178.91.254.34 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Kazakhstan

Internet Service Provider: JSC Kazakhtelecom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Advance-fee Fraud Spam Return-Path: Received: from mail.logitex.kz (mail.logitex.kz [178.91.254.34]) Reply-To: From: DR DAVID To: Subject: Re: Gold Investment Date: Mon, 13 Jan 2020 18:15:16 -0500 X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Message-ID: Hello Friend My name is Dr. David Koffi I am a financial broker by profession. I have an important business I want to propose to you therefore go through this email and get back to me. In the year 2011 during the political upheavals in Libya, I was consulted by one of my old client an oil magnate and ex minister of petroleum being a strong ally to deposed Libyan president Muammar Gaddaffi. My client sought for my assistance to move 900 kilograms of Gold ore Bars to a financial house abroad when it became clear to him that	2020-01-15 16:26:38

Type

Details

Datetime

attack

Advance-fee Fraud Spam

Return-Path: 
Received: from mail.logitex.kz (mail.logitex.kz [178.91.254.34])
Reply-To: 
From: DR DAVID 
To: 
Subject: Re: Gold Investment
Date: Mon, 13 Jan 2020 18:15:16 -0500
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: 

Hello Friend

My name is Dr. David Koffi I am a financial broker by profession. I have an 

important business I want to propose to you therefore go through this email and 

get back to me.

In the year 2011 during the political upheavals in Libya, I was consulted by one 

of my old client an oil magnate and ex minister of petroleum being a strong ally 

to deposed Libyan president Muammar Gaddaffi. My client sought for my assistance 

to move 900 kilograms of Gold ore Bars to a financial house abroad when it became 

clear to him that

2020-01-15 16:26:38

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 178.91.254.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61346
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;178.91.254.34.			IN	A

;; AUTHORITY SECTION:
.			291	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011500 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 15 16:26:34 CST 2020
;; MSG SIZE  rcvd: 117

Host info

34.254.91.178.in-addr.arpa domain name pointer mail.logitex.kz.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
34.254.91.178.in-addr.arpa	name = mail.logitex.kz.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
176.114.144.145	attackspam	Unauthorized connection attempt detected from IP address 176.114.144.145 to port 8080 [T]	2020-07-22 00:28:45
170.106.37.231	attack	Unauthorized connection attempt detected from IP address 170.106.37.231 to port 9999 [T]	2020-07-22 00:51:04
46.48.142.45	attack	Unauthorized connection attempt detected from IP address 46.48.142.45 to port 23 [T]	2020-07-22 00:17:49
13.71.111.192	attackbots	Unauthorized connection attempt detected from IP address 13.71.111.192 to port 1433 [T]	2020-07-22 00:43:53
206.189.128.215	attackspam	Jul 21 17:27:20 debian-2gb-nbg1-2 kernel: \[17603775.110295\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=206.189.128.215 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=36046 PROTO=TCP SPT=49427 DPT=5628 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-22 00:24:29
52.142.12.39	attackspambots	Unauthorized connection attempt detected from IP address 52.142.12.39 to port 1433 [T]	2020-07-22 00:40:24
134.209.27.73	attackspambots	Unauthorized connection attempt detected from IP address 134.209.27.73 to port 8546 [T]	2020-07-22 00:30:21
117.18.0.27	attackbotsspam	Unauthorized connection attempt detected from IP address 117.18.0.27 to port 445 [T]	2020-07-22 00:32:56
192.35.168.251	attack	Unauthorized connection attempt detected from IP address 192.35.168.251 to port 591 [T]	2020-07-22 00:47:25
194.15.36.37	attack	TCP (SYN) 194.15.36.37:57129 -> port 81, len 44	2020-07-22 00:47:02
162.243.128.214	attackspambots	Fail2Ban Ban Triggered	2020-07-22 00:51:17
52.142.62.1	attack	Unauthorized connection attempt detected from IP address 52.142.62.1 to port 1433 [T]	2020-07-22 00:16:44
2.186.15.179	attackspambots	Unauthorized connection attempt detected from IP address 2.186.15.179 to port 445 [T]	2020-07-22 00:44:15
174.138.41.13	attackbots	174.138.41.13 - - [21/Jul/2020:15:03:01 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 174.138.41.13 - - [21/Jul/2020:15:03:02 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1857 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 174.138.41.13 - - [21/Jul/2020:15:03:03 +0100] "POST /wp/xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-22 00:50:43
78.37.26.70	attack	Unauthorized connection attempt detected from IP address 78.37.26.70 to port 445 [T]	2020-07-22 00:37:54

Recently Reported IPs

103.219.112.47	103.140.234.214	172.81.237.219	36.81.172.39
138.197.196.174	122.51.60.228	173.180.134.56	151.101.230.213
121.182.74.116	159.203.124.234	49.51.161.114	128.53.85.45
174.87.75.126	5.175.221.137	88.230.62.92	113.208.8.76
236.26.184.216	1.1.135.188	101.219.199.26	123.218.137.237