DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back

COUNTRY REPORT — Bulgaria · bulgaria

First sighted: June 8, 2023, 3 a.m. · Last sighted: March 2, 2026, 2 a.m.

Risk
100 (high)
Total hits
28716
Total errors
6088
Distinct IPs
9348
Distinct ASNs
264
Country
Bulgaria
Top Org
unknown
Top ASN
AS8866 • Vivacom Bulgaria EAD
Risk Rank
#39 / 208
Geo Coverage
100.0%
Confidence
100/100
Push Alert
Watch
Briefing Notes
  • Bulgaria: risk 100 (high).
  • Risk rank #39 of 208 countries.
  • Coverage 100.0% geolocated, confidence 100/100.
  • Top organization: unknown (4,032 hits).
  • Top ASN: AS8866 (5,580 hits).
  • Push alert posture: Watch (Moderate risk or recent activity).

Risk

Model: v1 Computed: 2026-03-05 19:30:11
Risk score
100
Risk gradient
Key drivers are enriched against the published annotator catalog when available; otherwise sensible defaults are used.
Annotator influence radar
Rendering annotator influence profile…
Normalized contribution (0..1) per annotator versus robust per-code envelope.
Key drivers
Sensitive file probing
Requests target commonly sensitive files, configs, backups, or administrative resources.
sfp
Hits 1261
Points 8285.64
Credential brute forcing
Repeated authentication attempts consistent with password guessing or credential stuffing.
cred
Hits 881
Points 3127.30
Command injection attempts
Request content resembles attempts to execute OS commands via an application.
cmdi
Hits 76
Points 1642.20
Header injection attempts
Input patterns suggest attempts to manipulate headers or downstream header parsing.
hdrinj
Hits 54
Points 1123.20
Path traversal attempts
Request paths/parameters resemble attempts to access files outside intended directories.
trav
Hits 131
Points 937.56
Firewall probing
Traffic behavior suggests probing of access controls and protected surfaces.
fwprobe
Hits 36
Points 426.60
Scan velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
scan_velocity
Hits 229
Points 328.68
User-Agent anomaly
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
ua
Hits 1778
Points 302.12
Request size anomaly
Requests are unusually large or shaped in a way that suggests abuse or automation.
request_size
Hits 421
Points 132.96
HTTP method anomaly
Unusual or unexpected HTTP methods observed for the target endpoints.
method
Hits 104
Points 55.56
Automated client behavior
Traffic patterns strongly suggest automation rather than a human-operated browser.
bot
Hits 22
Points 11.00
Protocol anomaly
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
proto
Hits 11
Points 9.60

Top Organizations Operating In The Country

Most-observed organizations in this country
unknown tamatiya eood bulgarian telecommunications company plc. neterra ltd bulgarian telecommunications company plc surf.net ltd solutions ltd comnet bulgaria holding ltd. netguard ltd. gpon services btc plc a1 bulgaria ead truphone bulgaria yettel bulgaria - public mobile services btc-broadband ultranet ltd a1 bg nbis ltd. vivacom bulgaria ead btc broadband telenor bulgaria ead ipxo escombg telenor bulgaria - public mobile services gprs mobile 4media ltd itd network global communication net plc dynamic pppoe telecabel plc bol bg pon services btc broadband services university of plovdiv paisiy hilendarski a1 bg pld rsbn megalan network ltd. multimedia bg eood optisprint3 gcl m247 ltd

Traffic

Rollup

Daily activity (hits per day) and basic HTTP rollup counters for this country.

Loading activity…
Daily activity (hits per day). Total in window: —.
Traffic rollup
HTTP status classes, URL diversity, and totals.
2xx
13484
3xx
7839
4xx
5454
5xx
634
Unique URLs
0
Total hits
28716
First seen
June 8, 2023, 3 a.m.
Last seen
March 2, 2026, 2 a.m.

HTTP Status Breakdown

Response mix grouped by status class (2xx/3xx/4xx/5xx). Uses totals aggregation and renders a donut.

Loading status mix…
Running one aggregation and rendering the chart.

Geolocation

Live geolocation and map tiles auto-load for this country snapshot (peer IPs with coordinates).

Loading map…

Top Autonomous System Networks

Most-observed networks in this country
AS8866 Vivacom Bulgaria EAD AS50360 Tamatiya EOOD AS29580 A1 Bulgaria EAD AS29244 CETIN Bulgaria EAD AS12716 A1 Bulgaria EAD AS13124 A1 Bulgaria EAD AS29084 ComNet Bulgaria AS39251 NETGUARD LLC AS39184 UltraNET Ltd AS25374 ESCOM Ltd. - Haskovo AS29582 Optisprint OOD AS8717 A1 Bulgaria EAD AS197897 5KOM OOD AS42555 OPTICCOM- BULGARIA Ltd. AS39396 NBI Systems Ltd. AS29030 TELECABEL PLC AS34295 Geo BG Net SPLtd. AS29687 Geodim Ltd. AS9070 Cooolbox AD AS12829 Angel Soft OOD AS198482 Pernik Lan Ltd. AS57344 Telehouse EAD AS29667 Atlantis Net Ltd. AS47402 Multimedia BG EOOD AS34577 SKAT TV Ltd. AS60656 BOL BG IZTOK LTD AS61071 NETBOX LTD AS212023 University of Plovdiv Paisiy Hilendarski AS48917 Optinet Ltd AS51582 Cifrova Kabelna Korporacia EOOD AS12436 Bergon Internet Ltd. AS201005 IT Mania Ltd. AS59466 EuroExpress Ltd. AS62386 Bulgarian Telecommunication Group EOOD AS199173 TechnoLux Ltd. AS16045 BULINFO HOSTING AS198259 ECOM SERVICE AD AS12615 Global Communication Net Plc AS45007 VIPNET PRIM Ltd AS57634 SKAT POPOVO Ltd.