{"country_code":"KR","statistics":{"total_reports":3555550,"unique_ips":62508,"first_seen":"2022-12-19T08:14:18","last_seen":"2026-10-04T07:47:57.587890","unique_categories":19,"reports_24h":10000,"unique_ips_24h":3327},"categories":[{"category":"tcp_scan","count":572319,"unique_ips":6033},{"category":"high_threat","count":264353,"unique_ips":5427},{"category":"suspicious_activity","count":256002,"unique_ips":18619},{"category":"malware_distribution","count":81137,"unique_ips":4713},{"category":"severe_abuse","count":30454,"unique_ips":2599},{"category":"ssh_bruteforce","count":13104,"unique_ips":2409},{"category":"moderate_threat","count":7524,"unique_ips":1498},{"category":"intrusion_attempt","count":6694,"unique_ips":3917},{"category":"spam","count":5173,"unique_ips":1733},{"category":"generic_bruteforce","count":4405,"unique_ips":2924},{"category":"malware_c2","count":1611,"unique_ips":111},{"category":"web_attack","count":1494,"unique_ips":788},{"category":"professional_threat","count":937,"unique_ips":186},{"category":"rdp_bruteforce","count":295,"unique_ips":5},{"category":"email_abuse","count":154,"unique_ips":7},{"category":"mail_bruteforce","count":135,"unique_ips":72},{"category":"botnet_c2","count":89,"unique_ips":12},{"category":"repeat_offender","count":83,"unique_ips":46},{"category":"sip_bruteforce","count":75,"unique_ips":75},{"category":"unknown","count":41,"unique_ips":1}],"severity_distribution":[{"severity":"critical","count":730720},{"severity":"high","count":1515801},{"severity":"medium","count":235733},{"severity":"low","count":1073296}],"time_series":[{"date":"2026-09-04","reports":12854,"unique_ips":3310},{"date":"2026-09-05","reports":12660,"unique_ips":3235},{"date":"2026-09-06","reports":12717,"unique_ips":3228},{"date":"2026-09-07","reports":12727,"unique_ips":3441},{"date":"2026-09-08","reports":13596,"unique_ips":4377},{"date":"2026-09-09","reports":13705,"unique_ips":4418},{"date":"2026-09-10","reports":13375,"unique_ips":4249},{"date":"2026-09-11","reports":13451,"unique_ips":4297},{"date":"2026-09-12","reports":13652,"unique_ips":4308},{"date":"2026-09-13","reports":14102,"unique_ips":4482},{"date":"2026-09-14","reports":21483,"unique_ips":4533},{"date":"2026-09-15","reports":17580,"unique_ips":3425},{"date":"2026-09-16","reports":16960,"unique_ips":3364},{"date":"2026-09-17","reports":16271,"unique_ips":3311},{"date":"2026-09-18","reports":18919,"unique_ips":4318},{"date":"2026-09-19","reports":20779,"unique_ips":5546},{"date":"2026-09-20","reports":20792,"unique_ips":5687},{"date":"2026-09-21","reports":21045,"unique_ips":5728},{"date":"2026-09-22","reports":20486,"unique_ips":5696},{"date":"2026-09-23","reports":20553,"unique_ips":5790},{"date":"2026-09-24","reports":23108,"unique_ips":5949},{"date":"2026-09-25","reports":23355,"unique_ips":5818},{"date":"2026-09-26","reports":21126,"unique_ips":3852},{"date":"2026-09-27","reports":20769,"unique_ips":3750},{"date":"2026-09-28","reports":20277,"unique_ips":3864},{"date":"2026-09-29","reports":20662,"unique_ips":3945},{"date":"2026-09-30","reports":18851,"unique_ips":3610},{"date":"2026-10-01","reports":18093,"unique_ips":3502},{"date":"2026-10-02","reports":18704,"unique_ips":3477},{"date":"2026-10-03","reports":18155,"unique_ips":3599}],"top_ips":[{"ip_address":"211.106.133.202","report_count":1420,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:45:52.587865"},{"ip_address":"211.223.107.86","report_count":1404,"categories":["high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:44:42.589086"},{"ip_address":"118.37.214.187","report_count":1400,"categories":["high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:09.070513"},{"ip_address":"222.108.100.117","report_count":1386,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:14.137685"},{"ip_address":"49.247.37.22","report_count":1379,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:48:32.589033"},{"ip_address":"211.178.247.182","report_count":1373,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:46:47.589101"},{"ip_address":"125.142.37.91","report_count":1370,"categories":["high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:09.743200"},{"ip_address":"115.178.75.242","report_count":1369,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:08.523580"},{"ip_address":"115.178.75.243","report_count":1368,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:08.523602"},{"ip_address":"14.63.217.28","report_count":1368,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:02.130843"},{"ip_address":"220.80.223.144","report_count":1365,"categories":["generic_bruteforce","high_threat","malware_distribution","spam","ssh_bruteforce","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:14.128218"},{"ip_address":"222.107.156.227","report_count":1365,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:50:12.589090"},{"ip_address":"221.163.5.228","report_count":1364,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:45:57.587868"},{"ip_address":"175.198.62.180","report_count":1361,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:42:12.589082"},{"ip_address":"115.68.208.117","report_count":1361,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:08.523155"},{"ip_address":"119.209.12.20","report_count":1359,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:09.082075"},{"ip_address":"220.118.173.234","report_count":1358,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:49:07.587886"},{"ip_address":"211.253.31.30","report_count":1357,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:13.374343"},{"ip_address":"121.142.87.218","report_count":1356,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:09.089229"},{"ip_address":"61.72.55.130","report_count":1355,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:05.484596"}]}