanned: TCP/1025	Port Scan
🇬🇧 gbzret4d	2026-06-25 17:39:50 (1 week ago)	Honeypot [uk-production01]: Unauthorized traffic (259 bytes of payload); 5902 [11] TCP	Port Scan
🇺🇸 drewf.ink	2026-06-22 18:58:39 (2 weeks ago)	[18:58] Port scanning. Port(s) scanned: TCP/135	Port Scan
Anonymous	2026-06-21 18:20:39 (2 weeks ago)	Jun 21 14:20:35 darkstar sm-mta[107788]: 65LIKZCe107788: [104.250.53.219] did not issue MAIL/EXPN/VR ... show more Jun 21 14:20:35 darkstar sm-mta[107788]: 65LIKZCe107788: [104.250.53.219] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTAS-v6 Jun 21 14:20:35 darkstar sm-mta[107793]: 65LIKZJr107793: [104.250.53.219] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTAS-v6 Jun 21 14:20:36 darkstar sm-mta[107818]: 65LIKa7C107818: [104.250.53.219] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTAS-v6 Jun 21 14:20:36 darkstar sm-mta[107825]: 65LIKae9107825: [104.250.53.219] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTAS-v6 ... show less	Brute-Force
🇺🇸 Misaka13514	2026-06-15 18:40:38 (3 weeks ago)	SSH tarpit connection (endlessh): 2026-06-15T18:40:37.402Z ACCEPT host=::ffff:104.250.53.219 port=24 ... show more SSH tarpit connection (endlessh): 2026-06-15T18:40:37.402Z ACCEPT host=::ffff:104.250.53.219 port=24272 fd=4 n=1/4096 show less	Brute-Force SSH
🇺🇸 m2jest1c	2026-06-14 19:15:12 (3 weeks ago)	2026-06-14T15:15:12.103284 rhel-20gb-ash-1 sshd[501660]: error: kex_exchange_identification: Connect ... show more 2026-06-14T15:15:12.103284 rhel-20gb-ash-1 sshd[501660]: error: kex_exchange_identification: Connection closed by remote host 2026-06-14T15:15:12.103314 rhel-20gb-ash-1 sshd[501660]: Connection closed by 104.250.53.219 port 44996 ... show less	Brute-Force SSH
🇺🇸 NetGuard	2026-06-12 15:14:53 (3 weeks ago)	#honeypot #netguard247 #dionaea #networkexploit Captured by NetGuard 24/7 T-Pot honeypot (netguard24 ... show more #honeypot #netguard247 #dionaea #networkexploit Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-06-12T15:14:53.64+00:00 Attacker IP: 104.250.53.219 \| Port: 27017 \| Country: Singapore Honeypot: dionaea \| Attack: network_exploit Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Hacking SQL Injection Web App Attack

Showing 1 to 15 of 315 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.22.184.88

🇺🇸 103.143.231.2

🇿🇲 102.23.122.235

🇵🇱 83.168.68.97

🇺🇸 66.132.186.205

🇨🇳 61.134.39.166

🇳🇱 45.148.10.183

🇧🇯 41.74.4.188

🇪🇬 41.38.154.178

🇬🇧 35.203.210.160

🇷🇺 31.173.2.33

🇷🇴 2.57.122.168

🇺🇸 162.216.150.35

🇫🇮 147.185.133.76

🇨🇳 111.18.72.110

🇸🇬 103.187.147.165

🇳🇱 91.92.40.231

🇳🇱 91.92.40.10

🇺🇸 2607:f8b0:4023:100f::125

🇰🇷 211.37.174.180