City: Los Angeles
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 67.21.64.0 - 67.21.95.255
CIDR: 67.21.64.0/19
NetName: SHARKTECH-INC
NetHandle: NET-67-21-64-0-1
Parent: NET67 (NET-67-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Sharktech (SHARK-7)
RegDate: 2009-02-12
Updated: 2014-01-22
Ref: https://rdap.arin.net/registry/ip/67.21.64.0
OrgName: Sharktech
OrgId: SHARK-7
Address: 8560 S. Eastern Ave Suite 210
City: Las Vegas
StateProv: NV
PostalCode: 89120
Country: US
RegDate: 2012-01-20
Updated: 2024-11-25
Comment: FOR ABUSE RELATED QUESTIONS PLEASE EMAIL ABUSE AT SHARKTECH.NET
Ref: https://rdap.arin.net/registry/entity/SHARK-7
ReferralServer: rwhois://rwhois.sharktech.net:4321
OrgTechHandle: NOC2002-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-844-706-7383
OrgTechEmail: support@sharktech.net
OrgTechRef: https://rdap.arin.net/registry/entity/NOC2002-ARIN
OrgNOCHandle: NOC2002-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-844-706-7383
OrgNOCEmail: support@sharktech.net
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC2002-ARIN
OrgAbuseHandle: ABUSE1080-ARIN
OrgAbuseName: ABUSE Department
OrgAbusePhone: +1-702-425-9980
OrgAbuseEmail: abuse@sharktech.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1080-ARIN
# end
# start
NetRange: 67.21.64.0 - 67.21.95.255
CIDR: 67.21.64.0/19
NetName: SHARK-10
NetHandle: NET-67-21-64-0-2
Parent: SHARKTECH-INC (NET-67-21-64-0-1)
NetType: Reallocated
OriginAS:
Organization: Sharktech (SHARK-10)
RegDate: 2017-05-22
Updated: 2017-05-22
Comment: FOR ABUSE RELATED QUESTIONS PLEASE EMAIL ABUSE AT SHARKTECH.NET
Ref: https://rdap.arin.net/registry/ip/67.21.64.0
OrgName: Sharktech
OrgId: SHARK-10
Address: 624 S Grand Ave
Address: Ste 1200
City: Los Angeles
StateProv: CA
PostalCode: 90017
Country: US
RegDate: 2014-01-22
Updated: 2016-12-21
Comment: FOR ABUSE RELATED QUESTIONS PLEASE EMAIL ABUSE AT SHARKTECH.NET
Ref: https://rdap.arin.net/registry/entity/SHARK-10
ReferralServer: rwhois://rwhois.sharktech.net:4321
OrgNOCHandle: NOC2002-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-844-706-7383
OrgNOCEmail: support@sharktech.net
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC2002-ARIN
OrgAbuseHandle: ABUSE1080-ARIN
OrgAbuseName: ABUSE Department
OrgAbusePhone: +1-702-425-9980
OrgAbuseEmail: abuse@sharktech.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1080-ARIN
OrgTechHandle: NOC2002-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-844-706-7383
OrgTechEmail: support@sharktech.net
OrgTechRef: https://rdap.arin.net/registry/entity/NOC2002-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.sharktech.net:4321.
