Bulgaria (BG) Threat Intelligence

BG

Bulgaria has 18,723 malicious IP addresses with 539,952 abuse reports. Top threat categories include suspicious activity, ssh bruteforce, severe abuse, moderate threat, generic bruteforce. Top attacking networks: Tamatiya EOOD (1,892 IPs), ColocaTel Inc. (1,107 IPs), Vivacom Bulgaria EAD (988 IPs). Data collected since 2023-04-08, last activity 2026-07-06.

Threat Assessment: Bulgaria shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, ssh bruteforce, severe abuse. The majority of threats originate from networks operated by Tamatiya EOOD and ColocaTel Inc..

Total Reports
539,952
Unique IPs
18,723
First Seen
2023-04-08
Last Activity
2026-07-06

Top Threat Categories

Suspicious Activity 12,500
Ssh Bruteforce 6,858
Severe Abuse 3,910
Moderate Threat 988
Generic Bruteforce 939

Top Attacking Networks

AS50360 Tamatiya EOOD
1,892 IPs
AS213438 ColocaTel Inc.
1,107 IPs
AS8866 Vivacom Bulgaria EAD
988 IPs

Most Reported IPs in Bulgaria

195.178.110.30 1,610 reports
94.156.152.234 422 reports
195.178.110.135 412 reports
195.178.110.204 402 reports
78.142.18.172 399 reports

Access this data via API

Get Bulgaria threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/BG

View full API documentation

See how we classify and verify threats →

Check any IP from Bulgaria

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS50360 Intelligence AS213438 Intelligence AS8866 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...