Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Kazakhstan

Internet Service Provider: JSC Kazakhtelecom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Advance-fee Fraud Spam

Return-Path: 
Received: from mail.logitex.kz (mail.logitex.kz [178.91.254.34])
Reply-To: 
From: DR DAVID 
To: 
Subject: Re: Gold Investment
Date: Mon, 13 Jan 2020 18:15:16 -0500
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: 

Hello Friend

My name is Dr. David Koffi I am a financial broker by profession. I have an 

important business I want to propose to you therefore go through this email and 

get back to me.

In the year 2011 during the political upheavals in Libya, I was consulted by one 

of my old client an oil magnate and ex minister of petroleum being a strong ally 

to deposed Libyan president Muammar Gaddaffi. My client sought for my assistance 

to move 900 kilograms of Gold ore Bars to a financial house abroad when it became 

clear to him that
2020-01-15 16:26:38
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 178.91.254.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61346
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;178.91.254.34.			IN	A

;; AUTHORITY SECTION:
.			291	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011500 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 15 16:26:34 CST 2020
;; MSG SIZE  rcvd: 117
Host info
34.254.91.178.in-addr.arpa domain name pointer mail.logitex.kz.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
34.254.91.178.in-addr.arpa	name = mail.logitex.kz.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
182.253.205.29 attackspambots
Unauthorised access (Jan 14) SRC=182.253.205.29 LEN=44 TTL=240 ID=54098 TCP DPT=139 WINDOW=1024 SYN 
Unauthorised access (Jan 13) SRC=182.253.205.29 LEN=44 TTL=240 ID=52282 TCP DPT=139 WINDOW=1024 SYN
2020-01-15 02:07:00
162.241.32.152 attackbots
Jan 14 17:04:42 vpn01 sshd[1477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.32.152
Jan 14 17:04:44 vpn01 sshd[1477]: Failed password for invalid user tj from 162.241.32.152 port 47342 ssh2
...
2020-01-15 02:03:30
81.130.234.235 attackbots
Unauthorized connection attempt detected from IP address 81.130.234.235 to port 2220 [J]
2020-01-15 02:03:48
200.57.3.4 attackspam
Unauthorized connection attempt from IP address 200.57.3.4 on Port 445(SMB)
2020-01-15 01:34:44
190.140.129.240 attackbots
Time:     Tue Jan 14 09:44:46 2020 -0300
IP:       190.140.129.240 (PA/Panama/-)
Failures: 30 (smtpauth)
Interval: 3600 seconds
Blocked:  Permanent Block
2020-01-15 01:48:02
172.82.179.253 attackbotsspam
Time:     Tue Jan 14 09:40:29 2020 -0300
IP:       172.82.179.253 (US/United States/172-82-179-253.hosted-by.bcr.host)
Failures: 30 (smtpauth)
Interval: 3600 seconds
Blocked:  Permanent Block
2020-01-15 01:43:06
180.76.135.236 attack
Jan 14 18:28:13 dedicated sshd[18115]: Invalid user seng from 180.76.135.236 port 57750
2020-01-15 01:36:01
176.57.79.145 attack
Unauthorized connection attempt detected from IP address 176.57.79.145 to port 23 [J]
2020-01-15 01:59:12
96.8.118.140 attack
Unauthorized connection attempt detected from IP address 96.8.118.140 to port 23 [J]
2020-01-15 02:02:35
59.52.36.190 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-15 01:36:31
94.183.34.64 attackspambots
01/14/2020-08:00:39.634233 94.183.34.64 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-01-15 01:39:57
170.247.3.34 attackspam
Unauthorized connection attempt from IP address 170.247.3.34 on Port 445(SMB)
2020-01-15 01:49:07
184.105.139.76 attackbots
11211/tcp 5555/tcp 6379/tcp...
[2019-11-14/2020-01-13]23pkt,12pt.(tcp),1pt.(udp)
2020-01-15 01:58:04
92.118.161.41 attack
Unauthorized connection attempt detected from IP address 92.118.161.41 to port 8090 [J]
2020-01-15 01:30:15
5.67.157.180 attackbots
Unauthorized connection attempt detected from IP address 5.67.157.180 to port 2220 [J]
2020-01-15 01:44:57

Recently Reported IPs

103.219.112.47 103.140.234.214 172.81.237.219 36.81.172.39
138.197.196.174 122.51.60.228 173.180.134.56 151.101.230.213
121.182.74.116 159.203.124.234 49.51.161.114 128.53.85.45
174.87.75.126 5.175.221.137 88.230.62.92 113.208.8.76
236.26.184.216 1.1.135.188 101.219.199.26 123.218.137.237