{"country_code":"BG","statistics":{"total_reports":847912,"unique_ips":22191,"first_seen":"2023-04-08T09:24:50","last_seen":"2026-10-12T04:47:39.507865","unique_categories":18,"reports_24h":3940,"unique_ips_24h":1428},"categories":[{"category":"tcp_scan","count":141443,"unique_ips":2094},{"category":"suspicious_activity","count":71566,"unique_ips":5145},{"category":"high_threat","count":59500,"unique_ips":1098},{"category":"malware_distribution","count":20682,"unique_ips":1323},{"category":"ssh_bruteforce","count":10755,"unique_ips":478},{"category":"severe_abuse","count":3910,"unique_ips":330},{"category":"intrusion_attempt","count":2681,"unique_ips":1780},{"category":"moderate_threat","count":2483,"unique_ips":1634},{"category":"generic_bruteforce","count":2194,"unique_ips":704},{"category":"malware_c2","count":1974,"unique_ips":109},{"category":"spam","count":1445,"unique_ips":560},{"category":"web_attack","count":760,"unique_ips":294},{"category":"botnet_c2","count":103,"unique_ips":12},{"category":"sip_bruteforce","count":87,"unique_ips":87},{"category":"professional_threat","count":67,"unique_ips":12},{"category":"ddos","count":58,"unique_ips":32},{"category":"repeat_offender","count":49,"unique_ips":26},{"category":"proxy_abuse","count":32,"unique_ips":24},{"category":"web_scanner","count":26,"unique_ips":24},{"category":"bot-scan","count":6,"unique_ips":2}],"severity_distribution":[{"severity":"critical","count":119933},{"severity":"high","count":359733},{"severity":"medium","count":72133},{"severity":"low","count":296113}],"time_series":[{"date":"2026-09-12","reports":3721,"unique_ips":1001},{"date":"2026-09-13","reports":3870,"unique_ips":1172},{"date":"2026-09-14","reports":5547,"unique_ips":1079},{"date":"2026-09-15","reports":5432,"unique_ips":1098},{"date":"2026-09-16","reports":5463,"unique_ips":1098},{"date":"2026-09-17","reports":5593,"unique_ips":1117},{"date":"2026-09-18","reports":5734,"unique_ips":1112},{"date":"2026-09-19","reports":5912,"unique_ips":1123},{"date":"2026-09-20","reports":5387,"unique_ips":1125},{"date":"2026-09-21","reports":3535,"unique_ips":1108},{"date":"2026-09-22","reports":3828,"unique_ips":1346},{"date":"2026-09-23","reports":3689,"unique_ips":1125},{"date":"2026-09-24","reports":4249,"unique_ips":1125},{"date":"2026-09-25","reports":3729,"unique_ips":1134},{"date":"2026-09-26","reports":3631,"unique_ips":1101},{"date":"2026-09-27","reports":3633,"unique_ips":1100},{"date":"2026-09-28","reports":3587,"unique_ips":1133},{"date":"2026-09-29","reports":3972,"unique_ips":1147},{"date":"2026-09-30","reports":3883,"unique_ips":1160},{"date":"2026-10-01","reports":4082,"unique_ips":1577},{"date":"2026-10-02","reports":3991,"unique_ips":1402},{"date":"2026-10-03","reports":4936,"unique_ips":1609},{"date":"2026-10-04","reports":4340,"unique_ips":1845},{"date":"2026-10-05","reports":4325,"unique_ips":1429},{"date":"2026-10-06","reports":4117,"unique_ips":1432},{"date":"2026-10-07","reports":4047,"unique_ips":1456},{"date":"2026-10-08","reports":3899,"unique_ips":1424},{"date":"2026-10-09","reports":3913,"unique_ips":1467},{"date":"2026-10-10","reports":4127,"unique_ips":1716},{"date":"2026-10-11","reports":3972,"unique_ips":1439}],"top_ips":[{"ip_address":"195.178.110.30","report_count":5687,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T03:09:27.851435"},{"ip_address":"5.188.206.30","report_count":1817,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T04:27:29.509417"},{"ip_address":"79.124.62.178","report_count":1759,"categories":["high_threat","intrusion_attempt","malware_distribution","moderate_threat","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T04:42:59.507885"},{"ip_address":"5.188.206.34","report_count":1695,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T04:24:29.507891"},{"ip_address":"78.128.113.46","report_count":1694,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T04:47:14.509408"},{"ip_address":"78.128.112.6","report_count":1689,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T04:49:14.509387"},{"ip_address":"91.191.209.98","report_count":1689,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T04:40:39.509408"},{"ip_address":"91.191.209.118","report_count":1688,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T04:52:49.509342"},{"ip_address":"78.128.112.30","report_count":1685,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T03:48:07.887059"},{"ip_address":"91.191.209.46","report_count":1685,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T04:51:29.507876"},{"ip_address":"78.128.113.22","report_count":1673,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T04:49:49.507876"},{"ip_address":"78.128.113.74","report_count":1667,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T04:51:44.507875"},{"ip_address":"78.128.114.174","report_count":1617,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T04:46:49.509400"},{"ip_address":"79.124.62.230","report_count":1587,"categories":["high_threat","malware_distribution","moderate_threat","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T04:43:04.507925"},{"ip_address":"79.124.62.134","report_count":1571,"categories":["high_threat","malware_distribution","moderate_threat","repeat_offender","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T03:51:12.883879"},{"ip_address":"93.123.109.6","report_count":1568,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T04:00:58.918266"},{"ip_address":"91.92.199.36","report_count":1544,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-12T04:22:59.509350"},{"ip_address":"79.124.62.126","report_count":1540,"categories":["high_threat","malware_distribution","moderate_threat","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T04:52:34.509405"},{"ip_address":"79.124.59.78","report_count":1531,"categories":["high_threat","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-12T04:52:49.509342"},{"ip_address":"78.128.114.162","report_count":1462,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-12T04:44:09.509411"}]}