{"country_code":"VN","statistics":{"total_reports":3127843,"unique_ips":143309,"first_seen":"2022-09-09T22:25:15","last_seen":"2026-10-04T19:47:50.649545","unique_categories":18,"reports_24h":8093,"unique_ips_24h":2091},"categories":[{"category":"tcp_scan","count":540584,"unique_ips":13389},{"category":"suspicious_activity","count":184147,"unique_ips":18422},{"category":"high_threat","count":118826,"unique_ips":4347},{"category":"malware_distribution","count":55522,"unique_ips":6381},{"category":"severe_abuse","count":29586,"unique_ips":2832},{"category":"spam","count":16208,"unique_ips":5873},{"category":"ssh_bruteforce","count":15965,"unique_ips":3238},{"category":"intrusion_attempt","count":14773,"unique_ips":10864},{"category":"generic_bruteforce","count":5739,"unique_ips":4306},{"category":"moderate_threat","count":4703,"unique_ips":1375},{"category":"malware_c2","count":2547,"unique_ips":140},{"category":"web_attack","count":1597,"unique_ips":1159},{"category":"botnet_c2","count":422,"unique_ips":31},{"category":"professional_threat","count":284,"unique_ips":57},{"category":"sip_bruteforce","count":124,"unique_ips":124},{"category":"mail_bruteforce","count":81,"unique_ips":20},{"category":"rdp_bruteforce","count":51,"unique_ips":18},{"category":"proxy_abuse","count":37,"unique_ips":36},{"category":"repeat_offender","count":31,"unique_ips":23},{"category":"web_scanner","count":26,"unique_ips":26}],"severity_distribution":[{"severity":"critical","count":487124},{"severity":"high","count":1334825},{"severity":"medium","count":296415},{"severity":"low","count":1009479}],"time_series":[{"date":"2026-09-04","reports":14075,"unique_ips":4830},{"date":"2026-09-05","reports":12871,"unique_ips":3983},{"date":"2026-09-06","reports":10954,"unique_ips":3008},{"date":"2026-09-07","reports":10523,"unique_ips":2983},{"date":"2026-09-08","reports":10224,"unique_ips":2801},{"date":"2026-09-09","reports":10922,"unique_ips":3368},{"date":"2026-09-10","reports":12311,"unique_ips":4406},{"date":"2026-09-11","reports":12121,"unique_ips":4600},{"date":"2026-09-12","reports":10065,"unique_ips":2769},{"date":"2026-09-13","reports":13029,"unique_ips":4023},{"date":"2026-09-14","reports":16273,"unique_ips":4142},{"date":"2026-09-15","reports":9828,"unique_ips":3212},{"date":"2026-09-16","reports":10375,"unique_ips":3902},{"date":"2026-09-17","reports":9290,"unique_ips":2673},{"date":"2026-09-18","reports":9492,"unique_ips":2785},{"date":"2026-09-19","reports":10158,"unique_ips":2938},{"date":"2026-09-20","reports":10198,"unique_ips":3054},{"date":"2026-09-21","reports":12980,"unique_ips":4087},{"date":"2026-09-22","reports":12509,"unique_ips":5154},{"date":"2026-09-23","reports":10385,"unique_ips":3890},{"date":"2026-09-24","reports":9840,"unique_ips":3086},{"date":"2026-09-25","reports":9904,"unique_ips":2898},{"date":"2026-09-26","reports":9445,"unique_ips":2663},{"date":"2026-09-27","reports":8736,"unique_ips":2230},{"date":"2026-09-28","reports":8850,"unique_ips":2483},{"date":"2026-09-29","reports":8603,"unique_ips":2533},{"date":"2026-09-30","reports":8977,"unique_ips":2349},{"date":"2026-10-01","reports":8907,"unique_ips":2293},{"date":"2026-10-02","reports":8355,"unique_ips":2219},{"date":"2026-10-03","reports":9215,"unique_ips":3179}],"top_ips":[{"ip_address":"103.1.210.25","report_count":1522,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T19:49:50.648757"},{"ip_address":"103.176.20.115","report_count":1377,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:46:45.649542"},{"ip_address":"45.119.212.99","report_count":1376,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T19:40:40.647875"},{"ip_address":"103.82.21.8","report_count":1370,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:24:05.647888"},{"ip_address":"103.237.144.204","report_count":1368,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T18:46:37.302825"},{"ip_address":"180.93.172.213","report_count":1366,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:41:50.647875"},{"ip_address":"103.63.108.25","report_count":1362,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:09:40.649521"},{"ip_address":"103.189.208.13","report_count":1361,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T19:27:30.649556"},{"ip_address":"103.159.54.61","report_count":1360,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:23:30.649521"},{"ip_address":"58.186.20.143","report_count":1360,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:22:20.649526"},{"ip_address":"103.200.25.198","report_count":1359,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:07:05.647870"},{"ip_address":"183.91.11.36","report_count":1358,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:47:15.647880"},{"ip_address":"171.244.141.86","report_count":1353,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:43:55.649526"},{"ip_address":"58.186.20.101","report_count":1350,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:45:25.649557"},{"ip_address":"171.244.201.80","report_count":1347,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:46:35.649533"},{"ip_address":"103.172.236.241","report_count":1344,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:52:30.649528"},{"ip_address":"42.96.20.16","report_count":1341,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:49:15.649514"},{"ip_address":"103.69.96.120","report_count":1339,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:46:50.649557"},{"ip_address":"42.96.19.37","report_count":1333,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:11:35.649534"},{"ip_address":"183.91.186.36","report_count":1333,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T19:43:25.649546"}]}