{"country_code":"BG","statistics":{"total_reports":539954,"unique_ips":18723,"first_seen":"2023-04-08T09:24:50","last_seen":"2026-07-07T00:15:06.454302","unique_categories":15,"reports_24h":7471,"unique_ips_24h":4986},"categories":[{"category":"suspicious_activity","count":12500,"unique_ips":1513},{"category":"ssh_bruteforce","count":6858,"unique_ips":128},{"category":"severe_abuse","count":3910,"unique_ips":330},{"category":"moderate_threat","count":988,"unique_ips":152},{"category":"generic_bruteforce","count":939,"unique_ips":25},{"category":"high_threat","count":567,"unique_ips":89},{"category":"professional_threat","count":67,"unique_ips":12},{"category":"web_attack","count":34,"unique_ips":26},{"category":"web_scanner","count":23,"unique_ips":23},{"category":"repeat_offender","count":18,"unique_ips":8},{"category":"botnet_c2","count":13,"unique_ips":1},{"category":"malware_c2","count":12,"unique_ips":7},{"category":"bot-scan","count":6,"unique_ips":2},{"category":"ddos","count":5,"unique_ips":4},{"category":"tcp_scan","count":4,"unique_ips":4},{"category":"rdp_bruteforce","count":2,"unique_ips":2},{"category":"email_abuse","count":2,"unique_ips":1},{"category":"spam","count":1,"unique_ips":1}],"severity_distribution":[{"severity":"critical","count":65838},{"severity":"high","count":191749},{"severity":"medium","count":40149},{"severity":"low","count":242218}],"time_series":[{"date":"2026-03-02","reports":25,"unique_ips":8},{"date":"2026-03-03","reports":99,"unique_ips":32},{"date":"2026-03-04","reports":95,"unique_ips":31},{"date":"2026-03-05","reports":76,"unique_ips":22},{"date":"2026-03-06","reports":110,"unique_ips":33},{"date":"2026-03-07","reports":78,"unique_ips":23},{"date":"2026-03-08","reports":74,"unique_ips":21},{"date":"2026-03-09","reports":70,"unique_ips":19},{"date":"2026-03-10","reports":68,"unique_ips":22},{"date":"2026-03-11","reports":333,"unique_ips":275},{"date":"2026-03-12","reports":69,"unique_ips":23},{"date":"2026-03-13","reports":88,"unique_ips":31},{"date":"2026-03-14","reports":174,"unique_ips":54},{"date":"2026-03-15","reports":106,"unique_ips":36},{"date":"2026-03-16","reports":84,"unique_ips":28},{"date":"2026-03-17","reports":98,"unique_ips":32},{"date":"2026-03-18","reports":89,"unique_ips":32},{"date":"2026-03-19","reports":98,"unique_ips":31},{"date":"2026-03-20","reports":7099,"unique_ips":3553},{"date":"2026-03-21","reports":79,"unique_ips":26},{"date":"2026-03-22","reports":87,"unique_ips":22},{"date":"2026-03-23","reports":78,"unique_ips":19},{"date":"2026-03-24","reports":85,"unique_ips":21},{"date":"2026-03-25","reports":88,"unique_ips":24},{"date":"2026-03-26","reports":89,"unique_ips":25},{"date":"2026-03-27","reports":103,"unique_ips":30},{"date":"2026-03-28","reports":861,"unique_ips":281},{"date":"2026-03-29","reports":383,"unique_ips":292},{"date":"2026-03-30","reports":105,"unique_ips":41},{"date":"2026-03-31","reports":110,"unique_ips":31},{"date":"2026-04-01","reports":57,"unique_ips":23}],"top_ips":[{"ip_address":"195.178.110.30","report_count":1610,"categories":["generic_bruteforce","ssh_bruteforce",null],"last_seen":"2026-07-06T20:51:02.206600"},{"ip_address":"94.156.152.234","report_count":422,"categories":[null],"last_seen":"2026-07-06T20:50:31.536125"},{"ip_address":"195.178.110.135","report_count":412,"categories":[null],"last_seen":"2026-07-06T20:51:02.207235"},{"ip_address":"195.178.110.204","report_count":402,"categories":[null],"last_seen":"2026-07-06T20:51:02.207460"},{"ip_address":"78.142.18.172","report_count":399,"categories":["web_scanner",null],"last_seen":"2026-07-06T20:50:27.794037"},{"ip_address":"87.121.69.138","report_count":398,"categories":["ssh_bruteforce",null],"last_seen":"2026-07-06T20:50:30.335001"},{"ip_address":"195.178.110.199","report_count":395,"categories":["repeat_offender","tcp_scan","web_attack","web_scanner",null],"last_seen":"2026-07-06T20:51:02.207432"},{"ip_address":"91.92.199.36","report_count":395,"categories":["generic_bruteforce","ssh_bruteforce",null],"last_seen":"2026-07-06T20:50:30.373330"},{"ip_address":"195.178.110.26","report_count":389,"categories":["generic_bruteforce","ssh_bruteforce",null],"last_seen":"2026-07-06T20:51:02.206544"},{"ip_address":"78.142.18.40","report_count":389,"categories":["web_attack",null],"last_seen":"2026-07-06T20:50:27.794015"},{"ip_address":"185.255.212.178","report_count":389,"categories":[null],"last_seen":"2026-07-06T20:50:58.060921"},{"ip_address":"95.87.248.223","report_count":387,"categories":[null],"last_seen":"2026-07-06T20:50:31.544959"},{"ip_address":"151.237.115.208","report_count":387,"categories":[null],"last_seen":"2026-07-06T20:50:46.554671"},{"ip_address":"94.156.152.18","report_count":385,"categories":[null],"last_seen":"2026-07-06T20:50:31.535989"},{"ip_address":"151.237.115.206","report_count":384,"categories":[null],"last_seen":"2026-07-06T20:50:46.554650"},{"ip_address":"91.191.209.9","report_count":382,"categories":[null],"last_seen":"2026-07-06T20:50:30.378862"},{"ip_address":"78.128.113.46","report_count":382,"categories":[null],"last_seen":"2026-07-06T20:50:27.793170"},{"ip_address":"195.178.110.157","report_count":381,"categories":["tcp_scan","web_scanner",null],"last_seen":"2026-07-06T20:51:02.207318"},{"ip_address":"195.178.110.108","report_count":379,"categories":["ddos","web_attack",null],"last_seen":"2026-07-06T20:51:02.207121"},{"ip_address":"62.182.118.138","report_count":378,"categories":[null],"last_seen":"2026-07-06T20:50:24.114856"}]}