198.245.80.52 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: ExactTarget, Inc.

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 198.245.80.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61952
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;198.245.80.52.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042001 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 21 08:27:17 +08 2019
;; MSG SIZE  rcvd: 117

Host info

52.80.245.198.in-addr.arpa domain name pointer mta.email.oxfordshop.com.au.

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
52.80.245.198.in-addr.arpa	name = mta.email.oxfordshop.com.au.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
14.162.196.113	attackbotsspam	1592513067 - 06/18/2020 22:44:27 Host: 14.162.196.113/14.162.196.113 Port: 445 TCP Blocked	2020-06-19 07:51:54
185.166.153.98	attack	[2020-06-18 19:24:49] NOTICE[1273] chan_sip.c: Registration from '"901" ' failed for '185.166.153.98:5202' - Wrong password [2020-06-18 19:24:49] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-18T19:24:49.683-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="901",SessionID="0x7f31c0334138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.166.153.98/5202",Challenge="4591a09d",ReceivedChallenge="4591a09d",ReceivedHash="1aadaa36293c58432feb9b5a72c09668" [2020-06-18 19:24:49] NOTICE[1273] chan_sip.c: Registration from '"901" ' failed for '185.166.153.98:5202' - Wrong password [2020-06-18 19:24:49] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-18T19:24:49.787-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="901",SessionID="0x7f31c01545c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.1 ...	2020-06-19 07:41:54
36.230.233.186	attackbotsspam	Jun 19 01:42:08 s1 sshd\[19397\]: Invalid user weblogic from 36.230.233.186 port 45102 Jun 19 01:42:08 s1 sshd\[19397\]: Failed password for invalid user weblogic from 36.230.233.186 port 45102 ssh2 Jun 19 01:43:32 s1 sshd\[20081\]: Invalid user admin from 36.230.233.186 port 37556 Jun 19 01:43:32 s1 sshd\[20081\]: Failed password for invalid user admin from 36.230.233.186 port 37556 ssh2 Jun 19 01:44:51 s1 sshd\[20726\]: Invalid user sac from 36.230.233.186 port 58242 Jun 19 01:44:51 s1 sshd\[20726\]: Failed password for invalid user sac from 36.230.233.186 port 58242 ssh2 ...	2020-06-19 07:58:59
142.11.209.152	attackspam	Jun 19 00:07:22 srv01 postfix/smtpd\[680\]: warning: hwsrv-741986.hostwindsdns.com\[142.11.209.152\]: SASL login authentication failed: UGFzc3dvcmQ6 Jun 19 00:07:29 srv01 postfix/smtpd\[1916\]: warning: hwsrv-741986.hostwindsdns.com\[142.11.209.152\]: SASL login authentication failed: UGFzc3dvcmQ6 Jun 19 00:07:40 srv01 postfix/smtpd\[13952\]: warning: hwsrv-741986.hostwindsdns.com\[142.11.209.152\]: SASL login authentication failed: UGFzc3dvcmQ6 Jun 19 00:08:05 srv01 postfix/smtpd\[2511\]: warning: hwsrv-741986.hostwindsdns.com\[142.11.209.152\]: SASL login authentication failed: UGFzc3dvcmQ6 Jun 19 00:08:12 srv01 postfix/smtpd\[2511\]: warning: hwsrv-741986.hostwindsdns.com\[142.11.209.152\]: SASL login authentication failed: UGFzc3dvcmQ6 ...	2020-06-19 08:07:00
106.12.151.250	attackspambots	$f2bV_matches	2020-06-19 07:32:59
139.193.139.31	attack	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-19 07:44:15
210.50.220.211	attack	MYH,DEF GET /wp-login.php	2020-06-19 08:02:30
128.199.227.96	attackspambots	Jun 19 00:06:02 onepixel sshd[2460192]: Failed password for root from 128.199.227.96 port 56070 ssh2 Jun 19 00:08:36 onepixel sshd[2461299]: Invalid user admin from 128.199.227.96 port 44224 Jun 19 00:08:36 onepixel sshd[2461299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.227.96 Jun 19 00:08:36 onepixel sshd[2461299]: Invalid user admin from 128.199.227.96 port 44224 Jun 19 00:08:38 onepixel sshd[2461299]: Failed password for invalid user admin from 128.199.227.96 port 44224 ssh2	2020-06-19 08:08:47
111.229.63.223	attackbotsspam	Jun 19 00:10:58 eventyay sshd[19702]: Failed password for postgres from 111.229.63.223 port 50326 ssh2 Jun 19 00:15:11 eventyay sshd[19833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.63.223 Jun 19 00:15:14 eventyay sshd[19833]: Failed password for invalid user dokuwiki from 111.229.63.223 port 42656 ssh2 ...	2020-06-19 07:43:59
222.186.175.215	attack	2020-06-18T19:25:55.399840xentho-1 sshd[441952]: Failed password for root from 222.186.175.215 port 15834 ssh2 2020-06-18T19:25:48.772272xentho-1 sshd[441952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215 user=root 2020-06-18T19:25:50.963912xentho-1 sshd[441952]: Failed password for root from 222.186.175.215 port 15834 ssh2 2020-06-18T19:25:55.399840xentho-1 sshd[441952]: Failed password for root from 222.186.175.215 port 15834 ssh2 2020-06-18T19:25:59.364104xentho-1 sshd[441952]: Failed password for root from 222.186.175.215 port 15834 ssh2 2020-06-18T19:25:48.772272xentho-1 sshd[441952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215 user=root 2020-06-18T19:25:50.963912xentho-1 sshd[441952]: Failed password for root from 222.186.175.215 port 15834 ssh2 2020-06-18T19:25:55.399840xentho-1 sshd[441952]: Failed password for root from 222.186.175.215 port 15834 ssh2 2020-0 ...	2020-06-19 07:34:34
124.173.65.169	attack	$f2bV_matches	2020-06-19 08:05:01
43.241.238.152	attackbotsspam	Jun 19 00:21:32 OPSO sshd\[31036\]: Invalid user git from 43.241.238.152 port 54574 Jun 19 00:21:32 OPSO sshd\[31036\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.241.238.152 Jun 19 00:21:34 OPSO sshd\[31036\]: Failed password for invalid user git from 43.241.238.152 port 54574 ssh2 Jun 19 00:24:53 OPSO sshd\[31253\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.241.238.152 user=root Jun 19 00:24:54 OPSO sshd\[31253\]: Failed password for root from 43.241.238.152 port 51685 ssh2	2020-06-19 07:53:53
45.143.220.241	attack	[H1.VM2] Blocked by UFW	2020-06-19 07:50:31
58.87.77.174	attackbotsspam	2020-06-19T01:21:26+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)	2020-06-19 07:36:23
177.185.27.249	attackspam	Icarus honeypot on github	2020-06-19 07:40:44

Recently Reported IPs

129.213.119.45	103.87.31.198	213.55.211.120	162.243.141.126
93.63.26.39	85.84.203.9	129.211.104.25	157.230.147.200
129.204.146.39	125.113.143.15	85.106.48.40	141.98.80.25
46.151.151.53	125.45.43.90	191.252.195.74	183.66.64.93
111.67.29.99	200.155.125.89	191.124.28.202	80.218.150.182