{"country_code":"BG","statistics":{"total_reports":332278,"unique_ips":10126,"first_seen":"2023-04-08T09:24:50","last_seen":"2026-04-07T12:15:26.000125","unique_categories":15,"reports_24h":96,"unique_ips_24h":26},"categories":[{"category":"suspicious_activity","count":12500,"unique_ips":1513},{"category":"ssh_bruteforce","count":5609,"unique_ips":59},{"category":"severe_abuse","count":3910,"unique_ips":330},{"category":"moderate_threat","count":988,"unique_ips":152},{"category":"generic_bruteforce","count":605,"unique_ips":8},{"category":"high_threat","count":567,"unique_ips":89},{"category":"professional_threat","count":67,"unique_ips":12},{"category":"repeat_offender","count":13,"unique_ips":3},{"category":"botnet_c2","count":13,"unique_ips":1},{"category":"malware_c2","count":12,"unique_ips":7},{"category":"web_attack","count":7,"unique_ips":5},{"category":"bot-scan","count":6,"unique_ips":2},{"category":"ddos","count":3,"unique_ips":3},{"category":"rdp_bruteforce","count":2,"unique_ips":2},{"category":"email_abuse","count":2,"unique_ips":1}],"severity_distribution":[{"severity":"critical","count":63727},{"severity":"high","count":30484},{"severity":"medium","count":32658},{"severity":"low","count":205409}],"time_series":[{"date":"2026-03-02","reports":25,"unique_ips":8},{"date":"2026-03-03","reports":99,"unique_ips":32},{"date":"2026-03-04","reports":95,"unique_ips":31},{"date":"2026-03-05","reports":76,"unique_ips":22},{"date":"2026-03-06","reports":110,"unique_ips":33},{"date":"2026-03-07","reports":78,"unique_ips":23},{"date":"2026-03-08","reports":74,"unique_ips":21},{"date":"2026-03-09","reports":70,"unique_ips":19},{"date":"2026-03-10","reports":68,"unique_ips":22},{"date":"2026-03-11","reports":333,"unique_ips":275},{"date":"2026-03-12","reports":69,"unique_ips":23},{"date":"2026-03-13","reports":88,"unique_ips":31},{"date":"2026-03-14","reports":174,"unique_ips":54},{"date":"2026-03-15","reports":106,"unique_ips":36},{"date":"2026-03-16","reports":84,"unique_ips":28},{"date":"2026-03-17","reports":98,"unique_ips":32},{"date":"2026-03-18","reports":89,"unique_ips":32},{"date":"2026-03-19","reports":98,"unique_ips":31},{"date":"2026-03-20","reports":7099,"unique_ips":3553},{"date":"2026-03-21","reports":79,"unique_ips":26},{"date":"2026-03-22","reports":87,"unique_ips":22},{"date":"2026-03-23","reports":78,"unique_ips":19},{"date":"2026-03-24","reports":85,"unique_ips":21},{"date":"2026-03-25","reports":88,"unique_ips":24},{"date":"2026-03-26","reports":89,"unique_ips":25},{"date":"2026-03-27","reports":103,"unique_ips":30},{"date":"2026-03-28","reports":861,"unique_ips":281},{"date":"2026-03-29","reports":383,"unique_ips":292},{"date":"2026-03-30","reports":105,"unique_ips":41},{"date":"2026-03-31","reports":110,"unique_ips":31},{"date":"2026-04-01","reports":57,"unique_ips":23}],"top_ips":[{"ip_address":"195.178.110.30","report_count":4218,"categories":["generic_bruteforce","repeat_offender","ssh_bruteforce",null],"last_seen":"2026-04-07T12:34:21.769335"},{"ip_address":"78.128.112.74","report_count":992,"categories":["repeat_offender","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-03-29T13:50:35.568977"},{"ip_address":"195.178.110.15","report_count":487,"categories":["ssh_bruteforce",null],"last_seen":"2026-04-07T12:02:43.726279"},{"ip_address":"93.123.109.38","report_count":392,"categories":["ssh_bruteforce",null],"last_seen":"2026-03-20T03:16:27.945332"},{"ip_address":"212.233.136.201","report_count":255,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-03-25T00:50:51.798548"},{"ip_address":"83.97.24.41","report_count":254,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-04-02T17:13:20.893283"},{"ip_address":"91.92.199.36","report_count":248,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-03-30T11:51:06.146366"},{"ip_address":"213.169.44.220","report_count":243,"categories":["severe_abuse","ssh_bruteforce",null],"last_seen":"2026-03-13T07:54:04.948410"},{"ip_address":"151.237.115.206","report_count":219,"categories":["severe_abuse",null],"last_seen":"2026-01-02T04:00:09.708627"},{"ip_address":"62.182.118.138","report_count":219,"categories":["severe_abuse","ssh_bruteforce",null],"last_seen":"2026-03-20T03:09:41.069566"},{"ip_address":"213.91.179.26","report_count":216,"categories":["severe_abuse",null],"last_seen":"2026-03-20T03:09:21.013124"},{"ip_address":"95.87.248.223","report_count":216,"categories":["severe_abuse","ssh_bruteforce",null],"last_seen":"2026-03-20T03:09:41.019574"},{"ip_address":"78.128.114.122","report_count":214,"categories":["severe_abuse","suspicious_activity",null],"last_seen":"2025-12-20T06:09:51.195702"},{"ip_address":"95.87.213.16","report_count":213,"categories":["severe_abuse",null],"last_seen":"2026-03-20T03:09:31.747901"},{"ip_address":"78.128.114.130","report_count":213,"categories":["severe_abuse",null],"last_seen":"2026-03-20T03:09:40.850399"},{"ip_address":"79.124.40.134","report_count":212,"categories":["severe_abuse",null],"last_seen":"2026-01-03T04:00:12.879056"},{"ip_address":"46.10.56.170","report_count":211,"categories":["severe_abuse",null],"last_seen":"2026-03-20T03:09:21.076259"},{"ip_address":"149.62.239.4","report_count":211,"categories":["moderate_threat","severe_abuse",null],"last_seen":"2026-03-20T03:09:16.334413"},{"ip_address":"185.255.212.178","report_count":211,"categories":["severe_abuse","ssh_bruteforce",null],"last_seen":"2026-04-06T11:15:23.273884"},{"ip_address":"92.62.243.174","report_count":211,"categories":["severe_abuse",null],"last_seen":"2026-03-20T03:09:31.742951"}]}