Malicious IPs in Bulgaria

• Brute force sources in Bulgaria

  31 (56%)

  31 flagged networks, #40 of 162 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

• Botnet hosts in Bulgaria

  7 (13%)

  7 flagged networks, #45 of 122 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

• Other malicious networks in Bulgaria

  7 (13%)

  7 flagged networks, #62 of 143 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

• Spam sources in Bulgaria

  5 (9%)

  5 flagged networks, #26 of 89 countries for spam sources. Sources of email spam. Spam Sources by Country

• C2 servers in Bulgaria

  3 (5%)

  3 flagged networks, #25 of 51 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country

• Scanners in Bulgaria

  2 (4%)

  2 flagged networks, #26 of 40 countries for scanners. Hosts scanning or probing services on the internet. Scanners by Country

Questions about Bulgaria

How many malicious IP addresses are there in Bulgaria?

On 2026-10-11, 55 IPv4 networks (/24 blocks) located in Bulgaria were flagged for malicious activity, with 604 listed IPv4 addresses. Each /24 counts once, however many of its addresses are listed.

Which networks in Bulgaria host the most flagged IPs?

VIVACOM-AS Vivacom Bulgaria EAD (AS8866, 7 networks), TAMATIYA-AS Tamatiya EOOD (AS50360, 5 networks), A1BG A1 Bulgaria EAD (AS8717, 3 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.