{"country_code":"TH","statistics":{"total_reports":1892967,"unique_ips":43793,"first_seen":"2022-10-17T10:55:58","last_seen":"2026-10-04T07:47:49.376102","unique_categories":18,"reports_24h":2212,"unique_ips_24h":753},"categories":[{"category":"tcp_scan","count":113256,"unique_ips":2051},{"category":"suspicious_activity","count":110330,"unique_ips":14216},{"category":"high_threat","count":37413,"unique_ips":1407},{"category":"malware_distribution","count":20767,"unique_ips":2732},{"category":"severe_abuse","count":7486,"unique_ips":751},{"category":"moderate_threat","count":3805,"unique_ips":1354},{"category":"intrusion_attempt","count":3783,"unique_ips":2564},{"category":"ssh_bruteforce","count":2533,"unique_ips":730},{"category":"spam","count":1858,"unique_ips":720},{"category":"generic_bruteforce","count":1458,"unique_ips":1078},{"category":"malware_c2","count":641,"unique_ips":49},{"category":"web_attack","count":635,"unique_ips":454},{"category":"professional_threat","count":530,"unique_ips":102},{"category":"rdp_bruteforce","count":298,"unique_ips":191},{"category":"botnet_c2","count":141,"unique_ips":81},{"category":"proxy_abuse","count":111,"unique_ips":110},{"category":"database_attack","count":30,"unique_ips":17},{"category":"sip_bruteforce","count":28,"unique_ips":28},{"category":"repeat_offender","count":15,"unique_ips":9},{"category":"mail_bruteforce","count":15,"unique_ips":5}],"severity_distribution":[{"severity":"critical","count":139721},{"severity":"high","count":332391},{"severity":"medium","count":74765},{"severity":"low","count":1346090}],"time_series":[{"date":"2026-09-04","reports":2725,"unique_ips":1050},{"date":"2026-09-05","reports":2555,"unique_ips":909},{"date":"2026-09-06","reports":2623,"unique_ips":919},{"date":"2026-09-07","reports":2576,"unique_ips":918},{"date":"2026-09-08","reports":2598,"unique_ips":939},{"date":"2026-09-09","reports":2569,"unique_ips":940},{"date":"2026-09-10","reports":2603,"unique_ips":888},{"date":"2026-09-11","reports":2434,"unique_ips":874},{"date":"2026-09-12","reports":2370,"unique_ips":851},{"date":"2026-09-13","reports":2436,"unique_ips":857},{"date":"2026-09-14","reports":3271,"unique_ips":920},{"date":"2026-09-15","reports":2531,"unique_ips":894},{"date":"2026-09-16","reports":2619,"unique_ips":902},{"date":"2026-09-17","reports":2967,"unique_ips":896},{"date":"2026-09-18","reports":3250,"unique_ips":943},{"date":"2026-09-19","reports":3261,"unique_ips":973},{"date":"2026-09-20","reports":3265,"unique_ips":987},{"date":"2026-09-21","reports":3387,"unique_ips":1030},{"date":"2026-09-22","reports":3323,"unique_ips":979},{"date":"2026-09-23","reports":3454,"unique_ips":1022},{"date":"2026-09-24","reports":3470,"unique_ips":1015},{"date":"2026-09-25","reports":3543,"unique_ips":980},{"date":"2026-09-26","reports":3417,"unique_ips":864},{"date":"2026-09-27","reports":3356,"unique_ips":794},{"date":"2026-09-28","reports":3265,"unique_ips":815},{"date":"2026-09-29","reports":3150,"unique_ips":823},{"date":"2026-09-30","reports":2505,"unique_ips":805},{"date":"2026-10-01","reports":2343,"unique_ips":773},{"date":"2026-10-02","reports":2958,"unique_ips":781},{"date":"2026-10-03","reports":2751,"unique_ips":929}],"top_ips":[{"ip_address":"203.154.158.195","report_count":1400,"categories":["high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:44:02.587870"},{"ip_address":"147.50.227.79","report_count":1393,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:09.764373"},{"ip_address":"203.150.107.244","report_count":1350,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:13.333360"},{"ip_address":"147.50.231.135","report_count":1274,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:42:27.589090"},{"ip_address":"49.231.192.36","report_count":1258,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:04.683883"},{"ip_address":"147.50.103.212","report_count":1253,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:09.764350"},{"ip_address":"203.170.192.251","report_count":1220,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:13.333751"},{"ip_address":"118.193.56.235","report_count":1133,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:09.072803"},{"ip_address":"118.193.57.218","report_count":1129,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:09.072918"},{"ip_address":"118.194.251.17","report_count":1127,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:09.073760"},{"ip_address":"118.193.57.59","report_count":1121,"categories":["high_threat","intrusion_attempt","malware_distribution","spam","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:09.072825"},{"ip_address":"203.172.213.166","report_count":1121,"categories":["high_threat","malware_distribution","spam","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:10:13.747272"},{"ip_address":"152.32.245.27","report_count":1120,"categories":["high_threat","intrusion_attempt","malware_distribution","spam","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:10.429070"},{"ip_address":"165.154.51.27","report_count":1119,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:10.453066"},{"ip_address":"118.194.250.245","report_count":1117,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:09.073737"},{"ip_address":"118.194.250.127","report_count":1112,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","spam","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:09.073690"},{"ip_address":"165.154.120.13","report_count":1111,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:10.453345"},{"ip_address":"118.193.57.185","report_count":1111,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:09.072896"},{"ip_address":"118.194.251.145","report_count":1108,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:09.073896"},{"ip_address":"118.193.56.229","report_count":1108,"categories":["high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:09.072780"}]}