{"country_code":"BG","statistics":{"total_reports":542699,"unique_ips":18745,"first_seen":"2023-04-08T09:24:50","last_seen":"2026-07-08T01:20:02.870422","unique_categories":15,"reports_24h":2736,"unique_ips_24h":837},"categories":[{"category":"suspicious_activity","count":12500,"unique_ips":1513},{"category":"ssh_bruteforce","count":6874,"unique_ips":128},{"category":"severe_abuse","count":3910,"unique_ips":330},{"category":"moderate_threat","count":988,"unique_ips":152},{"category":"generic_bruteforce","count":942,"unique_ips":26},{"category":"high_threat","count":567,"unique_ips":89},{"category":"professional_threat","count":67,"unique_ips":12},{"category":"web_attack","count":38,"unique_ips":26},{"category":"web_scanner","count":25,"unique_ips":24},{"category":"repeat_offender","count":18,"unique_ips":8},{"category":"botnet_c2","count":13,"unique_ips":1},{"category":"malware_c2","count":12,"unique_ips":7},{"category":"bot-scan","count":6,"unique_ips":2},{"category":"ddos","count":5,"unique_ips":4},{"category":"tcp_scan","count":4,"unique_ips":4},{"category":"rdp_bruteforce","count":2,"unique_ips":2},{"category":"email_abuse","count":2,"unique_ips":1},{"category":"spam","count":1,"unique_ips":1}],"severity_distribution":[{"severity":"critical","count":65845},{"severity":"high","count":193947},{"severity":"medium","count":40223},{"severity":"low","count":242684}],"time_series":[{"date":"2026-03-02","reports":25,"unique_ips":8},{"date":"2026-03-03","reports":99,"unique_ips":32},{"date":"2026-03-04","reports":95,"unique_ips":31},{"date":"2026-03-05","reports":76,"unique_ips":22},{"date":"2026-03-06","reports":110,"unique_ips":33},{"date":"2026-03-07","reports":78,"unique_ips":23},{"date":"2026-03-08","reports":74,"unique_ips":21},{"date":"2026-03-09","reports":70,"unique_ips":19},{"date":"2026-03-10","reports":68,"unique_ips":22},{"date":"2026-03-11","reports":333,"unique_ips":275},{"date":"2026-03-12","reports":69,"unique_ips":23},{"date":"2026-03-13","reports":88,"unique_ips":31},{"date":"2026-03-14","reports":174,"unique_ips":54},{"date":"2026-03-15","reports":106,"unique_ips":36},{"date":"2026-03-16","reports":84,"unique_ips":28},{"date":"2026-03-17","reports":98,"unique_ips":32},{"date":"2026-03-18","reports":89,"unique_ips":32},{"date":"2026-03-19","reports":98,"unique_ips":31},{"date":"2026-03-20","reports":7099,"unique_ips":3553},{"date":"2026-03-21","reports":79,"unique_ips":26},{"date":"2026-03-22","reports":87,"unique_ips":22},{"date":"2026-03-23","reports":78,"unique_ips":19},{"date":"2026-03-24","reports":85,"unique_ips":21},{"date":"2026-03-25","reports":88,"unique_ips":24},{"date":"2026-03-26","reports":89,"unique_ips":25},{"date":"2026-03-27","reports":103,"unique_ips":30},{"date":"2026-03-28","reports":861,"unique_ips":281},{"date":"2026-03-29","reports":383,"unique_ips":292},{"date":"2026-03-30","reports":105,"unique_ips":41},{"date":"2026-03-31","reports":110,"unique_ips":31},{"date":"2026-04-01","reports":57,"unique_ips":23}],"top_ips":[{"ip_address":"195.178.110.30","report_count":1615,"categories":["generic_bruteforce","ssh_bruteforce",null],"last_seen":"2026-07-07T20:51:07.912794"},{"ip_address":"94.156.152.234","report_count":428,"categories":[null],"last_seen":"2026-07-07T20:50:34.310058"},{"ip_address":"195.178.110.135","report_count":417,"categories":[null],"last_seen":"2026-07-07T20:51:07.913354"},{"ip_address":"195.178.110.204","report_count":407,"categories":[null],"last_seen":"2026-07-07T20:51:07.913563"},{"ip_address":"78.142.18.172","report_count":405,"categories":["web_scanner",null],"last_seen":"2026-07-07T20:50:29.951251"},{"ip_address":"87.121.69.138","report_count":405,"categories":["ssh_bruteforce",null],"last_seen":"2026-07-07T20:50:31.469419"},{"ip_address":"195.178.110.199","report_count":401,"categories":["repeat_offender","tcp_scan","web_attack","web_scanner",null],"last_seen":"2026-07-07T20:51:07.913531"},{"ip_address":"91.92.199.36","report_count":401,"categories":["generic_bruteforce","ssh_bruteforce",null],"last_seen":"2026-07-07T20:50:32.978722"},{"ip_address":"78.142.18.40","report_count":395,"categories":["web_attack",null],"last_seen":"2026-07-07T20:50:29.951228"},{"ip_address":"185.255.212.178","report_count":395,"categories":[null],"last_seen":"2026-07-07T20:51:03.961522"},{"ip_address":"195.178.110.26","report_count":395,"categories":["generic_bruteforce","ssh_bruteforce",null],"last_seen":"2026-07-07T20:51:07.912743"},{"ip_address":"151.237.115.208","report_count":394,"categories":[null],"last_seen":"2026-07-07T20:50:50.980092"},{"ip_address":"95.87.248.223","report_count":393,"categories":[null],"last_seen":"2026-07-07T20:50:34.319644"},{"ip_address":"94.156.152.18","report_count":391,"categories":[null],"last_seen":"2026-07-07T20:50:34.309876"},{"ip_address":"151.237.115.206","report_count":390,"categories":[null],"last_seen":"2026-07-07T20:50:50.980072"},{"ip_address":"78.128.113.46","report_count":388,"categories":[null],"last_seen":"2026-07-07T20:50:29.950400"},{"ip_address":"91.191.209.9","report_count":388,"categories":[null],"last_seen":"2026-07-07T20:50:32.984146"},{"ip_address":"195.178.110.157","report_count":387,"categories":["tcp_scan","web_scanner",null],"last_seen":"2026-07-07T20:51:07.913432"},{"ip_address":"195.178.110.108","report_count":384,"categories":["ddos","web_attack",null],"last_seen":"2026-07-07T20:51:07.913249"},{"ip_address":"62.182.118.138","report_count":384,"categories":[null],"last_seen":"2026-07-07T20:50:26.070819"}]}