The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
Malware botnet controller located at 104.211.53.32 on port 5150 TCP:
$ telnet 104.211.53.32 5150
Trying 104.211.53.32…
Connected to 104.211.53.32.
Escape character is ‘^]’
$ dig +short anonphnefarious.ddns.net
104.211.53.32
Referencing malware samples (MD5 hash):
688d2e66dbbb5abe237af3bacec33da8 — AV detection: 28 / 70 (40.00%)
8ebeb8f87fc1e399c63e000c0abe67db — AV detection: 42 / 71 (59.15%)
a270a5af6e4e4273ecd1111671a66532 — AV detection: 51 / 71 (71.83%)