178.91.254.34 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Kazakhstan

Internet Service Provider: JSC Kazakhtelecom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Advance-fee Fraud Spam Return-Path: Received: from mail.logitex.kz (mail.logitex.kz [178.91.254.34]) Reply-To: From: DR DAVID To: Subject: Re: Gold Investment Date: Mon, 13 Jan 2020 18:15:16 -0500 X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Message-ID: Hello Friend My name is Dr. David Koffi I am a financial broker by profession. I have an important business I want to propose to you therefore go through this email and get back to me. In the year 2011 during the political upheavals in Libya, I was consulted by one of my old client an oil magnate and ex minister of petroleum being a strong ally to deposed Libyan president Muammar Gaddaffi. My client sought for my assistance to move 900 kilograms of Gold ore Bars to a financial house abroad when it became clear to him that	2020-01-15 16:26:38

Type

Details

Datetime

attack

Advance-fee Fraud Spam

Return-Path: 
Received: from mail.logitex.kz (mail.logitex.kz [178.91.254.34])
Reply-To: 
From: DR DAVID 
To: 
Subject: Re: Gold Investment
Date: Mon, 13 Jan 2020 18:15:16 -0500
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: 

Hello Friend

My name is Dr. David Koffi I am a financial broker by profession. I have an 

important business I want to propose to you therefore go through this email and 

get back to me.

In the year 2011 during the political upheavals in Libya, I was consulted by one 

of my old client an oil magnate and ex minister of petroleum being a strong ally 

to deposed Libyan president Muammar Gaddaffi. My client sought for my assistance 

to move 900 kilograms of Gold ore Bars to a financial house abroad when it became 

clear to him that

2020-01-15 16:26:38

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 178.91.254.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61346
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;178.91.254.34.			IN	A

;; AUTHORITY SECTION:
.			291	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011500 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 15 16:26:34 CST 2020
;; MSG SIZE  rcvd: 117

Host info

34.254.91.178.in-addr.arpa domain name pointer mail.logitex.kz.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
34.254.91.178.in-addr.arpa	name = mail.logitex.kz.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
182.253.205.29	attackspambots	Unauthorised access (Jan 14) SRC=182.253.205.29 LEN=44 TTL=240 ID=54098 TCP DPT=139 WINDOW=1024 SYN Unauthorised access (Jan 13) SRC=182.253.205.29 LEN=44 TTL=240 ID=52282 TCP DPT=139 WINDOW=1024 SYN	2020-01-15 02:07:00
162.241.32.152	attackbots	Jan 14 17:04:42 vpn01 sshd[1477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.32.152 Jan 14 17:04:44 vpn01 sshd[1477]: Failed password for invalid user tj from 162.241.32.152 port 47342 ssh2 ...	2020-01-15 02:03:30
81.130.234.235	attackbots	Unauthorized connection attempt detected from IP address 81.130.234.235 to port 2220 [J]	2020-01-15 02:03:48
200.57.3.4	attackspam	Unauthorized connection attempt from IP address 200.57.3.4 on Port 445(SMB)	2020-01-15 01:34:44
190.140.129.240	attackbots	Time: Tue Jan 14 09:44:46 2020 -0300 IP: 190.140.129.240 (PA/Panama/-) Failures: 30 (smtpauth) Interval: 3600 seconds Blocked: Permanent Block	2020-01-15 01:48:02
172.82.179.253	attackbotsspam	Time: Tue Jan 14 09:40:29 2020 -0300 IP: 172.82.179.253 (US/United States/172-82-179-253.hosted-by.bcr.host) Failures: 30 (smtpauth) Interval: 3600 seconds Blocked: Permanent Block	2020-01-15 01:43:06
180.76.135.236	attack	Jan 14 18:28:13 dedicated sshd[18115]: Invalid user seng from 180.76.135.236 port 57750	2020-01-15 01:36:01
176.57.79.145	attack	Unauthorized connection attempt detected from IP address 176.57.79.145 to port 23 [J]	2020-01-15 01:59:12
96.8.118.140	attack	Unauthorized connection attempt detected from IP address 96.8.118.140 to port 23 [J]	2020-01-15 02:02:35
59.52.36.190	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-15 01:36:31
94.183.34.64	attackspambots	01/14/2020-08:00:39.634233 94.183.34.64 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-01-15 01:39:57
170.247.3.34	attackspam	Unauthorized connection attempt from IP address 170.247.3.34 on Port 445(SMB)	2020-01-15 01:49:07
184.105.139.76	attackbots	11211/tcp 5555/tcp 6379/tcp... [2019-11-14/2020-01-13]23pkt,12pt.(tcp),1pt.(udp)	2020-01-15 01:58:04
92.118.161.41	attack	Unauthorized connection attempt detected from IP address 92.118.161.41 to port 8090 [J]	2020-01-15 01:30:15
5.67.157.180	attackbots	Unauthorized connection attempt detected from IP address 5.67.157.180 to port 2220 [J]	2020-01-15 01:44:57

Recently Reported IPs

103.219.112.47	103.140.234.214	172.81.237.219	36.81.172.39
138.197.196.174	122.51.60.228	173.180.134.56	151.101.230.213
121.182.74.116	159.203.124.234	49.51.161.114	128.53.85.45
174.87.75.126	5.175.221.137	88.230.62.92	113.208.8.76
236.26.184.216	1.1.135.188	101.219.199.26	123.218.137.237