diff --git a/crowdsec_service_api/__pycache__/__init__.cpython-311.pyc b/crowdsec_service_api/__pycache__/__init__.cpython-311.pyc
index 1638331..d3d1d43 100644
Binary files a/crowdsec_service_api/__pycache__/__init__.cpython-311.pyc and b/crowdsec_service_api/__pycache__/__init__.cpython-311.pyc differ
diff --git a/crowdsec_service_api/__pycache__/base_model.cpython-311.pyc b/crowdsec_service_api/__pycache__/base_model.cpython-311.pyc
index 20476fb..8c72c11 100644
Binary files a/crowdsec_service_api/__pycache__/base_model.cpython-311.pyc and b/crowdsec_service_api/__pycache__/base_model.cpython-311.pyc differ
diff --git a/crowdsec_service_api/__pycache__/http_client.cpython-311.pyc b/crowdsec_service_api/__pycache__/http_client.cpython-311.pyc
index d4fd394..72fae77 100644
Binary files a/crowdsec_service_api/__pycache__/http_client.cpython-311.pyc and b/crowdsec_service_api/__pycache__/http_client.cpython-311.pyc differ
diff --git a/crowdsec_service_api/__pycache__/models.cpython-311.pyc b/crowdsec_service_api/__pycache__/models.cpython-311.pyc
index aa29759..158db5d 100644
Binary files a/crowdsec_service_api/__pycache__/models.cpython-311.pyc and b/crowdsec_service_api/__pycache__/models.cpython-311.pyc differ
diff --git a/crowdsec_service_api/models.py b/crowdsec_service_api/models.py
index 72bb22c..a7277ce 100644
--- a/crowdsec_service_api/models.py
+++ b/crowdsec_service_api/models.py
@@ -1,6 +1,6 @@
 # generated by datamodel-codegen:
 #   filename:  <stdin>
-#   timestamp: 2026-04-21T09:21:23+00:00
+#   timestamp: 2026-04-21T09:59:01+00:00
 
