82.137.89.244

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
79% Critical
18 reports
14 reporters · latest 3 hours ago
ISP
Bulgarian Telecommunications Company Plc
Usage Type
Fixed Line ISP
ASN
AS8866
Hostname(s)
82-137-89-244.ip.btc-net.bg
Domain Name
vivacom.bg
Country
🇧🇬 Bulgaria
City
Sofia, Sofia-Capital
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
18 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 8 🇫🇷 France 7 🇩🇪 Germany 1
Most common categories Port Scan 9 Web App Attack 6 Brute-Force 6 Email Spam 3 Bad Web Bot 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/3306 (MySQL); 4 application-level events across 4 source port(s). Sensor(s): Dionaea.
Port Scan
🇫🇷 pm33
Probing for resource vulnerabilities HTTP(S)
Web App Attack
Anonymous
Reported from Nginx log analysis 19. Log: 82.137.89.244 - - [07/Nov/2026:xx:xx:xx 0100] "\x06" xxx xxx "-" "-" "-" "BG Bulgaria Haskovo" "AS8866" "Vivacom Bulgaria EAD"
Port Scan Brute-Force SSH
🇺🇸 HamSammich
Automated sensor: 12 SMTP-AUTH, SMTP-submission brute-force attempts over the last 24h (latest 2026-11-07T03:13Z).
Email Spam Brute-Force
🇺🇸 k3rn3l109
Sentinel honeypot: opencanary-redis hit on fake Redis service (server-01-CA) UA=opencanary
Port Scan Hacking
🇫🇷 raid3n09
Automated malicious scan and unauthorized access attempt blocked.
Brute-Force Bad Web Bot Web App Attack
🇫🇷 thecocasio
PortSentry honeypot: unsolicited TCP connection to closed decoy port 5432 (PostgreSQL) on a host running no such service. Automated port-scan detection at 2026-11-06T18:57:52Z.
Port Scan
🇫🇮 23p02732
Mailserver and mailaccount attacks
Brute-Force Bad Web Bot Exploited Host Web App Attack
🇮🇳 Open Code
[acnfplwa] honeypot: honeypot 5x hits on SSH (jail=honeypot, score=24) (via honeypot)
Brute-Force SSH
🇺🇸 donarev419
Port scan detected on port 587 (connection without data transfer)
Port Scan
🇺🇸 donarev419
Port scan detected on port 6060 (connection without data transfer)
Port Scan
🇺🇸 ShadowWhisperer
SMB port scan / probe. no data
Port Scan Hacking
🇺🇸 Phil Schuyler
Repeated probing against public honeypot services: 6 observed events targeting SSH/TELNET/2222.
Port Scan
🇺🇸 NXTwoThou
Verb
Web App Attack
Anonymous
postfix
Email Spam Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 192.169.232.223
🇮🇳 182.76.115.214
🇺🇸 135.84.220.230
🇺🇸 104.206.128.50
🇧🇬 91.148.190.150
🇺🇦 88.218.181.70
🇮🇶 65.20.138.46
🇧🇷 45.226.5.13
🇳🇱 45.148.10.152
🇺🇸 45.41.86.226
🇨🇳 27.0.135.12
🇬🇧 216.226.76.10
🇮🇳 182.95.181.26
🇸🇬 143.198.213.231
🇧🇴 190.129.101.53
🇩🇪 167.94.145.29
🇧🇷 138.122.55.74
🇵🇱 109.196.43.184
🇩🇪 69.5.169.175
🇧🇷 45.229.91.2
feedback