{"country_code":"CN","statistics":{"total_reports":14171095,"unique_ips":297958,"first_seen":"2022-07-02T15:26:51","last_seen":"2026-04-11T12:15:05.666385","unique_categories":21,"reports_24h":447,"unique_ips_24h":295},"categories":[{"category":"suspicious_activity","count":433750,"unique_ips":57943},{"category":"severe_abuse","count":121646,"unique_ips":11173},{"category":"professional_threat","count":22258,"unique_ips":4286},{"category":"moderate_threat","count":21372,"unique_ips":3566},{"category":"high_threat","count":14984,"unique_ips":2647},{"category":"ssh_bruteforce","count":14680,"unique_ips":3831},{"category":"botnet_c2","count":2736,"unique_ips":1404},{"category":"generic_bruteforce","count":1459,"unique_ips":872},{"category":"malware_c2","count":571,"unique_ips":200},{"category":"email_abuse","count":404,"unique_ips":99},{"category":"mail_bruteforce","count":185,"unique_ips":48},{"category":"rdp_bruteforce","count":164,"unique_ips":51},{"category":"unknown","count":109,"unique_ips":8},{"category":"repeat_offender","count":83,"unique_ips":29},{"category":"database_attack","count":37,"unique_ips":18},{"category":"web_attack","count":7,"unique_ips":7},{"category":"spam","count":7,"unique_ips":5},{"category":"tcp_scan","count":5,"unique_ips":5},{"category":"telnet_bruteforce","count":2,"unique_ips":2},{"category":"dns_abuse","count":1,"unique_ips":1}],"severity_distribution":[{"severity":"critical","count":1830063},{"severity":"high","count":546616},{"severity":"medium","count":487421},{"severity":"low","count":11306995}],"time_series":[{"date":"2026-03-02","reports":314,"unique_ips":172},{"date":"2026-03-03","reports":1457,"unique_ips":919},{"date":"2026-03-04","reports":1433,"unique_ips":896},{"date":"2026-03-05","reports":1480,"unique_ips":972},{"date":"2026-03-06","reports":2644,"unique_ips":1421},{"date":"2026-03-07","reports":2862,"unique_ips":1300},{"date":"2026-03-08","reports":2904,"unique_ips":1374},{"date":"2026-03-09","reports":1844,"unique_ips":1209},{"date":"2026-03-10","reports":1818,"unique_ips":1187},{"date":"2026-03-11","reports":1593,"unique_ips":1013},{"date":"2026-03-12","reports":1660,"unique_ips":1034},{"date":"2026-03-13","reports":1458,"unique_ips":892},{"date":"2026-03-14","reports":2867,"unique_ips":2124},{"date":"2026-03-15","reports":1430,"unique_ips":863},{"date":"2026-03-16","reports":1733,"unique_ips":1042},{"date":"2026-03-17","reports":1521,"unique_ips":955},{"date":"2026-03-18","reports":1649,"unique_ips":990},{"date":"2026-03-19","reports":1551,"unique_ips":972},{"date":"2026-03-20","reports":159573,"unique_ips":80120},{"date":"2026-03-21","reports":1624,"unique_ips":1027},{"date":"2026-03-22","reports":1715,"unique_ips":1146},{"date":"2026-03-23","reports":1439,"unique_ips":951},{"date":"2026-03-24","reports":1337,"unique_ips":856},{"date":"2026-03-25","reports":1625,"unique_ips":1105},{"date":"2026-03-26","reports":1694,"unique_ips":1079},{"date":"2026-03-27","reports":1935,"unique_ips":1319},{"date":"2026-03-28","reports":1687,"unique_ips":1123},{"date":"2026-03-29","reports":1457,"unique_ips":909},{"date":"2026-03-30","reports":1609,"unique_ips":955},{"date":"2026-03-31","reports":1815,"unique_ips":1066},{"date":"2026-04-01","reports":681,"unique_ips":422}],"top_ips":[{"ip_address":"58.17.128.7","report_count":335,"categories":["email_abuse","severe_abuse","ssh_bruteforce","unknown",null],"last_seen":"2026-03-20T03:09:41.041940"},{"ip_address":"124.163.255.210","report_count":295,"categories":["generic_bruteforce","repeat_offender","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-04-08T08:30:47.404617"},{"ip_address":"113.64.250.1","report_count":276,"categories":["botnet_c2","suspicious_activity","web_attack",null],"last_seen":"2026-02-22T02:26:27"},{"ip_address":"223.221.36.42","report_count":266,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-04-09T05:01:10.205662"},{"ip_address":"14.116.156.100","report_count":261,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-04-09T08:10:40.614406"},{"ip_address":"58.221.60.25","report_count":258,"categories":["generic_bruteforce","repeat_offender","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-03-29T13:50:34.546522"},{"ip_address":"221.229.218.50","report_count":255,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-04-09T21:25:31.212433"},{"ip_address":"113.31.103.129","report_count":253,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-03-29T03:11:28.266630"},{"ip_address":"49.64.169.153","report_count":253,"categories":["generic_bruteforce","repeat_offender","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-04-10T19:14:34.891276"},{"ip_address":"14.22.82.116","report_count":252,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-04-10T18:59:29.662283"},{"ip_address":"117.50.70.125","report_count":251,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-04-09T03:37:48.089533"},{"ip_address":"58.33.97.119","report_count":250,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-03-27T04:56:15.958464"},{"ip_address":"115.190.74.101","report_count":247,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-04-05T14:39:56.662517"},{"ip_address":"115.151.72.155","report_count":247,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-04-09T05:00:44.804959"},{"ip_address":"114.220.238.30","report_count":246,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-03-24T08:56:14.025382"},{"ip_address":"121.204.171.142","report_count":245,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-03-24T11:00:09.406666"},{"ip_address":"203.83.231.93","report_count":245,"categories":["repeat_offender","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-04-11T12:41:56.178373"},{"ip_address":"36.158.74.30","report_count":245,"categories":["botnet_c2","suspicious_activity","web_attack",null],"last_seen":"2026-03-21T13:42:16"},{"ip_address":"125.91.33.72","report_count":245,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-04-10T05:38:08.098461"},{"ip_address":"123.156.230.101","report_count":245,"categories":["generic_bruteforce","severe_abuse","ssh_bruteforce",null],"last_seen":"2026-04-11T12:40:07.019608"}]}