 from __future__ import annotations
 
@@ -1017,6 +1017,7 @@ class ThreatContext(BaseModelSdk):
         Optional[Dict[str, int]],
         Field(
             description='Attacker country distribution (country code → count)',
+            examples=[{'FR': 18, 'NL': 23, 'US': 36}],
             title='Attacker Countries',
         ),
     ] = None
@@ -1024,6 +1025,7 @@ class ThreatContext(BaseModelSdk):
         Optional[Dict[str, int]],
         Field(
             description='Defender country distribution (country code → count)',
+            examples=[{'BE': 13, 'FR': 22, 'NL': 22}],
             title='Defender Countries',
         ),
     ] = None
@@ -1031,6 +1033,7 @@ class ThreatContext(BaseModelSdk):
         Optional[Dict[str, int]],
         Field(
             description='Industry type distribution (type → count)',
+            examples=[{'commerce': 65, 'government': 5, 'non_profit': 30}],
             title='Industry Types',
         ),
     ] = None
@@ -1038,6 +1041,7 @@ class ThreatContext(BaseModelSdk):
         Optional[Dict[str, int]],
         Field(
             description='Industry risk profile distribution (profile → count)',
+            examples=[{'SOHO': 25, 'public_service': 10, 'technology_business': 65}],
             title='Industry Risk Profiles',
         ),
     ] = None
@@ -1045,6 +1049,7 @@ class ThreatContext(BaseModelSdk):
         Optional[Dict[str, int]],
         Field(
             description='Attacker objective distribution (objective → count)',
+            examples=[{'data_exfiltration': 10, 'infrastructure_takeover': 90}],
             title='Attacker Objectives',
         ),
     ] = None
diff --git a/crowdsec_service_api/services/__pycache__/__init__.cpython-311.pyc b/crowdsec_service_api/services/__pycache__/__init__.cpython-311.pyc
index c6a1954..d2dfe14 100644
Binary files a/crowdsec_service_api/services/__pycache__/__init__.cpython-311.pyc and b/crowdsec_service_api/services/__pycache__/__init__.cpython-311.pyc differ
diff --git a/crowdsec_service_api/services/__pycache__/allowlists.cpython-311.pyc b/crowdsec_service_api/services/__pycache__/allowlists.cpython-311.pyc
index 6ea5649..40964ee 100644
Binary files a/crowdsec_service_api/services/__pycache__/allowlists.cpython-311.pyc and b/crowdsec_service_api/services/__pycache__/allowlists.cpython-311.pyc differ
diff --git a/crowdsec_service_api/services/__pycache__/blocklists.cpython-311.pyc b/crowdsec_service_api/services/__pycache__/blocklists.cpython-311.pyc
index 3e7126a..5afdc91 100644
Binary files a/crowdsec_service_api/services/__pycache__/blocklists.cpython-311.pyc and b/crowdsec_service_api/services/__pycache__/blocklists.cpython-311.pyc differ
diff --git a/crowdsec_service_api/services/__pycache__/cves.cpython-311.pyc b/crowdsec_service_api/services/__pycache__/cves.cpython-311.pyc
index 9a07699..774f7aa 100644
Binary files a/crowdsec_service_api/services/__pycache__/cves.cpython-311.pyc and b/crowdsec_service_api/services/__pycache__/cves.cpython-311.pyc differ
diff --git a/crowdsec_service_api/services/__pycache__/decisions.cpython-311.pyc b/crowdsec_service_api/services/__pycache__/decisions.cpython-311.pyc
index 1941bf8..5c95e18 100644
Binary files a/crowdsec_service_api/services/__pycache__/decisions.cpython-311.pyc and b/crowdsec_service_api/services/__pycache__/decisions.cpython-311.pyc differ
diff --git a/crowdsec_service_api/services/__pycache__/fingerprints.cpython-311.pyc b/crowdsec_service_api/services/__pycache__/fingerprints.cpython-311.pyc
index 100a01d..b9eea12 100644
Binary files a/crowdsec_service_api/services/__pycache__/fingerprints.cpython-311.pyc and b/crowdsec_service_api/services/__pycache__/fingerprints.cpython-311.pyc differ
diff --git a/crowdsec_service_api/services/__pycache__/hub.cpython-311.pyc b/crowdsec_service_api/services/__pycache__/hub.cpython-311.pyc
index 54c3d53..b0c8cf9 100644
Binary files a/crowdsec_service_api/services/__pycache__/hub.cpython-311.pyc and b/crowdsec_service_api/services/__pycache__/hub.cpython-311.pyc differ
diff --git a/crowdsec_service_api/services/__pycache__/info.cpython-311.pyc b/crowdsec_service_api/services/__pycache__/info.cpython-311.pyc
index 431d4d1..c2b5b1a 100644
Binary files a/crowdsec_service_api/services/__pycache__/info.cpython-311.pyc and b/crowdsec_service_api/services/__pycache__/info.cpython-311.pyc differ
diff --git a/crowdsec_service_api/services/__pycache__/integrations.cpython-311.pyc b/crowdsec_service_api/services/__pycache__/integrations.cpython-311.pyc
index 98ae2af..7d0979b 100644
Binary files a/crowdsec_service_api/services/__pycache__/integrations.cpython-311.pyc and b/crowdsec_service_api/services/__pycache__/integrations.cpython-311.pyc differ
diff --git a/crowdsec_service_api/services/__pycache__/metrics.cpython-311.pyc b/crowdsec_service_api/services/__pycache__/metrics.cpython-311.pyc
index 319ef0f..9ba00b0 100644
Binary files a/crowdsec_service_api/services/__pycache__/metrics.cpython-311.pyc and b/crowdsec_service_api/services/__pycache__/metrics.cpython-311.pyc differ
diff --git a/crowdsec_service_api/services/__pycache__/products.cpython-311.pyc b/crowdsec_service_api/services/__pycache__/products.cpython-311.pyc
index a5ee5cc..1131282 100644
Binary files a/crowdsec_service_api/services/__pycache__/products.cpython-311.pyc and b/crowdsec_service_api/services/__pycache__/products.cpython-311.pyc differ
diff --git a/crowdsec_service_api/services/__pycache__/tracker_events.cpython-311.pyc b/crowdsec_service_api/services/__pycache__/tracker_events.cpython-311.pyc
index 8bdc48e..dd711bb 100644
Binary files a/crowdsec_service_api/services/__pycache__/tracker_events.cpython-311.pyc and b/crowdsec_service_api/services/__pycache__/tracker_events.cpython-311.pyc differ
diff --git a/crowdsec_service_api/services/__pycache__/tracker_tags.cpython-311.pyc b/crowdsec_service_api/services/__pycache__/tracker_tags.cpython-311.pyc
index 0b93d87..3075ba6 100644
Binary files a/crowdsec_service_api/services/__pycache__/tracker_tags.cpython-311.pyc and b/crowdsec_service_api/services/__pycache__/tracker_tags.cpython-311.pyc differ
diff --git a/crowdsec_service_api/services/__pycache__/vendors.cpython-311.pyc b/crowdsec_service_api/services/__pycache__/vendors.cpython-311.pyc
index fc8e302..bbd29e6 100644
Binary files a/crowdsec_service_api/services/__pycache__/vendors.cpython-311.pyc and b/crowdsec_service_api/services/__pycache__/vendors.cpython-311.pyc differ
diff --git a/crowdsec_service_api/services/allowlists.py b/crowdsec_service_api/services/allowlists.py
index 8076a5e..5db227b 100644
--- a/crowdsec_service_api/services/allowlists.py
+++ b/crowdsec_service_api/services/allowlists.py
@@ -11,7 +11,7 @@
 