%rwhois V-1.5:003eff:00 rwhois.sharktech.net (by Network Solutions, Inc. V-1.5.9.6)
network:Auth-Area:67.21.64.0/19
network:Class-Name:network
network:OrgName:YIFENG-LUO
network:OrgID;I:YIFENG-LUO
network:Address:1450 GROVE ST
network:City:DENVER
network:StateProv:Colorado
network:PostalCode:80204
network:Country:CN
network:NetRange:67.21.74.240 - 67.21.74.255
network:CIDR:67.21.74.240/28
network:NetName:YIFENG-LUO-67.21.74.240
network:OrgAbuseHandle:YIFENG-LUO
network:OrgAbuseName:ABUSE department
network:OrgAbusePhone:+1.3152819662
network:OrgAbuseEmail:a5656949@gmail.com
network:OrgNOCHandle:NOC2002-ARIN
network:OrgNOCName:Network Operations Center
network:OrgNOCPhone:+1-702-425-9980
network:OrgNOCEmail:abuse@sharktech.net
network:OrgTechPhone:+1-702-425-9980
network:OrgTechEmail:admin@sharktech.net
network:RegDate:20260711
network:Updated:20260919
%ok
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 67.21.74.253
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51021
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;67.21.74.253. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026091901 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 20 09:23:24 CST 2026
;; MSG SIZE rcvd: 105
b'Host 253.74.21.67.in-addr.arpa not found: 2(SERVFAIL)
'
server can't find 67.21.74.253.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.102.49.190 | attackbotsspam | firewall-block, port(s): 175/tcp |
2019-11-22 19:35:07 |
| 163.172.30.8 | attackbots | SSH Bruteforce |
2019-11-22 19:20:26 |
| 213.238.69.57 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/213.238.69.57/ PL - 1H : (80) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : PL NAME ASN : ASN12741 IP : 213.238.69.57 CIDR : 213.238.64.0/18 PREFIX COUNT : 95 UNIQUE IP COUNT : 1590528 ATTACKS DETECTED ASN12741 : 1H - 1 3H - 1 6H - 2 12H - 3 24H - 6 DateTime : 2019-11-22 07:22:42 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery |
2019-11-22 19:15:23 |
| 51.83.42.244 | attackspam | SSH Brute Force, server-1 sshd[27246]: Failed password for invalid user nochiton from 51.83.42.244 port 37046 ssh2 |
2019-11-22 19:23:52 |
| 202.79.163.153 | attackbots | *** Phishing website that camouflaged Japanese SNS LINE. https://www.dirske.com/ |
2019-11-22 19:13:49 |
| 138.197.93.133 | attackspam | Nov 22 12:05:03 server sshd\[8288\]: Invalid user peluso from 138.197.93.133 Nov 22 12:05:03 server sshd\[8288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.93.133 Nov 22 12:05:04 server sshd\[8288\]: Failed password for invalid user peluso from 138.197.93.133 port 34950 ssh2 Nov 22 12:23:11 server sshd\[13646\]: Invalid user cmaryk from 138.197.93.133 Nov 22 12:23:11 server sshd\[13646\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.93.133 ... |
2019-11-22 19:17:31 |
| 60.10.199.38 | attackbotsspam | Lines containing failures of 60.10.199.38 Nov 21 10:30:22 jarvis sshd[28633]: Invalid user pfaffmann from 60.10.199.38 port 10756 Nov 21 10:30:22 jarvis sshd[28633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.10.199.38 Nov 21 10:30:24 jarvis sshd[28633]: Failed password for invalid user pfaffmann from 60.10.199.38 port 10756 ssh2 Nov 21 10:30:25 jarvis sshd[28633]: Received disconnect from 60.10.199.38 port 10756:11: Bye Bye [preauth] Nov 21 10:30:25 jarvis sshd[28633]: Disconnected from invalid user pfaffmann 60.10.199.38 port 10756 [preauth] Nov 21 10:57:41 jarvis sshd[963]: Invalid user medwid from 60.10.199.38 port 38922 Nov 21 10:57:41 jarvis sshd[963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.10.199.38 Nov 21 10:57:43 jarvis sshd[963]: Failed password for invalid user medwid from 60.10.199.38 port 38922 ssh2 Nov 21 10:57:44 jarvis sshd[963]: Received disconnect from ........ ------------------------------ |
2019-11-22 18:59:29 |
