{"country_code":"KE","statistics":{"total_reports":555930,"unique_ips":11220,"first_seen":"2022-12-10T10:40:48","last_seen":"2026-09-22T16:43:14.807937","unique_categories":14,"reports_24h":1366,"unique_ips_24h":490},"categories":[{"category":"tcp_scan","count":71997,"unique_ips":1059},{"category":"suspicious_activity","count":19116,"unique_ips":2673},{"category":"high_threat","count":8196,"unique_ips":928},{"category":"malware_distribution","count":6446,"unique_ips":1278},{"category":"intrusion_attempt","count":2263,"unique_ips":1520},{"category":"severe_abuse","count":1042,"unique_ips":151},{"category":"ssh_bruteforce","count":1022,"unique_ips":201},{"category":"generic_bruteforce","count":927,"unique_ips":686},{"category":"spam","count":855,"unique_ips":348},{"category":"moderate_threat","count":586,"unique_ips":300},{"category":"web_attack","count":437,"unique_ips":322},{"category":"rdp_bruteforce","count":29,"unique_ips":1},{"category":"malware_c2","count":9,"unique_ips":5},{"category":"sip_bruteforce","count":6,"unique_ips":6},{"category":"email_abuse","count":3,"unique_ips":3},{"category":"botnet_c2","count":3,"unique_ips":2},{"category":"repeat_offender","count":1,"unique_ips":1}],"severity_distribution":[{"severity":"critical","count":36259},{"severity":"high","count":156923},{"severity":"medium","count":26116},{"severity":"low","count":336632}],"time_series":[{"date":"2026-08-23","reports":2201,"unique_ips":605},{"date":"2026-08-24","reports":2191,"unique_ips":602},{"date":"2026-08-25","reports":2288,"unique_ips":584},{"date":"2026-08-26","reports":2306,"unique_ips":592},{"date":"2026-08-27","reports":2341,"unique_ips":596},{"date":"2026-08-28","reports":2292,"unique_ips":599},{"date":"2026-08-29","reports":2237,"unique_ips":584},{"date":"2026-08-30","reports":2261,"unique_ips":583},{"date":"2026-08-31","reports":2200,"unique_ips":569},{"date":"2026-09-01","reports":2114,"unique_ips":575},{"date":"2026-09-02","reports":2196,"unique_ips":621},{"date":"2026-09-03","reports":1762,"unique_ips":620},{"date":"2026-09-04","reports":1992,"unique_ips":533},{"date":"2026-09-05","reports":1949,"unique_ips":534},{"date":"2026-09-06","reports":1932,"unique_ips":527},{"date":"2026-09-07","reports":1888,"unique_ips":512},{"date":"2026-09-08","reports":1833,"unique_ips":490},{"date":"2026-09-09","reports":1794,"unique_ips":506},{"date":"2026-09-10","reports":1742,"unique_ips":470},{"date":"2026-09-11","reports":1707,"unique_ips":480},{"date":"2026-09-12","reports":1744,"unique_ips":500},{"date":"2026-09-13","reports":1807,"unique_ips":522},{"date":"2026-09-14","reports":2166,"unique_ips":558},{"date":"2026-09-15","reports":1440,"unique_ips":590},{"date":"2026-09-16","reports":1512,"unique_ips":596},{"date":"2026-09-17","reports":1491,"unique_ips":573},{"date":"2026-09-18","reports":1524,"unique_ips":559},{"date":"2026-09-19","reports":1496,"unique_ips":535},{"date":"2026-09-20","reports":1522,"unique_ips":524},{"date":"2026-09-21","reports":1477,"unique_ips":521}],"top_ips":[{"ip_address":"197.248.8.33","report_count":1044,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-22T16:32:59.807914"},{"ip_address":"197.248.207.139","report_count":1043,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-22T16:18:49.807474"},{"ip_address":"41.90.100.147","report_count":912,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-22T16:35:19.807923"},{"ip_address":"196.207.177.56","report_count":902,"categories":["high_threat","malware_distribution","spam","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-22T09:09:00.463068"},{"ip_address":"197.248.15.98","report_count":865,"categories":["high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-22T14:20:39.639494"},{"ip_address":"102.213.179.104","report_count":827,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-22T11:10:23.960665"},{"ip_address":"41.72.202.86","report_count":787,"categories":["generic_bruteforce","high_threat","malware_distribution","spam","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-22T14:35:19.639493"},{"ip_address":"105.27.148.94","report_count":787,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-22T07:40:17.875262"},{"ip_address":"41.203.213.8","report_count":768,"categories":["generic_bruteforce","high_threat","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-22T16:24:24.807464"},{"ip_address":"41.90.243.186","report_count":760,"categories":["high_threat","malware_distribution","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-22T02:50:13.641134"},{"ip_address":"102.209.137.222","report_count":750,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-22T02:50:25.624335"},{"ip_address":"102.213.176.14","report_count":736,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-22T07:40:17.083160"},{"ip_address":"197.248.3.28","report_count":711,"categories":["high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-22T09:20:00.463015"},{"ip_address":"197.232.18.79","report_count":707,"categories":["high_threat","malware_distribution","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-22T15:20:38.444972"},{"ip_address":"102.219.210.14","report_count":707,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-22T14:12:04.639492"},{"ip_address":"41.203.212.53","report_count":691,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-22T11:49:43.960669"},{"ip_address":"197.248.114.217","report_count":681,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-21T02:50:41.572205"},{"ip_address":"41.89.128.6","report_count":679,"categories":["high_threat","malware_distribution","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-09T02:50:17.983703"},{"ip_address":"41.89.96.253","report_count":672,"categories":["high_threat","intrusion_attempt","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-22T15:00:33.444985"},{"ip_address":"196.202.169.238","report_count":669,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-09-22T02:50:46.013491"}]}