JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.250.39.107

Recent Activity

Abuse confidence score ?

67% Elevated

252 reports

30 reporters · latest 18 hours ago

ISP	Kingsoft Cloud Corporation Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137280
Domain Name	kingsoft.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.250.39.107

Export CSV

This IP address has been reported a total of 252 times from 30 distinct sources. 104.250.39.107 was first reported on November 5th 2025, and the most recent report was 18 hours ago. In the last 60 days, the top reporter locations were: United States of America with 32 reports; Canada with 16 reports; France with 5 reports. The most common categories in these recent reports were: Bad Web Bot 43 times; Web App Attack 19 times; Exploited Host 7 times; DDoS Attack 5 times; Hacking 3 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 1gz	2026-10-02 05:42:55 (18 hours ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/kurti-praises-visar-morina-and-the-film-shame-and-money/1016682/ UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 1gz	2026-10-01 11:39:14 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/us-iran-escalation-in-hormuz-pushes-brent-above-90-wti-gains-more-than-2/991406 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 1gz	2026-10-01 10:52:09 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/serbian-court-orders-30-days-of-detention-for-osman-selmani-after-arrest-in-mutivode/910221 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 1gz	2026-09-30 11:49:55 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/us-aims-to-reduce-forces-in-the-middle-east-after-a-quarter-century-of-involvement/1002326 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 DrLex0	2026-09-29 09:16:00 (3 days ago)	Broken image scraper written by someone with severe brain damage 104.250.39.107 443 - [29/Sep/2026: ... show more Broken image scraper written by someone with severe brain damage 104.250.39.107 443 - [29/Sep/2026:08:43:49 +0000] "GET [redacted] HTTP/1.1" 301 5483 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 104.250.39.107 443 - [29/Sep/2026:08:49:29 +0000] "GET [redacted] HTTP/1.1" 200 19816 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 104.250.39.107 443 - [29/Sep/2026:08:54:20 +0000] "GET [redacted] HTTP/1.1" 404 7112 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 104.250.39.107 443 - [29/Sep/2026:09:16:00 +0000] "GET [redacted] HTTP/1.1" 404 7112 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇳🇱 DrLex0	2026-09-29 08:54:20 (3 days ago)	BnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with sev ... show more BnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with severe brain damage 104.250.39.107 443 - [29/Sep/2026:08:24:56 +0000] "GET [redacted] HTTP/1.1" 301 5507 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 104.250.39.107 443 - [29/Sep/2026:08:43:49 +0000] "GET [redacted] HTTP/1.1" 301 5483 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 104.250.39.107 443 - [29/Sep/2026:08:49:29 +0000] "GET [redacted] HTTP/1.1" 200 19816 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 104.250.39.107 443 - [29/Sep/2026:08:54:20 +0000] "GET [redacted] HTTP/1.1" 404 7112 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇺🇸 1gz	2026-09-29 06:14:18 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/germany-blames-russia-for-drone-attack-at-leipzig-airport-and-closes-bonn-consulate/993764 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 DrLex0	2026-09-28 19:15:25 (4 days ago)	BnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with sev ... show more BnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with severe brain damage 104.250.39.107 443 - [28/Sep/2026:13:10:47 +0000] "GET [redacted] HTTP/1.1" 200 16999 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 104.250.39.107 443 - [28/Sep/2026:14:01:35 +0000] "GET [redacted] HTTP/1.1" 301 5485 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 104.250.39.107 443 - [28/Sep/2026:18:49:25 +0000] "GET [redacted] HTTP/1.1" 301 5479 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 104.250.39.107 443 - [28/Sep/2026:19:15:25 +0000] "GET [redacted] HTTP/1.1" 404 7112 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇳🇱 DrLex0	2026-09-28 06:20:53 (4 days ago)	BnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with sev ... show more BnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with severe brain damage 104.250.39.107 443 - [28/Sep/2026:03:16:00 +0000] "GET [redacted] HTTP/1.1" 301 681 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 104.250.39.107 443 - [28/Sep/2026:04:36:40 +0000] "GET [redacted] HTTP/1.1" 301 5499 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 104.250.39.107 443 - [28/Sep/2026:05:08:22 +0000] "GET [redacted] HTTP/1.1" 200 19528 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 104.250.39.107 443 - [28/Sep/2026:06:20:53 +0000] "GET [redacted] HTTP/1.1" 404 7112 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇺🇸 1gz	2026-09-28 03:24:19 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/us-proposes-5-billion-fund-to-rebuild-middle-east-energy-infrastructure-after-war-with-iran/1023065 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-09-26 19:45:33 (6 days ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇺🇸 kosada.com	2026-09-25 07:09:30 (1 week ago)	Repeated exploit attempts, for example: /hybridauth/window/OpenID?destination=community&destination_ ... show more Repeated exploit attempts, for example: /hybridauth/window/OpenID?destination=community&destination_error=hybridauth/endpoint%3Fhauth_start%3DGoogle%26hauth_time%3D1594115790 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36") show less	Web App Attack
🇺🇸 1gz	2026-09-23 18:56:12 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/us-iran-escalation-in-hormuz-pushes-brent-above-90-wti-gains-more-than-2/991406 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-09-23 09:22:30 (1 week ago)	FortiWeb WAF: 90 attacks detected. Threat Score: 23600. Types: HTTP Protocol Constraints(50), Client ... show more FortiWeb WAF: 90 attacks detected. Threat Score: 23600. Types: HTTP Protocol Constraints(50), Client Management(20), GEO IP(20). Origin: Hong Kong, Singapore. show less	Web App Attack
🇺🇸 1gz	2026-09-22 09:46:41 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/new-evidence-uncovered-from-excavations-in-kalluder-former-kla-commander-details-suspected-victims/948829 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 252 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.55

🇷🇺 154.83.196.237

🇺🇸 74.7.227.2

🇳🇱 45.148.10.141

🇰🇿 185.206.32.100

🇦🇷 181.46.166.131

🇧🇷 138.36.105.14

🇳🇱 94.154.43.56

🇰🇿 89.219.34.204

🇨🇦 85.217.149.72

🇫🇮 80.66.83.43

🇺🇸 72.167.227.34

🇳🇱 45.148.10.157

🇸🇬 45.78.224.85

🇳🇱 217.100.184.50

🇺🇸 165.154.172.88

🇨🇳 121.11.239.236

🇸🇪 23.12.156.100

🇮🇳 20.235.120.216

🇦🇷 200.127.235.27