Bulgaria (BG) Threat Intelligence

Bulgaria has 22,203 malicious IP addresses with 852,029 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, ssh bruteforce. Top attacking networks: Tamatiya EOOD (2,158 IPs), ColocaTel Inc. (1,876 IPs), Vivacom Bulgaria EAD (1,359 IPs). Data collected since 2023-04-08, last activity 2026-10-13.

Threat Assessment: Bulgaria shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Tamatiya EOOD and ColocaTel Inc..