{"country_code":"SA","statistics":{"total_reports":161426,"unique_ips":11938,"first_seen":"2024-03-13T17:06:25","last_seen":"2026-09-22T12:42:24.932583","unique_categories":13,"reports_24h":755,"unique_ips_24h":217},"categories":[{"category":"tcp_scan","count":17119,"unique_ips":548},{"category":"suspicious_activity","count":11573,"unique_ips":2136},{"category":"high_threat","count":3717,"unique_ips":344},{"category":"malware_distribution","count":3530,"unique_ips":1033},{"category":"intrusion_attempt","count":2729,"unique_ips":1910},{"category":"severe_abuse","count":1003,"unique_ips":86},{"category":"generic_bruteforce","count":876,"unique_ips":642},{"category":"spam","count":682,"unique_ips":287},{"category":"moderate_threat","count":624,"unique_ips":310},{"category":"web_attack","count":569,"unique_ips":453},{"category":"malware_c2","count":353,"unique_ips":32},{"category":"ssh_bruteforce","count":266,"unique_ips":103},{"category":"rdp_bruteforce","count":5,"unique_ips":3},{"category":"database_attack","count":3,"unique_ips":2},{"category":"proxy_abuse","count":2,"unique_ips":1},{"category":"web_scanner","count":1,"unique_ips":1}],"severity_distribution":[{"severity":"critical","count":12226},{"severity":"high","count":71688},{"severity":"medium","count":14000},{"severity":"low","count":63512}],"time_series":[{"date":"2026-08-23","reports":561,"unique_ips":249},{"date":"2026-08-24","reports":568,"unique_ips":264},{"date":"2026-08-25","reports":513,"unique_ips":221},{"date":"2026-08-26","reports":420,"unique_ips":193},{"date":"2026-08-27","reports":469,"unique_ips":184},{"date":"2026-08-28","reports":423,"unique_ips":173},{"date":"2026-08-29","reports":410,"unique_ips":181},{"date":"2026-08-30","reports":401,"unique_ips":175},{"date":"2026-08-31","reports":486,"unique_ips":200},{"date":"2026-09-01","reports":451,"unique_ips":205},{"date":"2026-09-02","reports":454,"unique_ips":189},{"date":"2026-09-03","reports":378,"unique_ips":202},{"date":"2026-09-04","reports":431,"unique_ips":192},{"date":"2026-09-05","reports":358,"unique_ips":165},{"date":"2026-09-06","reports":387,"unique_ips":162},{"date":"2026-09-07","reports":443,"unique_ips":187},{"date":"2026-09-08","reports":482,"unique_ips":175},{"date":"2026-09-09","reports":509,"unique_ips":194},{"date":"2026-09-10","reports":513,"unique_ips":190},{"date":"2026-09-11","reports":493,"unique_ips":192},{"date":"2026-09-12","reports":494,"unique_ips":183},{"date":"2026-09-13","reports":454,"unique_ips":167},{"date":"2026-09-14","reports":614,"unique_ips":203},{"date":"2026-09-15","reports":491,"unique_ips":210},{"date":"2026-09-16","reports":742,"unique_ips":234},{"date":"2026-09-17","reports":744,"unique_ips":226},{"date":"2026-09-18","reports":836,"unique_ips":251},{"date":"2026-09-19","reports":748,"unique_ips":252},{"date":"2026-09-20","reports":758,"unique_ips":239},{"date":"2026-09-21","reports":747,"unique_ips":250}],"top_ips":[{"ip_address":"79.72.3.119","report_count":1028,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack","web_scanner",null],"last_seen":"2026-09-22T12:25:24.932581"},{"ip_address":"144.24.209.174","report_count":925,"categories":["high_threat","malware_distribution","spam","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-22T10:16:00.798187"},{"ip_address":"79.170.53.30","report_count":743,"categories":["high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-22T12:42:14.932572"},{"ip_address":"94.97.85.162","report_count":525,"categories":["high_threat","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-22T02:50:24.598348"},{"ip_address":"8.213.81.38","report_count":513,"categories":["suspicious_activity","tcp_scan",null],"last_seen":"2026-08-18T02:50:05.879874"},{"ip_address":"46.152.238.217","report_count":506,"categories":["malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-08-04T02:50:19.396309"},{"ip_address":"193.122.70.111","report_count":502,"categories":["high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-22T02:50:44.811844"},{"ip_address":"34.166.5.230","report_count":499,"categories":["suspicious_activity","tcp_scan",null],"last_seen":"2026-08-11T02:50:13.211485"},{"ip_address":"82.197.58.135","report_count":492,"categories":["generic_bruteforce","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-22T07:40:14.029223"},{"ip_address":"154.205.134.214","report_count":470,"categories":["high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-22T07:40:25.354708"},{"ip_address":"34.166.34.218","report_count":465,"categories":["malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-08-11T07:11:15.690042"},{"ip_address":"46.251.140.71","report_count":463,"categories":["malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-08-07T02:50:21.989410"},{"ip_address":"34.166.28.66","report_count":388,"categories":["generic_bruteforce","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-08-23T07:40:05.597299"},{"ip_address":"82.197.58.130","report_count":386,"categories":["generic_bruteforce","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-22T07:40:14.029200"},{"ip_address":"158.101.233.87","report_count":374,"categories":["high_threat","tcp_scan",null],"last_seen":"2026-09-22T11:36:43.960661"},{"ip_address":"84.8.104.116","report_count":367,"categories":["malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-08-12T07:11:25.584606"},{"ip_address":"158.101.249.79","report_count":362,"categories":["malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-12T07:40:37.966799"},{"ip_address":"77.240.87.244","report_count":355,"categories":["malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-08-18T02:50:36.057097"},{"ip_address":"156.244.8.55","report_count":339,"categories":["high_threat","tcp_scan",null],"last_seen":"2026-09-22T11:17:18.960675"},{"ip_address":"8.213.47.157","report_count":333,"categories":["suspicious_activity","tcp_scan",null],"last_seen":"2026-08-05T20:50:04.903749"}]}