{"country_code":"RO","statistics":{"total_reports":635989,"unique_ips":23856,"first_seen":"2023-02-17T10:46:02","last_seen":"2026-10-04T07:47:12.525464","unique_categories":18,"reports_24h":3309,"unique_ips_24h":623},"categories":[{"category":"tcp_scan","count":87501,"unique_ips":835},{"category":"high_threat","count":41441,"unique_ips":717},{"category":"suspicious_activity","count":36591,"unique_ips":2660},{"category":"ssh_bruteforce","count":35204,"unique_ips":354},{"category":"malware_distribution","count":14364,"unique_ips":974},{"category":"generic_bruteforce","count":3651,"unique_ips":537},{"category":"severe_abuse","count":3513,"unique_ips":337},{"category":"spam","count":2563,"unique_ips":763},{"category":"intrusion_attempt","count":1703,"unique_ips":1147},{"category":"malware_c2","count":1462,"unique_ips":78},{"category":"moderate_threat","count":671,"unique_ips":196},{"category":"web_attack","count":555,"unique_ips":332},{"category":"botnet_c2","count":240,"unique_ips":11},{"category":"repeat_offender","count":190,"unique_ips":69},{"category":"proxy_abuse","count":65,"unique_ips":52},{"category":"sip_bruteforce","count":27,"unique_ips":27},{"category":"professional_threat","count":20,"unique_ips":4},{"category":"mail_bruteforce","count":15,"unique_ips":15},{"category":"web_scanner","count":8,"unique_ips":8},{"category":"rdp_bruteforce","count":4,"unique_ips":3}],"severity_distribution":[{"severity":"critical","count":126252},{"severity":"high","count":280300},{"severity":"medium","count":52671},{"severity":"low","count":176766}],"time_series":[{"date":"2026-09-04","reports":2346,"unique_ips":669},{"date":"2026-09-05","reports":2372,"unique_ips":890},{"date":"2026-09-06","reports":2037,"unique_ips":641},{"date":"2026-09-07","reports":1936,"unique_ips":601},{"date":"2026-09-08","reports":1917,"unique_ips":583},{"date":"2026-09-09","reports":2040,"unique_ips":580},{"date":"2026-09-10","reports":2088,"unique_ips":589},{"date":"2026-09-11","reports":1901,"unique_ips":563},{"date":"2026-09-12","reports":1897,"unique_ips":567},{"date":"2026-09-13","reports":1903,"unique_ips":605},{"date":"2026-09-14","reports":3262,"unique_ips":670},{"date":"2026-09-15","reports":3128,"unique_ips":643},{"date":"2026-09-16","reports":3053,"unique_ips":651},{"date":"2026-09-17","reports":2894,"unique_ips":636},{"date":"2026-09-18","reports":3040,"unique_ips":640},{"date":"2026-09-19","reports":3309,"unique_ips":640},{"date":"2026-09-20","reports":3289,"unique_ips":685},{"date":"2026-09-21","reports":3034,"unique_ips":690},{"date":"2026-09-22","reports":3096,"unique_ips":689},{"date":"2026-09-23","reports":3030,"unique_ips":695},{"date":"2026-09-24","reports":2954,"unique_ips":679},{"date":"2026-09-25","reports":3076,"unique_ips":680},{"date":"2026-09-26","reports":3007,"unique_ips":685},{"date":"2026-09-27","reports":2730,"unique_ips":628},{"date":"2026-09-28","reports":3265,"unique_ips":650},{"date":"2026-09-29","reports":3208,"unique_ips":655},{"date":"2026-09-30","reports":3369,"unique_ips":639},{"date":"2026-10-01","reports":3217,"unique_ips":625},{"date":"2026-10-02","reports":3337,"unique_ips":628},{"date":"2026-10-03","reports":3219,"unique_ips":639}],"top_ips":[{"ip_address":"80.94.92.128","report_count":5466,"categories":["botnet_c2","generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:47:12.525464"},{"ip_address":"2.57.122.238","report_count":2690,"categories":["generic_bruteforce","high_threat","malware_distribution","moderate_threat","repeat_offender","ssh_bruteforce","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:02.106920"},{"ip_address":"2.57.121.112","report_count":2346,"categories":["high_threat","malware_distribution","moderate_threat","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:50:57.587894"},{"ip_address":"2.57.121.25","report_count":2238,"categories":["high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:02.106654"},{"ip_address":"193.46.255.86","report_count":2208,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:11.911179"},{"ip_address":"2.57.122.177","report_count":1710,"categories":["generic_bruteforce","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-09-29T07:10:27.710269"},{"ip_address":"45.142.193.164","report_count":1658,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","moderate_threat","repeat_offender","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:10:16.320111"},{"ip_address":"80.94.92.234","report_count":1607,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:51:57.589077"},{"ip_address":"193.32.162.84","report_count":1556,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:11.910430"},{"ip_address":"2.57.122.209","report_count":1525,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:02.106894"},{"ip_address":"80.94.92.55","report_count":1522,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:06.189376"},{"ip_address":"2.57.122.53","report_count":1492,"categories":["generic_bruteforce","high_threat","intrusion_attempt","malware_distribution","moderate_threat","repeat_offender","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:02.106726"},{"ip_address":"2.57.122.168","report_count":1478,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:52.589091"},{"ip_address":"80.94.92.179","report_count":1431,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:45:42.589093"},{"ip_address":"2.57.122.150","report_count":1352,"categories":["generic_bruteforce","high_threat","malware_distribution","repeat_offender","ssh_bruteforce","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:02.106820"},{"ip_address":"82.152.132.24","report_count":1344,"categories":["generic_bruteforce","high_threat","malware_distribution","sip_bruteforce","ssh_bruteforce","suspicious_activity","tcp_scan","web_attack",null],"last_seen":"2026-10-04T07:40:06.194726"},{"ip_address":"92.118.39.203","report_count":1247,"categories":["high_threat","mail_bruteforce","malware_distribution","spam","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:06.978263"},{"ip_address":"92.118.39.210","report_count":1245,"categories":["high_threat","mail_bruteforce","malware_distribution","spam","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:06.978355"},{"ip_address":"92.118.39.214","report_count":1243,"categories":["high_threat","mail_bruteforce","malware_distribution","spam","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:06.978445"},{"ip_address":"92.118.39.209","report_count":1242,"categories":["high_threat","mail_bruteforce","malware_distribution","spam","suspicious_activity","tcp_scan",null],"last_seen":"2026-10-04T07:40:06.978332"}]}