{"country_code":"EE","statistics":{"total_reports":71607,"unique_ips":3885,"first_seen":"2024-04-28T21:06:43","last_seen":"2026-09-23T10:46:03.623766","unique_categories":14,"reports_24h":363,"unique_ips_24h":152},"categories":[{"category":"tcp_scan","count":9651,"unique_ips":151},{"category":"suspicious_activity","count":5971,"unique_ips":527},{"category":"high_threat","count":1577,"unique_ips":125},{"category":"malware_distribution","count":1219,"unique_ips":148},{"category":"spam","count":743,"unique_ips":270},{"category":"severe_abuse","count":363,"unique_ips":37},{"category":"intrusion_attempt","count":292,"unique_ips":203},{"category":"ssh_bruteforce","count":217,"unique_ips":50},{"category":"generic_bruteforce","count":131,"unique_ips":92},{"category":"moderate_threat","count":86,"unique_ips":20},{"category":"malware_c2","count":79,"unique_ips":9},{"category":"web_attack","count":59,"unique_ips":42},{"category":"proxy_abuse","count":15,"unique_ips":9},{"category":"sip_bruteforce","count":2,"unique_ips":2},{"category":"email_abuse","count":1,"unique_ips":1},{"category":"web_scanner","count":1,"unique_ips":1}],"severity_distribution":[{"severity":"critical","count":6358},{"severity":"high","count":23371},{"severity":"medium","count":8392},{"severity":"low","count":33486}],"time_series":[{"date":"2026-08-24","reports":329,"unique_ips":128},{"date":"2026-08-25","reports":326,"unique_ips":125},{"date":"2026-08-26","reports":304,"unique_ips":125},{"date":"2026-08-27","reports":347,"unique_ips":140},{"date":"2026-08-28","reports":326,"unique_ips":130},{"date":"2026-08-29","reports":322,"unique_ips":129},{"date":"2026-08-30","reports":330,"unique_ips":126},{"date":"2026-08-31","reports":310,"unique_ips":118},{"date":"2026-09-01","reports":312,"unique_ips":99},{"date":"2026-09-02","reports":355,"unique_ips":133},{"date":"2026-09-03","reports":338,"unique_ips":148},{"date":"2026-09-04","reports":397,"unique_ips":147},{"date":"2026-09-05","reports":364,"unique_ips":149},{"date":"2026-09-06","reports":347,"unique_ips":142},{"date":"2026-09-07","reports":320,"unique_ips":137},{"date":"2026-09-08","reports":319,"unique_ips":133},{"date":"2026-09-09","reports":334,"unique_ips":137},{"date":"2026-09-10","reports":333,"unique_ips":142},{"date":"2026-09-11","reports":321,"unique_ips":131},{"date":"2026-09-12","reports":321,"unique_ips":126},{"date":"2026-09-13","reports":328,"unique_ips":132},{"date":"2026-09-14","reports":452,"unique_ips":141},{"date":"2026-09-15","reports":333,"unique_ips":135},{"date":"2026-09-16","reports":298,"unique_ips":133},{"date":"2026-09-17","reports":281,"unique_ips":126},{"date":"2026-09-18","reports":312,"unique_ips":133},{"date":"2026-09-19","reports":340,"unique_ips":136},{"date":"2026-09-20","reports":346,"unique_ips":144},{"date":"2026-09-21","reports":358,"unique_ips":163},{"date":"2026-09-22","reports":344,"unique_ips":142}],"top_ips":[{"ip_address":"83.166.50.15","report_count":970,"categories":["high_threat","malware_distribution","spam","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-23T10:39:08.623741"},{"ip_address":"85.29.246.199","report_count":934,"categories":["high_threat","malware_distribution","spam","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-23T10:46:03.623766"},{"ip_address":"37.157.91.62","report_count":866,"categories":["high_threat","malware_distribution","spam","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-23T10:34:48.623748"},{"ip_address":"109.206.241.199","report_count":726,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-23T07:40:15.549640"},{"ip_address":"213.35.128.24","report_count":550,"categories":["generic_bruteforce","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-23T07:40:27.507346"},{"ip_address":"138.124.4.81","report_count":544,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-15T02:50:26.438250"},{"ip_address":"95.85.245.51","report_count":496,"categories":["generic_bruteforce","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack","web_scanner",null],"last_seen":"2026-09-23T07:40:13.416497"},{"ip_address":"37.77.56.238","report_count":471,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-23T07:40:05.913780"},{"ip_address":"185.157.109.60","report_count":470,"categories":["high_threat","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-20T17:03:30.852506"},{"ip_address":"5.188.16.97","report_count":409,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan"],"last_seen":"2026-09-23T07:40:03.731959"},{"ip_address":"185.157.109.79","report_count":394,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","spam","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-22T12:43:34.929678"},{"ip_address":"95.85.245.227","report_count":390,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","moderate_threat","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack"],"last_seen":"2026-09-23T10:49:38.623756"},{"ip_address":"45.12.28.218","report_count":375,"categories":["malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-23T07:40:07.264229"},{"ip_address":"77.239.126.9","report_count":353,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan"],"last_seen":"2026-09-23T07:40:11.128753"},{"ip_address":"185.157.111.178","report_count":338,"categories":["high_threat","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-23T07:40:23.882905"},{"ip_address":"185.157.111.10","report_count":333,"categories":["suspicious_activity","tcp_scan",null],"last_seen":"2026-08-18T07:10:50.634448"},{"ip_address":"69.12.83.216","report_count":322,"categories":["ssh_bruteforce","tcp_scan",null],"last_seen":"2026-07-21T20:50:26.044843"},{"ip_address":"85.29.197.188","report_count":271,"categories":[null],"last_seen":"2026-07-05T15:10:31.265575"},{"ip_address":"78.28.117.27","report_count":263,"categories":[null],"last_seen":"2026-07-02T02:50:27.553437"},{"ip_address":"195.250.169.2","report_count":261,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan"],"last_seen":"2026-09-23T02:50:43.741689"}]}