 class Allowlists(Service):
     def __init__(self, auth: Auth, base_url: str = "https://admin.api.crowdsec.net/v1") -> None:
-        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.26")
+        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.27")
     
     def list_allowlists(
         self,
diff --git a/crowdsec_service_api/services/blocklists.py b/crowdsec_service_api/services/blocklists.py
index 65bf0d6..4d8f2b9 100644
--- a/crowdsec_service_api/services/blocklists.py
+++ b/crowdsec_service_api/services/blocklists.py
@@ -11,7 +11,7 @@
 
 class Blocklists(Service):
     def __init__(self, auth: Auth, base_url: str = "https://admin.api.crowdsec.net/v1") -> None:
-        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.26")
+        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.27")
     
     def get_blocklists(
         self,
diff --git a/crowdsec_service_api/services/cves.py b/crowdsec_service_api/services/cves.py
index b0d0745..3932698 100644
--- a/crowdsec_service_api/services/cves.py
+++ b/crowdsec_service_api/services/cves.py
@@ -11,7 +11,7 @@
 
 class Cves(Service):
     def __init__(self, auth: Auth, base_url: str = "https://admin.api.crowdsec.net/v1") -> None:
-        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.26")
+        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.27")
     
     def get_cves(
         self,
diff --git a/crowdsec_service_api/services/decisions.py b/crowdsec_service_api/services/decisions.py
index 077a642..d178bd6 100644
--- a/crowdsec_service_api/services/decisions.py
+++ b/crowdsec_service_api/services/decisions.py
@@ -11,7 +11,7 @@
 
 class Decisions(Service):
     def __init__(self, auth: Auth, base_url: str = "https://admin.api.crowdsec.net/v1") -> None:
-        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.26")
+        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.27")
     
     def get_decisions(
         self,
diff --git a/crowdsec_service_api/services/fingerprints.py b/crowdsec_service_api/services/fingerprints.py
index 25d9ac6..886f652 100644
--- a/crowdsec_service_api/services/fingerprints.py
+++ b/crowdsec_service_api/services/fingerprints.py
@@ -11,7 +11,7 @@
 