| 51.75.153.255 | attack | Nov 20 15:13:55 DNS-2 sshd[17808]: Invalid user abby from 51.75.153.255 port 37094 Nov 20 15:13:55 DNS-2 sshd[17808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.153.255 Nov 20 15:13:56 DNS-2 sshd[17808]: Failed password for invalid user abby from 51.75.153.255 port 37094 ssh2 Nov 20 15:13:57 DNS-2 sshd[17808]: Received disconnect from 51.75.153.255 port 37094:11: Bye Bye [preauth] Nov 20 15:13:57 DNS-2 sshd[17808]: Disconnected from invalid user abby 51.75.153.255 port 37094 [preauth] Nov 20 15:31:52 DNS-2 sshd[18507]: Invalid user sqlsrv from 51.75.153.255 port 60598 Nov 20 15:31:52 DNS-2 sshd[18507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.153.255 Nov 20 15:31:54 DNS-2 sshd[18507]: Failed password for invalid user sqlsrv from 51.75.153.255 port 60598 ssh2 Nov 20 15:31:56 DNS-2 sshd[18507]: Received disconnect from 51.75.153.255 port 60598:11: Bye Bye [preauth] No........ ------------------------------- |
2019-11-22 19:02:56 |
| 3.0.115.255 | attackspam | 3.0.115.255:55965 - - [22/Nov/2019:11:27:35 +0100] "GET /wordpress/wp-login.php HTTP/1.1" 404 308 3.0.115.255:3957 - - [22/Nov/2019:11:27:35 +0100] "GET /blog/wp-login.php HTTP/1.1" 404 303 3.0.115.255:30226 - - [22/Nov/2019:11:27:35 +0100] "GET /wp-login.php HTTP/1.1" 404 298 |
2019-11-22 18:57:22 |
| 77.199.87.64 | attackbots | Nov 22 10:25:39 124388 sshd[8116]: Failed password for root from 77.199.87.64 port 50131 ssh2 Nov 22 10:29:00 124388 sshd[8120]: Invalid user ermanno from 77.199.87.64 port 39543 Nov 22 10:29:00 124388 sshd[8120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.199.87.64 Nov 22 10:29:00 124388 sshd[8120]: Invalid user ermanno from 77.199.87.64 port 39543 Nov 22 10:29:02 124388 sshd[8120]: Failed password for invalid user ermanno from 77.199.87.64 port 39543 ssh2 |
2019-11-22 19:30:12 |
| 94.191.47.204 | attack | Nov 22 06:18:04 vtv3 sshd[27620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.47.204 Nov 22 06:18:06 vtv3 sshd[27620]: Failed password for invalid user zd from 94.191.47.204 port 38008 ssh2 Nov 22 06:22:47 vtv3 sshd[29402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.47.204 Nov 22 06:36:12 vtv3 sshd[2313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.47.204 Nov 22 06:36:14 vtv3 sshd[2313]: Failed password for invalid user tttserver from 94.191.47.204 port 38502 ssh2 Nov 22 06:40:52 vtv3 sshd[4042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.47.204 Nov 22 06:54:25 vtv3 sshd[8774]: Failed password for root from 94.191.47.204 port 39010 ssh2 Nov 22 06:58:49 vtv3 sshd[10442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.47.204 Nov 22 06:58:51 vtv3 sshd[10442] |
2019-11-22 19:06:52 |
| 128.199.128.215 | attackbots | Nov 21 23:05:09 tdfoods sshd\[32607\]: Invalid user harlee from 128.199.128.215 Nov 21 23:05:09 tdfoods sshd\[32607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.128.215 Nov 21 23:05:11 tdfoods sshd\[32607\]: Failed password for invalid user harlee from 128.199.128.215 port 55488 ssh2 Nov 21 23:09:22 tdfoods sshd\[607\]: Invalid user fkfn98 from 128.199.128.215 Nov 21 23:09:22 tdfoods sshd\[607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.128.215 |
2019-11-22 19:20:40 |
| 139.19.117.8 | attack | " " |
2019-11-22 18:58:02 |
| 173.241.21.82 | attack | $f2bV_matches |
2019-11-22 19:32:06 |
| 107.189.11.168 | attackbots | Nov 22 01:04:31 kapalua sshd\[24106\]: Invalid user winje from 107.189.11.168 Nov 22 01:04:31 kapalua sshd\[24106\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.189.11.168 Nov 22 01:04:33 kapalua sshd\[24106\]: Failed password for invalid user winje from 107.189.11.168 port 51318 ssh2 Nov 22 01:08:59 kapalua sshd\[24822\]: Invalid user vanhove from 107.189.11.168 Nov 22 01:08:59 kapalua sshd\[24822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.189.11.168 |
2019-11-22 19:10:37 |