141.212.123.147

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
141.212.123.188	attackbots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: researchscan698.eecs.umich.edu.	2020-10-09 03:48:51
141.212.123.188	attack	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: researchscan698.eecs.umich.edu.	2020-10-08 19:55:32
141.212.123.185	attackspambots	Blocked by Sophos UTM Network Protection . / / proto=17 . srcport=45667 . dstport=53 DNS . (3556)	2020-10-06 05:09:59
141.212.123.185	attackbots	Blocked by Sophos UTM Network Protection . / / proto=17 . srcport=45667 . dstport=53 DNS . (3556)	2020-10-05 21:14:30
141.212.123.185	attackspambots	Blocked by Sophos UTM Network Protection . / / proto=17 . srcport=45667 . dstport=53 DNS . (3556)	2020-10-05 13:04:54
141.212.123.185	attackbotsspam	UDP 141.212.123.185:39399 -> port 53, len 76	2020-09-22 03:42:16
141.212.123.190	attack	20-Sep-2020 12:01:52.874 client @0x7f63dae4bda0 141.212.123.190#60972 (researchscan541.eecs.umich.edu): query (cache) 'researchscan541.eecs.umich.edu/A/IN' denied	2020-09-21 22:41:19
141.212.123.185	attackbotsspam	UDP 141.212.123.185:39399 -> port 53, len 76	2020-09-21 19:29:05
141.212.123.190	attack	20-Sep-2020 12:01:52.874 client @0x7f63dae4bda0 141.212.123.190#60972 (researchscan541.eecs.umich.edu): query (cache) 'researchscan541.eecs.umich.edu/A/IN' denied	2020-09-21 14:27:35
141.212.123.190	attackspambots	20-Sep-2020 12:01:52.874 client @0x7f63dae4bda0 141.212.123.190#60972 (researchscan541.eecs.umich.edu): query (cache) 'researchscan541.eecs.umich.edu/A/IN' denied	2020-09-21 06:16:44
141.212.123.186	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-09-14 21:27:45
141.212.123.186	attack	UDP 141.212.123.186:49625 -> port 53, len 76	2020-09-14 05:20:55
141.212.123.189	attackspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-03 23:57:21
141.212.123.188	attack	UDP 141.212.123.188:55449 -> port 53, len 76	2020-09-03 23:07:50
141.212.123.189	attackspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-03 15:27:09

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.212.123.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39853
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;141.212.123.147.		IN	A

;; AUTHORITY SECTION:
.			9	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022100700 1800 900 604800 86400

;; Query time: 96 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 07 14:57:15 CST 2022
;; MSG SIZE  rcvd: 108

Host info

147.123.212.141.in-addr.arpa domain name pointer researchscan657.eecs.umich.edu.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
147.123.212.141.in-addr.arpa	name = researchscan657.eecs.umich.edu.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
138.68.44.55	attack	Sep 9 03:41:43 web9 sshd\[8545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 user=root Sep 9 03:41:46 web9 sshd\[8545\]: Failed password for root from 138.68.44.55 port 33664 ssh2 Sep 9 03:45:32 web9 sshd\[8965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 user=root Sep 9 03:45:33 web9 sshd\[8965\]: Failed password for root from 138.68.44.55 port 39214 ssh2 Sep 9 03:49:22 web9 sshd\[9395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 user=root	2020-09-09 21:52:14
222.186.64.233	attack	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root	2020-09-09 20:59:02
157.245.126.36	attack	157.245.126.36 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 9 08:54:54 jbs1 sshd[31128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.101.132.241 user=root Sep 9 08:54:57 jbs1 sshd[31128]: Failed password for root from 121.101.132.241 port 57834 ssh2 Sep 9 08:53:44 jbs1 sshd[30552]: Failed password for root from 91.134.240.130 port 43248 ssh2 Sep 9 09:01:02 jbs1 sshd[1052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.126.36 user=root Sep 9 08:58:03 jbs1 sshd[32396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.110.238.171 user=root Sep 9 08:58:05 jbs1 sshd[32396]: Failed password for root from 47.110.238.171 port 46124 ssh2 IP Addresses Blocked: 121.101.132.241 (ID/Indonesia/-) 91.134.240.130 (FR/France/-)	2020-09-09 21:02:21
179.232.205.102	attack	Automatic report - XMLRPC Attack	2020-09-09 21:26:55
141.98.9.162	attack	Sep 9 12:53:58 marvibiene sshd[64703]: Invalid user operator from 141.98.9.162 port 57264 Sep 9 12:53:58 marvibiene sshd[64703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.162 Sep 9 12:53:58 marvibiene sshd[64703]: Invalid user operator from 141.98.9.162 port 57264 Sep 9 12:54:00 marvibiene sshd[64703]: Failed password for invalid user operator from 141.98.9.162 port 57264 ssh2	2020-09-09 21:12:46
202.29.39.1	attackspambots	SSH	2020-09-09 21:32:49
106.15.250.167	attackspam	Sep 9 04:38:14 gospond sshd[16117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.15.250.167 Sep 9 04:38:14 gospond sshd[16117]: Invalid user john from 106.15.250.167 port 45286 Sep 9 04:38:16 gospond sshd[16117]: Failed password for invalid user john from 106.15.250.167 port 45286 ssh2 ...	2020-09-09 21:19:50
104.224.173.181	attackspam	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root	2020-09-09 21:01:04
45.142.120.209	attackbots	2020-09-04 14:20:38,174 fail2ban.actions [18715]: NOTICE [postfix-sasl] Ban 45.142.120.209 2020-09-04 16:23:22,876 fail2ban.actions [18715]: NOTICE [postfix-sasl] Ban 45.142.120.209 2020-09-04 18:26:27,856 fail2ban.actions [18715]: NOTICE [postfix-sasl] Ban 45.142.120.209 2020-09-04 20:29:57,725 fail2ban.actions [18715]: NOTICE [postfix-sasl] Ban 45.142.120.209 2020-09-04 22:32:45,629 fail2ban.actions [18715]: NOTICE [postfix-sasl] Ban 45.142.120.209	2020-09-09 21:43:10
49.88.112.109	attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 36 - port: 22 proto: tcp cat: Misc Attackbytes: 60	2020-09-09 21:31:58
194.180.224.103	attackspam	TCP (SYN) 194.180.224.103:25280 -> port 22, len 48	2020-09-09 21:41:48
159.65.12.43	attackbotsspam	Sep 9 09:05:32 h2829583 sshd[6567]: Failed password for root from 159.65.12.43 port 51836 ssh2	2020-09-09 21:43:59
190.148.53.6	attackspambots	1599584021 - 09/08/2020 18:53:41 Host: 190.148.53.6/190.148.53.6 Port: 445 TCP Blocked	2020-09-09 21:33:03
117.192.42.33	attack	<6 unauthorized SSH connections	2020-09-09 21:39:46
134.196.244.120	attackbotsspam	SPAM	2020-09-09 21:45:26

Recently Reported IPs

104.168.66.4	67.21.36.249	67.21.36.219	67.21.36.224
45.239.149.48	193.233.230.235	139.59.2.22	45.120.201.157
180.106.116.227	20.0.197.206	142.93.136.193	103.27.229.44
149.129.130.68	43.153.80.75	174.138.42.119	109.248.6.64
197.56.153.38	5.88.113.46	64.71.155.137	43.153.85.217