 class Fingerprints(Service):
     def __init__(self, auth: Auth, base_url: str = "https://admin.api.crowdsec.net/v1") -> None:
-        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.26")
+        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.27")
     
     def get_fingerprint_rules(
         self,
diff --git a/crowdsec_service_api/services/hub.py b/crowdsec_service_api/services/hub.py
index d488520..5ed41ca 100644
--- a/crowdsec_service_api/services/hub.py
+++ b/crowdsec_service_api/services/hub.py
@@ -11,7 +11,7 @@
 
 class Hub(Service):
     def __init__(self, auth: Auth, base_url: str = "https://admin.api.crowdsec.net/v1") -> None:
-        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.26")
+        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.27")
     
     def get_index(
         self,
diff --git a/crowdsec_service_api/services/info.py b/crowdsec_service_api/services/info.py
index 9137d39..53d3dc8 100644
--- a/crowdsec_service_api/services/info.py
+++ b/crowdsec_service_api/services/info.py
@@ -11,7 +11,7 @@
 
 class Info(Service):
     def __init__(self, auth: Auth, base_url: str = "https://admin.api.crowdsec.net/v1") -> None:
-        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.26")
+        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.27")
     
     def get_info(
         self,
diff --git a/crowdsec_service_api/services/integrations.py b/crowdsec_service_api/services/integrations.py
index d5e2589..957c91b 100644
--- a/crowdsec_service_api/services/integrations.py
+++ b/crowdsec_service_api/services/integrations.py
@@ -11,7 +11,7 @@
 
 class Integrations(Service):
     def __init__(self, auth: Auth, base_url: str = "https://admin.api.crowdsec.net/v1") -> None:
-        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.26")
+        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.27")
     
     def get_integrations(
         self,
diff --git a/crowdsec_service_api/services/metrics.py b/crowdsec_service_api/services/metrics.py
index df84939..46eb3e8 100644
--- a/crowdsec_service_api/services/metrics.py
+++ b/crowdsec_service_api/services/metrics.py
@@ -11,7 +11,7 @@
 
 class Metrics(Service):
     def __init__(self, auth: Auth, base_url: str = "https://admin.api.crowdsec.net/v1") -> None:
-        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.26")
+        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.27")
     
     def get_metrics_remediation(
         self,
diff --git a/crowdsec_service_api/services/products.py b/crowdsec_service_api/services/products.py
index 02e32df..6a79d78 100644
--- a/crowdsec_service_api/services/products.py
+++ b/crowdsec_service_api/services/products.py
@@ -11,7 +11,7 @@
 
 class Products(Service):
     def __init__(self, auth: Auth, base_url: str = "https://admin.api.crowdsec.net/v1") -> None:
-        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.26")
+        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.27")
     
     def get_products(
         self,
diff --git a/crowdsec_service_api/services/tracker_events.py b/crowdsec_service_api/services/tracker_events.py
index eddace0..2636ea2 100644
--- a/crowdsec_service_api/services/tracker_events.py
+++ b/crowdsec_service_api/services/tracker_events.py
@@ -11,7 +11,7 @@
 
 class TrackerEvents(Service):
     def __init__(self, auth: Auth, base_url: str = "https://admin.api.crowdsec.net/v1") -> None:
-        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.26")
+        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.27")
     
     def get_exploitation_phase_change_events(
         self,
diff --git a/crowdsec_service_api/services/tracker_tags.py b/crowdsec_service_api/services/tracker_tags.py
index 5485b3f..1379898 100644
--- a/crowdsec_service_api/services/tracker_tags.py
+++ b/crowdsec_service_api/services/tracker_tags.py
@@ -11,7 +11,7 @@
 
 class TrackerTags(Service):
     def __init__(self, auth: Auth, base_url: str = "https://admin.api.crowdsec.net/v1") -> None:
-        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.26")
+        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.27")
     
