141.212.123.199

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: University of Michigan College of Engineering

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-06 02:38:29

Comments on same subnet:

IP	Type	Details	Datetime
141.212.123.188	attackbots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: researchscan698.eecs.umich.edu.	2020-10-09 03:48:51
141.212.123.188	attack	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: researchscan698.eecs.umich.edu.	2020-10-08 19:55:32
141.212.123.185	attackspambots	Blocked by Sophos UTM Network Protection . / / proto=17 . srcport=45667 . dstport=53 DNS . (3556)	2020-10-06 05:09:59
141.212.123.185	attackbots	Blocked by Sophos UTM Network Protection . / / proto=17 . srcport=45667 . dstport=53 DNS . (3556)	2020-10-05 21:14:30
141.212.123.185	attackspambots	Blocked by Sophos UTM Network Protection . / / proto=17 . srcport=45667 . dstport=53 DNS . (3556)	2020-10-05 13:04:54
141.212.123.185	attackbotsspam	UDP 141.212.123.185:39399 -> port 53, len 76	2020-09-22 03:42:16
141.212.123.190	attack	20-Sep-2020 12:01:52.874 client @0x7f63dae4bda0 141.212.123.190#60972 (researchscan541.eecs.umich.edu): query (cache) 'researchscan541.eecs.umich.edu/A/IN' denied	2020-09-21 22:41:19
141.212.123.185	attackbotsspam	UDP 141.212.123.185:39399 -> port 53, len 76	2020-09-21 19:29:05
141.212.123.190	attack	20-Sep-2020 12:01:52.874 client @0x7f63dae4bda0 141.212.123.190#60972 (researchscan541.eecs.umich.edu): query (cache) 'researchscan541.eecs.umich.edu/A/IN' denied	2020-09-21 14:27:35
141.212.123.190	attackspambots	20-Sep-2020 12:01:52.874 client @0x7f63dae4bda0 141.212.123.190#60972 (researchscan541.eecs.umich.edu): query (cache) 'researchscan541.eecs.umich.edu/A/IN' denied	2020-09-21 06:16:44
141.212.123.186	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-09-14 21:27:45
141.212.123.186	attack	UDP 141.212.123.186:49625 -> port 53, len 76	2020-09-14 05:20:55
141.212.123.189	attackspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-03 23:57:21
141.212.123.188	attack	UDP 141.212.123.188:55449 -> port 53, len 76	2020-09-03 23:07:50
141.212.123.189	attackspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-03 15:27:09

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.212.123.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32900
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;141.212.123.199.		IN	A

;; AUTHORITY SECTION:
.			362	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020500 1800 900 604800 86400

;; Query time: 94 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 02:38:24 CST 2020
;; MSG SIZE  rcvd: 119

Host info

199.123.212.141.in-addr.arpa domain name pointer researchscan709.eecs.umich.edu.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
199.123.212.141.in-addr.arpa	name = researchscan709.eecs.umich.edu.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
67.205.145.234	attackbots	bruteforce detected	2020-06-03 05:09:55
36.111.182.52	attackspambots	Jun 2 22:20:10 ns382633 sshd\[11645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.111.182.52 user=root Jun 2 22:20:12 ns382633 sshd\[11645\]: Failed password for root from 36.111.182.52 port 55304 ssh2 Jun 2 22:26:15 ns382633 sshd\[12653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.111.182.52 user=root Jun 2 22:26:17 ns382633 sshd\[12653\]: Failed password for root from 36.111.182.52 port 56656 ssh2 Jun 2 22:27:40 ns382633 sshd\[12811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.111.182.52 user=root	2020-06-03 05:22:09
34.89.31.175	attack	Jun 2 22:22:30 * sshd[21573]: Failed password for root from 34.89.31.175 port 34338 ssh2	2020-06-03 05:17:46
152.136.188.87	attackbotsspam	leo_www	2020-06-03 05:11:18
27.155.65.3	attackspam	Jun 2 16:59:22 ny01 sshd[27249]: Failed password for root from 27.155.65.3 port 10783 ssh2 Jun 2 17:02:33 ny01 sshd[27775]: Failed password for root from 27.155.65.3 port 35698 ssh2	2020-06-03 05:08:12
5.83.161.36	attackspam	Automatic report - Banned IP Access	2020-06-03 05:15:14
128.199.254.21	attackspambots	Jun 2 20:27:47 scw-6657dc sshd[25814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.254.21 user=root Jun 2 20:27:47 scw-6657dc sshd[25814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.254.21 user=root Jun 2 20:27:48 scw-6657dc sshd[25814]: Failed password for root from 128.199.254.21 port 17819 ssh2 ...	2020-06-03 05:18:08
161.35.104.9	attackspam	TCP (SYN) 161.35.104.9:47506 -> port 22, len 48	2020-06-03 04:57:28
200.89.154.99	attackbots	Jun 3 01:56:36 gw1 sshd[15615]: Failed password for root from 200.89.154.99 port 43953 ssh2 ...	2020-06-03 05:09:19
202.70.72.217	attackbotsspam	2020-06-02T14:28:27.553931linuxbox-skyline sshd[95323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.70.72.217 user=root 2020-06-02T14:28:29.809714linuxbox-skyline sshd[95323]: Failed password for root from 202.70.72.217 port 34396 ssh2 ...	2020-06-03 04:53:16
181.174.81.243	attackspam	Jun 2 22:25:09 vpn01 sshd[13649]: Failed password for root from 181.174.81.243 port 55095 ssh2 ...	2020-06-03 04:57:09
85.15.219.229	attackspambots	Jun 2 22:51:48 vps647732 sshd[6010]: Failed password for root from 85.15.219.229 port 46054 ssh2 ...	2020-06-03 05:13:37
110.88.160.179	attackbotsspam	2020-06-02T15:18:55.922148morrigan.ad5gb.com sshd[16541]: Disconnected from authenticating user root 110.88.160.179 port 60918 [preauth] 2020-06-02T15:27:52.246619morrigan.ad5gb.com sshd[16748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.88.160.179 user=root 2020-06-02T15:27:54.030731morrigan.ad5gb.com sshd[16748]: Failed password for root from 110.88.160.179 port 41400 ssh2	2020-06-03 05:10:20
1.203.115.141	attack	Jun 2 20:28:17 scw-6657dc sshd[25835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.203.115.141 user=root Jun 2 20:28:17 scw-6657dc sshd[25835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.203.115.141 user=root Jun 2 20:28:19 scw-6657dc sshd[25835]: Failed password for root from 1.203.115.141 port 43464 ssh2 ...	2020-06-03 04:59:12
58.213.198.74	attack	Jun 2 22:24:41 sip sshd[512331]: Failed password for root from 58.213.198.74 port 7676 ssh2 Jun 2 22:28:24 sip sshd[512397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.198.74 user=root Jun 2 22:28:26 sip sshd[512397]: Failed password for root from 58.213.198.74 port 7677 ssh2 ...	2020-06-03 04:55:32

Recently Reported IPs

192.126.160.129	42.213.249.166	14.236.147.6	49.15.48.90
159.65.155.255	71.70.185.44	216.118.217.82	70.118.110.194
196.179.246.54	185.106.211.101	89.196.117.114	178.216.100.12
116.247.81.100	210.145.151.127	201.147.167.63	79.33.159.239
130.36.222.200	170.86.33.179	154.50.77.65	186.140.202.23