{"country_code":"HK","statistics":{"total_reports":2962516,"unique_ips":84073,"first_seen":"2023-03-12T20:32:52","last_seen":"2026-09-20T17:48:00.852511","unique_categories":19,"reports_24h":10000,"unique_ips_24h":3378},"categories":[{"category":"tcp_scan","count":495501,"unique_ips":4957},{"category":"suspicious_activity","count":194637,"unique_ips":13398},{"category":"high_threat","count":71885,"unique_ips":4553},{"category":"malware_distribution","count":71267,"unique_ips":4208},{"category":"severe_abuse","count":30399,"unique_ips":2484},{"category":"malware_c2","count":13659,"unique_ips":1040},{"category":"ssh_bruteforce","count":11867,"unique_ips":2220},{"category":"moderate_threat","count":6261,"unique_ips":1857},{"category":"intrusion_attempt","count":6012,"unique_ips":4095},{"category":"generic_bruteforce","count":3064,"unique_ips":2139},{"category":"spam","count":2702,"unique_ips":1093},{"category":"web_attack","count":1425,"unique_ips":871},{"category":"professional_threat","count":881,"unique_ips":172},{"category":"rdp_bruteforce","count":105,"unique_ips":8},{"category":"sip_bruteforce","count":76,"unique_ips":76},{"category":"repeat_offender","count":66,"unique_ips":40},{"category":"botnet_c2","count":34,"unique_ips":17},{"category":"proxy_abuse","count":30,"unique_ips":22},{"category":"web_scanner","count":23,"unique_ips":21},{"category":"ddos","count":9,"unique_ips":8}],"severity_distribution":[{"severity":"critical","count":552302},{"severity":"high","count":1385453},{"severity":"medium","count":146702},{"severity":"low","count":878059}],"time_series":[{"date":"2026-08-21","reports":10504,"unique_ips":3140},{"date":"2026-08-22","reports":10538,"unique_ips":3159},{"date":"2026-08-23","reports":10406,"unique_ips":3135},{"date":"2026-08-24","reports":10422,"unique_ips":3086},{"date":"2026-08-25","reports":10557,"unique_ips":3164},{"date":"2026-08-26","reports":10295,"unique_ips":3068},{"date":"2026-08-27","reports":10551,"unique_ips":3135},{"date":"2026-08-28","reports":10343,"unique_ips":3140},{"date":"2026-08-29","reports":10639,"unique_ips":3354},{"date":"2026-08-30","reports":10836,"unique_ips":3203},{"date":"2026-08-31","reports":10526,"unique_ips":3118},{"date":"2026-09-01","reports":10817,"unique_ips":3167},{"date":"2026-09-02","reports":11563,"unique_ips":3526},{"date":"2026-09-03","reports":10208,"unique_ips":3739},{"date":"2026-09-04","reports":11862,"unique_ips":3774},{"date":"2026-09-05","reports":12173,"unique_ips":4113},{"date":"2026-09-06","reports":11945,"unique_ips":3851},{"date":"2026-09-07","reports":11438,"unique_ips":3823},{"date":"2026-09-08","reports":11275,"unique_ips":3817},{"date":"2026-09-09","reports":10652,"unique_ips":3369},{"date":"2026-09-10","reports":10679,"unique_ips":3408},{"date":"2026-09-11","reports":10758,"unique_ips":3353},{"date":"2026-09-12","reports":11102,"unique_ips":3545},{"date":"2026-09-13","reports":11598,"unique_ips":3796},{"date":"2026-09-14","reports":16421,"unique_ips":3841},{"date":"2026-09-15","reports":14059,"unique_ips":4071},{"date":"2026-09-16","reports":13874,"unique_ips":3941},{"date":"2026-09-17","reports":14899,"unique_ips":3914},{"date":"2026-09-18","reports":16197,"unique_ips":3900},{"date":"2026-09-19","reports":17019,"unique_ips":3980}],"top_ips":[{"ip_address":"104.208.108.166","report_count":1025,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T17:44:40.852521"},{"ip_address":"45.120.216.232","report_count":1019,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-20T17:36:05.852514"},{"ip_address":"152.32.254.89","report_count":1014,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-20T17:24:50.852516"},{"ip_address":"42.200.66.164","report_count":1013,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T17:40:45.852514"},{"ip_address":"123.58.213.128","report_count":1011,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T17:30:25.852525"},{"ip_address":"101.36.107.233","report_count":1010,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T17:36:35.851504"},{"ip_address":"123.58.210.86","report_count":1009,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T17:50:25.851470"},{"ip_address":"45.116.78.92","report_count":1006,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T17:17:40.852498"},{"ip_address":"152.32.189.59","report_count":1004,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T17:49:25.851484"},{"ip_address":"123.58.215.196","report_count":997,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T16:52:09.515463"},{"ip_address":"219.78.63.235","report_count":997,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T17:38:10.851242"},{"ip_address":"150.5.169.176","report_count":994,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T17:35:35.852513"},{"ip_address":"223.197.186.7","report_count":994,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T16:29:14.517958"},{"ip_address":"165.154.6.75","report_count":992,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T16:32:34.517974"},{"ip_address":"152.32.171.213","report_count":979,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T17:31:30.852526"},{"ip_address":"119.246.15.94","report_count":974,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T07:40:16.488228"},{"ip_address":"103.146.159.173","report_count":973,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T17:39:30.852546"},{"ip_address":"144.48.243.18","report_count":958,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-20T16:23:04.516956"},{"ip_address":"150.107.36.236","report_count":948,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","spam","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-20T13:33:53.402170"},{"ip_address":"150.107.38.251","report_count":940,"categories":["high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-20T17:05:18.165497"}]}