Bulgaria (BG) Threat Intelligence

Bulgaria has 9,600 malicious IP addresses with 327,606 abuse reports. Top threat categories include ssh bruteforce, generic bruteforce, web attack, web scanner, repeat offender. Top attacking networks: Tamatiya EOOD (1,068 IPs), ColocaTel Inc. (1,045 IPs), Vivacom Bulgaria EAD (531 IPs). Data collected since 2023-04-08, last activity 2026-04-16.

Threat Assessment: Bulgaria exhibits moderate cyber threat activity, with a notable number of malicious IPs across multiple attack categories. The dominant attack types are ssh bruteforce, generic bruteforce, web attack. The majority of threats originate from networks operated by Tamatiya EOOD and ColocaTel Inc..