Bulgaria (BG) Threat Intelligence

Bulgaria has 20,476 malicious IP addresses with 693,649 abuse reports. Top threat categories include suspicious activity, ssh bruteforce, severe abuse, tcp scan, generic bruteforce. Top attacking networks: Tamatiya EOOD (2,154 IPs), ColocaTel Inc. (1,874 IPs), Vivacom Bulgaria EAD (1,208 IPs). Data collected since 2023-04-08, last activity 2026-09-06.

Threat Assessment: Bulgaria shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, ssh bruteforce, severe abuse. The majority of threats originate from networks operated by Tamatiya EOOD and ColocaTel Inc..