城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 104.250.128.0 - 104.250.159.255
CIDR: 104.250.128.0/19
NetName: GSI
NetHandle: NET-104-250-128-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: GorillaServers, Inc. (GORIL-3)
RegDate: 2014-12-18
Updated: 2014-12-18
Comment: https://support.GorillaServers.com
Comment: Abuse: abuse@GorillaServers.com
Comment: Billing: billing@GorillaServers.com
Comment: Technical Support: support@GorillaServers.com
Ref: https://rdap.arin.net/registry/ip/104.250.128.0
OrgName: GorillaServers, Inc.
OrgId: GORIL-3
Address: 119 N 600 W
City: Ogden
StateProv: UT
PostalCode: 84404
Country: US
RegDate: 2011-01-28
Updated: 2024-11-25
Ref: https://rdap.arin.net/registry/entity/GORIL-3
ReferralServer: rwhois://support.gorillaservers.com:4321
OrgNOCHandle: NOC11801-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-801-752-0084
OrgNOCEmail: arin-noc@GorillaServers.com
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC11801-ARIN
OrgTechHandle: TECHC24-ARIN
OrgTechName: Tech Contact
OrgTechPhone: +1-801-752-0084
OrgTechEmail: arin-tech@GorillaServers.com
OrgTechRef: https://rdap.arin.net/registry/entity/TECHC24-ARIN
OrgAbuseHandle: ABUSE2878-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-801-752-0084
OrgAbuseEmail: abuse@GorillaServers.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2878-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to support.gorillaservers.com:4321.; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.250.149.156
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24385
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.250.149.156. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102402 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 25 13:03:13 CST 2026
;; MSG SIZE rcvd: 108156.149.250.104.in-addr.arpa domain name pointer hosted-by.racknerd.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
156.149.250.104.in-addr.arpa name = hosted-by.racknerd.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 129.211.27.10 | attackbots | SSH bruteforce |
2020-04-25 03:49:32 |
| 36.79.252.118 | attack | Unauthorized connection attempt from IP address 36.79.252.118 on Port 445(SMB) |
2020-04-25 04:02:23 |
| 167.249.168.102 | attack | Apr 24 20:15:57 |
2020-04-25 04:12:50 |
| 125.160.66.182 | attack | Unauthorized connection attempt from IP address 125.160.66.182 on Port 445(SMB) |
2020-04-25 03:42:02 |
| 49.88.112.70 | attackspam | slow and persistent scanner |
2020-04-25 04:12:04 |
| 186.16.207.70 | attackspam | firewall-block, port(s): 445/tcp |
2020-04-25 04:13:40 |
| 175.24.67.124 | attackbotsspam | Apr 24 22:36:33 ift sshd\[38558\]: Invalid user gitblit from 175.24.67.124Apr 24 22:36:34 ift sshd\[38558\]: Failed password for invalid user gitblit from 175.24.67.124 port 51564 ssh2Apr 24 22:40:23 ift sshd\[39299\]: Invalid user rajashri from 175.24.67.124Apr 24 22:40:25 ift sshd\[39299\]: Failed password for invalid user rajashri from 175.24.67.124 port 40192 ssh2Apr 24 22:44:16 ift sshd\[39596\]: Invalid user system from 175.24.67.124 ... |
2020-04-25 03:53:57 |
| 94.102.49.193 | attack | [Fri Apr 17 03:40:15 2020] - DDoS Attack From IP: 94.102.49.193 Port: 24858 |
2020-04-25 04:02:44 |
| 114.41.32.110 | attackspambots | Honeypot attack, port: 445, PTR: 114-41-32-110.dynamic-ip.hinet.net. |
2020-04-25 04:11:38 |
| 193.169.4.176 | attackspambots | Unauthorized connection attempt from IP address 193.169.4.176 on Port 445(SMB) |
2020-04-25 04:08:17 |
| 185.176.27.26 | attackspambots | Apr 24 20:34:31 debian-2gb-nbg1-2 kernel: \[10012214.877886\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.26 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=17743 PROTO=TCP SPT=47063 DPT=29680 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-25 03:48:09 |
| 175.107.27.75 | attackspambots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-04-25 03:59:51 |
| 110.77.246.185 | attack | Email rejected due to spam filtering |
2020-04-25 03:43:05 |
| 211.104.171.239 | attackbotsspam | Apr 24 21:58:33 server sshd[44128]: Failed password for invalid user raoul from 211.104.171.239 port 46203 ssh2 Apr 24 21:59:50 server sshd[44683]: Failed password for invalid user developer from 211.104.171.239 port 54922 ssh2 Apr 24 22:00:49 server sshd[45274]: Failed password for invalid user clock from 211.104.171.239 port 34012 ssh2 |
2020-04-25 04:19:56 |
| 14.190.153.50 | attack | 1587729650 - 04/24/2020 14:00:50 Host: 14.190.153.50/14.190.153.50 Port: 445 TCP Blocked |
2020-04-25 03:53:41 |