85.29.202.75 - IPInfo

Basic Info

City: Tallinn

Region: Harju County

Country: Estonia

Internet Service Provider: Telia

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.29.202.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62578
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;85.29.202.75.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 15:26:42 CST 2025
;; MSG SIZE  rcvd: 105

Host info

75.202.29.85.in-addr.arpa domain name pointer 75-202-29-85.dyn.estpak.ee.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
75.202.29.85.in-addr.arpa	name = 75-202-29-85.dyn.estpak.ee.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.175.93.23	attackbots	05/05/2020-01:10:48.817334 185.175.93.23 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-05 13:30:07
144.91.125.197	attackbots	20 attempts against mh-misbehave-ban on twig	2020-05-05 14:03:17
118.24.89.243	attack	May 5 03:32:37 web01 sshd[12822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.89.243 May 5 03:32:40 web01 sshd[12822]: Failed password for invalid user logstash from 118.24.89.243 port 41714 ssh2 ...	2020-05-05 13:51:22
86.145.43.197	attackspam	Automatic report - Port Scan Attack	2020-05-05 14:06:58
203.0.109.61	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-05-05 13:53:45
45.168.148.26	attackbotsspam	Lines containing failures of 45.168.148.26 May 4 01:45:30 shared01 sshd[24691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.168.148.26 user=r.r May 4 01:45:33 shared01 sshd[24691]: Failed password for r.r from 45.168.148.26 port 51070 ssh2 May 4 01:45:33 shared01 sshd[24691]: Received disconnect from 45.168.148.26 port 51070:11: Bye Bye [preauth] May 4 01:45:33 shared01 sshd[24691]: Disconnected from authenticating user r.r 45.168.148.26 port 51070 [preauth] May 4 02:00:24 shared01 sshd[29619]: Invalid user dqq from 45.168.148.26 port 50501 May 4 02:00:24 shared01 sshd[29619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.168.148.26 May 4 02:00:26 shared01 sshd[29619]: Failed password for invalid user dqq from 45.168.148.26 port 50501 ssh2 May 4 02:00:26 shared01 sshd[29619]: Received disconnect from 45.168.148.26 port 50501:11: Bye Bye [preauth] May 4 02:00:26 shared01 ........ ------------------------------	2020-05-05 13:54:39
51.75.78.128	attack	May 5 07:14:46 v22018086721571380 sshd[12617]: Failed password for invalid user admin from 51.75.78.128 port 52064 ssh2	2020-05-05 14:01:07
174.219.11.91	attack	Brute forcing email accounts	2020-05-05 13:50:10
51.77.148.77	attackbots	May 5 05:30:11 scw-6657dc sshd[22366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.148.77 May 5 05:30:11 scw-6657dc sshd[22366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.148.77 May 5 05:30:13 scw-6657dc sshd[22366]: Failed password for invalid user admin from 51.77.148.77 port 57016 ssh2 ...	2020-05-05 13:44:01
117.102.75.62	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-05-05 13:58:26
178.62.118.53	attack	Brute-force attempt banned	2020-05-05 13:55:35
37.187.100.50	attack	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "git" at 2020-05-05T05:25:41Z	2020-05-05 13:42:28
138.68.250.76	attack	Port scan(s) denied	2020-05-05 14:07:51
185.234.218.249	attackbots	May 05 06:13:12 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=185.234.218.249, lip=192.168.100.101, session=\\ May 05 06:13:17 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=185.234.218.249, lip=192.168.100.101, session=\<2rag3d6kDgC56tr5\>\ May 05 06:13:21 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=185.234.218.249, lip=192.168.100.101, session=\\ May 05 06:13:28 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 10 secs\): user=\, method=PLAIN, rip=185.234.218.249, lip=192.168.100.101, session=\<7swL3t6knAC56tr5\>\ May 05 06:13:32 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 10 secs\): user=\, method=PLAIN, rip=185.234.218.249, lip=192.168.100.101, session=\	2020-05-05 13:48:29
103.1.239.135	attackspam	CMS (WordPress or Joomla) login attempt.	2020-05-05 14:01:49

Recently Reported IPs

254.233.129.223	115.71.65.27	159.159.69.124	66.49.104.99
71.163.196.246	53.167.126.183	50.97.27.85	119.254.179.248
128.88.81.59	219.119.168.123	28.227.32.91	72.37.224.107
131.118.118.32	73.219.214.63	143.175.11.116	20.226.39.124
35.200.24.130	203.3.175.83	168.240.17.159	134.133.215.118