Bulgaria (BG)
Country threat intelligence — currently active blacklist entries cross-referenced against the ipinsights.io sensor network.
Blacklisted IPs
1,336
Distinct IPs currently on at least one active blacklist.
Most recent listing
Timestamp of the freshest active listing from this country. All times UTC, ISO 8601.
Dominant category
malicious
· 889 IPs
Most common blacklist category observed across IPs from this country.
Category breakdown
| Category | Distinct IPs | Share |
|---|---|---|
| malicious | 889 | 66.5% |
| Network Attack | 842 | 63.0% |
| bruteforce | 167 | 12.5% |
| tor_exit | 47 | 3.5% |
| malware | 23 | 1.7% |
| SSH/Telnet Brute Force | 22 | 1.6% |
| HTTP Probe | 11 | 0.8% |
| VoIP / SIP Probe | 11 | 0.8% |
| spam | 10 | 0.7% |
| compromised | 2 | 0.1% |
| attackers | 1 | 0.1% |
Recently listed IPs from Bulgaria
Most recent 50 of 1,336 currently-active blacklisted IPs, newest first.
| IP | Category | Source | Listed at |
|---|---|---|---|
| 94.26.68.6 | malicious | ipsum | |
| 79.124.40.162 | Network Attack | Malicious Outgoing IP | |
| 79.124.58.246 | Network Attack | Malicious Outgoing IP | |
| 109.160.32.161 | Network Attack | Malicious IP | |
| 79.124.59.106 | Network Attack | Malicious Outgoing IP | |
| 109.160.32.174 | Network Attack | Malicious IP | |
| 109.160.32.177 | Network Attack | Malicious IP | |
| 213.167.24.130 | SSH/Telnet Brute Force | IPInsights Honeypot | |
| 109.160.32.155 | SSH/Telnet Brute Force | Malicious IP | |
| 78.128.114.22 | Network Attack | Malicious Outgoing IP | |
| 93.152.233.40 | Network Attack | Malicious IP | |
| 109.160.32.135 | SSH/Telnet Brute Force | Malicious IP | |
| 87.121.13.28 | Network Attack | IPInsights Honeypot | |
| 164.138.221.78 | Network Attack | IPInsights Honeypot | |
| 176.12.3.117 | Network Attack | IPInsights Honeypot | |
| 194.68.225.80 | Network Attack | IPInsights Honeypot | |
| 87.121.103.176 | Network Attack | IPInsights Honeypot | |
| 109.160.32.133 | SSH/Telnet Brute Force | Malicious IP | |
| 45.9.156.183 | tor_exit | ipsum | |
| 109.160.32.165 | SSH/Telnet Brute Force | Malicious IP | |
| 109.160.32.36 | SSH/Telnet Brute Force | Malicious IP | |
| 95.43.75.2 | malicious | Malicious Outgoing IP | |
| 109.160.32.131 | SSH/Telnet Brute Force | Malicious IP | |
| 94.26.88.81 | Network Attack | ipsum | |
| 109.160.32.158 | Network Attack | Malicious IP | |
| 94.156.152.7 | Network Attack | ThreatFox IOC IPs | |
| 212.233.153.35 | Network Attack | IPInsights Honeypot | |
| 109.160.32.113 | SSH/Telnet Brute Force | Malicious IP | |
| 109.160.32.149 | Network Attack | Malicious IP | |
| 109.160.32.121 | Network Attack | Malicious IP | |
| 109.160.32.124 | Network Attack | Malicious IP | |
| 185.98.132.248 | Network Attack | IPInsights Honeypot | |
| 194.180.49.242 | malicious | ipsum | |
| 85.217.168.19 | SSH/Telnet Brute Force | IPInsights Honeypot | |
| 109.160.32.103 | SSH/Telnet Brute Force | Malicious IP | |
| 89.253.170.165 | Network Attack | IPInsights Honeypot | |
| 212.70.140.18 | Network Attack | IPInsights Honeypot | |
| 91.92.68.86 | malicious | Malicious Outgoing IP | |
| 158.173.89.50 | SSH/Telnet Brute Force | IPInsights Honeypot | |
| 79.124.58.162 | Network Attack | Malicious IP | |
| 109.160.32.172 | Network Attack | Malicious IP | |
| 109.160.32.138 | Network Attack | Malicious IP | |
| 91.196.225.242 | Network Attack | Malicious Outgoing IP | |
| 109.160.32.180 | Network Attack | Malicious IP | |
| 93.123.109.247 | malicious | Malicious IP | |
| 109.160.32.146 | Network Attack | Malicious IP | |
| 85.11.167.105 | malware | ThreatFox IOC IPs | |
| 91.92.41.187 | Network Attack | Malicious IP | |
| 78.130.245.153 | malicious | ipsum | |
| 78.128.114.170 | malicious | AbuseIPDB Blocklist 30d |