     def get_tags(
         self,
diff --git a/crowdsec_service_api/services/vendors.py b/crowdsec_service_api/services/vendors.py
index c5ae5fb..41f8520 100644
--- a/crowdsec_service_api/services/vendors.py
+++ b/crowdsec_service_api/services/vendors.py
@@ -11,7 +11,7 @@
 
 class Vendors(Service):
     def __init__(self, auth: Auth, base_url: str = "https://admin.api.crowdsec.net/v1") -> None:
-        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.26")
+        super().__init__(base_url=base_url, auth=auth, user_agent="crowdsec_service_api/v0.15.27")
     
     def get_vendors(
         self,
diff --git a/public-openapi.json b/public-openapi.json
index 0492c9e..f25f3b5 100644
--- a/public-openapi.json
+++ b/public-openapi.json
@@ -3,7 +3,7 @@
   "info": {
     "title": "Service API",
     "description": "This is the API to manage Crowdsec services",
-    "version": "1.70.4",
+    "version": "1.70.5",
     "contact": {
       "name": "CrowdSec",
       "url": "https://crowdsec.net",
@@ -13402,7 +13402,14 @@
             },
             "type": "object",
             "title": "Attacker Countries",
-            "description": "Attacker country distribution (country code \u2192 count)"
+            "description": "Attacker country distribution (country code \u2192 count)",
+            "examples": [
+              {
+                "FR": 18,
+                "NL": 23,
+                "US": 36
+              }
+            ]
           },
           "defender_countries": {
             "additionalProperties": {
@@ -13410,7 +13417,14 @@
             },
             "type": "object",
             "title": "Defender Countries",
-            "description": "Defender country distribution (country code \u2192 count)"
+            "description": "Defender country distribution (country code \u2192 count)",
+            "examples": [
+              {
+                "BE": 13,
+                "FR": 22,
+                "NL": 22
+              }
+            ]
           },
           "industry_types": {
             "additionalProperties": {
@@ -13421,7 +13435,14 @@
             },
             "type": "object",
             "title": "Industry Types",
-            "description": "Industry type distribution (type \u2192 count)"
+            "description": "Industry type distribution (type \u2192 count)",
+            "examples": [
+              {
+                "commerce": 65,
+                "government": 5,
+                "non_profit": 30
+              }
+            ]
           },
           "industry_risk_profiles": {
             "additionalProperties": {
@@ -13432,7 +13453,14 @@
             },
             "type": "object",
             "title": "Industry Risk Profiles",
-            "description": "Industry risk profile distribution (profile \u2192 count)"
+            "description": "Industry risk profile distribution (profile \u2192 count)",
+            "examples": [
+              {
+                "SOHO": 25,
+                "public_service": 10,
+                "technology_business": 65
+              }
+            ]
           },
           "attacker_objectives": {
             "additionalProperties": {
@@ -13443,7 +13471,13 @@
             },
             "type": "object",
             "title": "Attacker Objectives",
-            "description": "Attacker objective distribution (objective \u2192 count)"
+            "description": "Attacker objective distribution (objective \u2192 count)",
+            "examples": [
+              {
+                "data_exfiltration": 10,
+                "infrastructure_takeover": 90
+              }
+            ]
           }
         },
         "type": "object",
diff --git a/pyproject.toml b/pyproject.toml
index a0f93d8..aaf6fef 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "crowdsec_service_api"
-version = "v0.15.26"
+version = "v0.15.27"
 license = { text = "MIT" }
 authors = [
 	{ name="crowdsec", email="info@crowdsec.net" }
diff --git a/uv.lock b/uv.lock
index 613efa8..ce371b5 100644
--- a/uv.lock
+++ b/uv.lock
@@ -49,7 +49,7 @@ wheels = [
 
 [[package]]
 name = "crowdsec-service-api"
-version = "0.15.26"
+version = "0.15.27"
 source = { editable = "." }
 dependencies = [
     { name = "botocore" },