178.91.254.34 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Kazakhstan

Internet Service Provider: JSC Kazakhtelecom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Advance-fee Fraud Spam Return-Path: Received: from mail.logitex.kz (mail.logitex.kz [178.91.254.34]) Reply-To: From: DR DAVID To: Subject: Re: Gold Investment Date: Mon, 13 Jan 2020 18:15:16 -0500 X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Message-ID: Hello Friend My name is Dr. David Koffi I am a financial broker by profession. I have an important business I want to propose to you therefore go through this email and get back to me. In the year 2011 during the political upheavals in Libya, I was consulted by one of my old client an oil magnate and ex minister of petroleum being a strong ally to deposed Libyan president Muammar Gaddaffi. My client sought for my assistance to move 900 kilograms of Gold ore Bars to a financial house abroad when it became clear to him that	2020-01-15 16:26:38

Type

Details

Datetime

attack

Advance-fee Fraud Spam

Return-Path: 
Received: from mail.logitex.kz (mail.logitex.kz [178.91.254.34])
Reply-To: 
From: DR DAVID 
To: 
Subject: Re: Gold Investment
Date: Mon, 13 Jan 2020 18:15:16 -0500
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: 

Hello Friend

My name is Dr. David Koffi I am a financial broker by profession. I have an 

important business I want to propose to you therefore go through this email and 

get back to me.

In the year 2011 during the political upheavals in Libya, I was consulted by one 

of my old client an oil magnate and ex minister of petroleum being a strong ally 

to deposed Libyan president Muammar Gaddaffi. My client sought for my assistance 

to move 900 kilograms of Gold ore Bars to a financial house abroad when it became 

clear to him that

2020-01-15 16:26:38

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 178.91.254.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61346
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;178.91.254.34.			IN	A

;; AUTHORITY SECTION:
.			291	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011500 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 15 16:26:34 CST 2020
;; MSG SIZE  rcvd: 117

Host info

34.254.91.178.in-addr.arpa domain name pointer mail.logitex.kz.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
34.254.91.178.in-addr.arpa	name = mail.logitex.kz.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
178.33.236.23	attackspam	2019-10-28T22:08:06.585855abusebot.cloudsearch.cf sshd\[25799\]: Invalid user cvsuser1 from 178.33.236.23 port 49898	2019-10-29 06:18:36
185.220.101.1	attackspambots	Invalid user 1111 from 185.220.101.1 port 41951	2019-10-29 05:57:55
62.210.37.82	attackbotsspam	Invalid user aaron from 62.210.37.82 port 45002	2019-10-29 06:09:59
77.247.181.162	attackbots	Invalid user aaa from 77.247.181.162 port 49950	2019-10-29 06:08:45
182.61.163.126	attackspambots	Invalid user admin from 182.61.163.126 port 44650	2019-10-29 05:58:39
190.65.220.94	attack	Invalid user ip from 190.65.220.94 port 52507	2019-10-29 05:55:00
106.13.6.116	attack	2019-10-28T21:20:11.985508abusebot-8.cloudsearch.cf sshd\[15447\]: Invalid user te from 106.13.6.116 port 57524	2019-10-29 05:47:24
88.149.181.240	attack	Invalid user ethos from 88.149.181.240 port 38728	2019-10-29 06:07:49
190.152.14.178	attackbotsspam	Invalid user postgres from 190.152.14.178 port 24890	2019-10-29 06:18:07
185.220.101.50	attackspam	Invalid user aaron from 185.220.101.50 port 44697	2019-10-29 05:57:13
175.6.5.233	attack	Oct 28 22:57:31 MK-Soft-VM3 sshd[11272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.5.233 Oct 28 22:57:33 MK-Soft-VM3 sshd[11272]: Failed password for invalid user ftpuser from 175.6.5.233 port 64636 ssh2 ...	2019-10-29 06:20:13
106.251.67.78	attack	Oct 28 17:34:15 ny01 sshd[25703]: Failed password for root from 106.251.67.78 port 46574 ssh2 Oct 28 17:38:16 ny01 sshd[26107]: Failed password for root from 106.251.67.78 port 57208 ssh2	2019-10-29 05:46:11
103.92.25.199	attackbots	Invalid user megatbr from 103.92.25.199 port 47850	2019-10-29 06:06:52
106.12.134.58	attackspam	Invalid user james from 106.12.134.58 port 52820	2019-10-29 06:06:12
144.217.255.89	attackbotsspam	Invalid user 111111 from 144.217.255.89 port 13988	2019-10-29 06:22:45

Recently Reported IPs

103.219.112.47	103.140.234.214	172.81.237.219	36.81.172.39
138.197.196.174	122.51.60.228	173.180.134.56	151.101.230.213
121.182.74.116	159.203.124.234	49.51.161.114	128.53.85.45
174.87.75.126	5.175.221.137	88.230.62.92	113.208.8.76
236.26.184.216	1.1.135.188	101.219.199.26	123.218.137.237