{"country_code":"CN","statistics":{"total_reports":26314141,"unique_ips":572604,"first_seen":"2022-07-02T15:26:51","last_seen":"2026-10-13T05:48:00.374697","unique_categories":21,"reports_24h":10000,"unique_ips_24h":6586},"categories":[{"category":"tcp_scan","count":3014922,"unique_ips":50636},{"category":"suspicious_activity","count":1602365,"unique_ips":195506},{"category":"malware_distribution","count":1285371,"unique_ips":84268},{"category":"high_threat","count":1083424,"unique_ips":36895},{"category":"severe_abuse","count":121646,"unique_ips":11173},{"category":"malware_c2","count":47395,"unique_ips":4490},{"category":"moderate_threat","count":43150,"unique_ips":25344},{"category":"ssh_bruteforce","count":41972,"unique_ips":11766},{"category":"intrusion_attempt","count":34175,"unique_ips":21436},{"category":"professional_threat","count":22258,"unique_ips":4286},{"category":"generic_bruteforce","count":17688,"unique_ips":13332},{"category":"botnet_c2","count":16948,"unique_ips":9870},{"category":"spam","count":14465,"unique_ips":5779},{"category":"web_attack","count":6024,"unique_ips":4181},{"category":"email_abuse","count":579,"unique_ips":274},{"category":"mail_bruteforce","count":432,"unique_ips":294},{"category":"sip_bruteforce","count":298,"unique_ips":298},{"category":"repeat_offender","count":177,"unique_ips":120},{"category":"rdp_bruteforce","count":164,"unique_ips":51},{"category":"unknown","count":109,"unique_ips":8}],"severity_distribution":[{"severity":"critical","count":2708850},{"severity":"high","count":9482231},{"severity":"medium","count":962150},{"severity":"low","count":13160910}],"time_series":[{"date":"2026-09-13","reports":72120,"unique_ips":30147},{"date":"2026-09-14","reports":95925,"unique_ips":32047},{"date":"2026-09-15","reports":77063,"unique_ips":31954},{"date":"2026-09-16","reports":72276,"unique_ips":30663},{"date":"2026-09-17","reports":69710,"unique_ips":28831},{"date":"2026-09-18","reports":70501,"unique_ips":27948},{"date":"2026-09-19","reports":71247,"unique_ips":27730},{"date":"2026-09-20","reports":70114,"unique_ips":27463},{"date":"2026-09-21","reports":75031,"unique_ips":27629},{"date":"2026-09-22","reports":72307,"unique_ips":27270},{"date":"2026-09-23","reports":74044,"unique_ips":28572},{"date":"2026-09-24","reports":71262,"unique_ips":28410},{"date":"2026-09-25","reports":72014,"unique_ips":28691},{"date":"2026-09-26","reports":69578,"unique_ips":27980},{"date":"2026-09-27","reports":68736,"unique_ips":27318},{"date":"2026-09-28","reports":69746,"unique_ips":27833},{"date":"2026-09-29","reports":69887,"unique_ips":28419},{"date":"2026-09-30","reports":68763,"unique_ips":28124},{"date":"2026-10-01","reports":69754,"unique_ips":28047},{"date":"2026-10-02","reports":70757,"unique_ips":28348},{"date":"2026-10-03","reports":71953,"unique_ips":29385},{"date":"2026-10-04","reports":69899,"unique_ips":28596},{"date":"2026-10-05","reports":70617,"unique_ips":28491},{"date":"2026-10-06","reports":70642,"unique_ips":27930},{"date":"2026-10-07","reports":69168,"unique_ips":28072},{"date":"2026-10-08","reports":65019,"unique_ips":27723},{"date":"2026-10-09","reports":64846,"unique_ips":27668},{"date":"2026-10-10","reports":67027,"unique_ips":27777},{"date":"2026-10-11","reports":68131,"unique_ips":27803},{"date":"2026-10-12","reports":67108,"unique_ips":27651}],"top_ips":[{"ip_address":"36.33.167.165","report_count":1625,"categories":["high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:45:02.266953"},{"ip_address":"221.228.203.3","report_count":1616,"categories":["high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:43:07.266944"},{"ip_address":"117.81.212.152","report_count":1607,"categories":["high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:52:52.263879"},{"ip_address":"101.89.141.184","report_count":1594,"categories":["high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:48:57.263884"},{"ip_address":"125.124.226.217","report_count":1593,"categories":["high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:48:57.263884"},{"ip_address":"117.62.22.127","report_count":1586,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:38:57.263886"},{"ip_address":"58.221.60.25","report_count":1569,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:40:22.263869"},{"ip_address":"182.43.235.75","report_count":1542,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-13T04:32:42.266956"},{"ip_address":"49.64.85.138","report_count":1538,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-13T04:37:22.263864"},{"ip_address":"121.227.31.13","report_count":1538,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-13T04:36:57.262353"},{"ip_address":"117.50.70.169","report_count":1532,"categories":["high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:46:17.266942"},{"ip_address":"171.104.143.176","report_count":1520,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-13T04:41:37.263880"},{"ip_address":"111.9.22.102","report_count":1517,"categories":["high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:33:12.266944"},{"ip_address":"120.48.90.166","report_count":1512,"categories":["high_threat","malware_distribution","moderate_threat","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-13T04:35:02.266943"},{"ip_address":"121.224.78.164","report_count":1506,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-13T04:31:47.266955"},{"ip_address":"119.96.159.237","report_count":1495,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-13T04:49:32.263877"},{"ip_address":"117.50.51.198","report_count":1494,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-13T04:44:47.266954"},{"ip_address":"49.75.185.71","report_count":1483,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-13T04:38:57.263886"},{"ip_address":"111.47.243.219","report_count":1478,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-13T04:27:42.266962"},{"ip_address":"180.167.207.234","report_count":1476,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-13T04:45:52.266954"}]}