{"country_code":"BG","statistics":{"total_reports":852155,"unique_ips":22211,"first_seen":"2023-04-08T09:24:50","last_seen":"2026-10-13T04:47:57.263868","unique_categories":18,"reports_24h":4246,"unique_ips_24h":1658},"categories":[{"category":"tcp_scan","count":142428,"unique_ips":2101},{"category":"suspicious_activity","count":72751,"unique_ips":5153},{"category":"high_threat","count":61193,"unique_ips":1102},{"category":"malware_distribution","count":20923,"unique_ips":1324},{"category":"ssh_bruteforce","count":10778,"unique_ips":482},{"category":"severe_abuse","count":3910,"unique_ips":330},{"category":"intrusion_attempt","count":2703,"unique_ips":1795},{"category":"moderate_threat","count":2485,"unique_ips":1636},{"category":"generic_bruteforce","count":2202,"unique_ips":710},{"category":"malware_c2","count":2030,"unique_ips":110},{"category":"spam","count":1465,"unique_ips":566},{"category":"web_attack","count":771,"unique_ips":299},{"category":"botnet_c2","count":103,"unique_ips":12},{"category":"sip_bruteforce","count":92,"unique_ips":92},{"category":"professional_threat","count":67,"unique_ips":12},{"category":"ddos","count":58,"unique_ips":32},{"category":"repeat_offender","count":49,"unique_ips":26},{"category":"proxy_abuse","count":32,"unique_ips":24},{"category":"web_scanner","count":26,"unique_ips":24},{"category":"bot-scan","count":6,"unique_ips":2}],"severity_distribution":[{"severity":"critical","count":121420},{"severity":"high","count":360821},{"severity":"medium","count":72741},{"severity":"low","count":297173}],"time_series":[{"date":"2026-09-13","reports":3870,"unique_ips":1172},{"date":"2026-09-14","reports":5547,"unique_ips":1079},{"date":"2026-09-15","reports":5432,"unique_ips":1098},{"date":"2026-09-16","reports":5463,"unique_ips":1098},{"date":"2026-09-17","reports":5593,"unique_ips":1117},{"date":"2026-09-18","reports":5734,"unique_ips":1112},{"date":"2026-09-19","reports":5912,"unique_ips":1123},{"date":"2026-09-20","reports":5387,"unique_ips":1125},{"date":"2026-09-21","reports":3535,"unique_ips":1108},{"date":"2026-09-22","reports":3828,"unique_ips":1346},{"date":"2026-09-23","reports":3689,"unique_ips":1125},{"date":"2026-09-24","reports":4249,"unique_ips":1125},{"date":"2026-09-25","reports":3729,"unique_ips":1134},{"date":"2026-09-26","reports":3631,"unique_ips":1101},{"date":"2026-09-27","reports":3633,"unique_ips":1100},{"date":"2026-09-28","reports":3587,"unique_ips":1133},{"date":"2026-09-29","reports":3972,"unique_ips":1147},{"date":"2026-09-30","reports":3883,"unique_ips":1160},{"date":"2026-10-01","reports":4082,"unique_ips":1577},{"date":"2026-10-02","reports":3991,"unique_ips":1402},{"date":"2026-10-03","reports":4936,"unique_ips":1609},{"date":"2026-10-04","reports":4340,"unique_ips":1845},{"date":"2026-10-05","reports":4325,"unique_ips":1429},{"date":"2026-10-06","reports":4117,"unique_ips":1432},{"date":"2026-10-07","reports":4047,"unique_ips":1456},{"date":"2026-10-08","reports":3899,"unique_ips":1424},{"date":"2026-10-09","reports":3913,"unique_ips":1467},{"date":"2026-10-10","reports":4127,"unique_ips":1716},{"date":"2026-10-11","reports":3972,"unique_ips":1439},{"date":"2026-10-12","reports":4327,"unique_ips":1681}],"top_ips":[{"ip_address":"195.178.110.30","report_count":5714,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T02:50:44.443611"},{"ip_address":"5.188.206.30","report_count":1848,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:49:07.266872"},{"ip_address":"79.124.62.178","report_count":1794,"categories":["high_threat","intrusion_attempt","malware_distribution","moderate_threat","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:43:36.635325"},{"ip_address":"78.128.113.46","report_count":1724,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:50:32.266920"},{"ip_address":"5.188.206.34","report_count":1723,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:22:32.263881"},{"ip_address":"91.191.209.98","report_count":1722,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:37:42.263888"},{"ip_address":"91.191.209.118","report_count":1716,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:34:12.266959"},{"ip_address":"78.128.112.6","report_count":1715,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:34:27.263878"},{"ip_address":"78.128.112.30","report_count":1714,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:30:57.266197"},{"ip_address":"91.191.209.46","report_count":1711,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:50:07.263876"},{"ip_address":"78.128.113.22","report_count":1700,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:48:17.263866"},{"ip_address":"78.128.113.74","report_count":1695,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:42:57.266937"},{"ip_address":"78.128.114.174","report_count":1644,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:31:17.266960"},{"ip_address":"79.124.62.230","report_count":1620,"categories":["high_threat","malware_distribution","moderate_threat","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:50:07.263876"},{"ip_address":"79.124.62.134","report_count":1605,"categories":["high_threat","malware_distribution","moderate_threat","repeat_offender","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:52:52.263879"},{"ip_address":"93.123.109.6","report_count":1579,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T03:40:46.742888"},{"ip_address":"91.92.199.36","report_count":1570,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-13T04:30:47.263973"},{"ip_address":"79.124.62.126","report_count":1566,"categories":["high_threat","malware_distribution","moderate_threat","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:47:57.263868"},{"ip_address":"79.124.59.78","report_count":1557,"categories":["high_threat","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:40:47.263876"},{"ip_address":"78.128.114.162","report_count":1490,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-13T04:18:07.263869"}]}