{"ip":"124.236.108.172","data_as_of":"2026-10-23T03:46:21+00:00","observed":true,"total_events":22,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["22 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"286 bytes sent","bytes_sent":286,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-09-14T03:30:51","last_seen":"2026-10-22T22:23:56","events_24h":1,"events_7d":2,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"CN","country_name":"China","region":"","city":"","lat":34.7732,"lon":113.722,"asn":134760,"org":"Shijiazhuang IDC network, CHINANET Hebei province"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":6379,"proto":"tcp","label":"Redis","count":22}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-14","count":2},{"date":"2026-10-11","count":18},{"date":"2026-10-16","count":1},{"date":"2026-10-22","count":1}],"recent_events":[{"timestamp":"2026-10-22T22:23:56","port":6379,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"info server\r\n","payload_hex":"696e666f207365727665720d0a","method":"","user_agent":"","ja3":"","session":"4c6a38e1-f1a8-4163-8bf3-bf048ca1afce","seq":1,"duration_ms":100,"bytes_in":13,"bytes_out":5,"enriched":{"digest":"7c59a57ce2b164f2","strings":["info server"]}},{"timestamp":"2026-10-16T12:45:22","port":6379,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"info server\r\n","payload_hex":"696e666f207365727665720d0a","method":"","user_agent":"","ja3":"","session":"be5a85d5-587f-4212-9074-b1b72f0476a1","seq":1,"duration_ms":100,"bytes_in":13,"bytes_out":5,"enriched":{"digest":"7c59a57ce2b164f2","strings":["info server"]}},{"timestamp":"2026-10-11T12:02:25","port":6379,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"info server\r\n","payload_hex":"696e666f207365727665720d0a","method":"","user_agent":"","ja3":"","session":"ae8dee34-b0c7-4cf4-9fa1-d2de82d67b0a","seq":1,"duration_ms":100,"bytes_in":13,"bytes_out":5,"enriched":{"digest":"7c59a57ce2b164f2","strings":["info server"]}},{"timestamp":"2026-10-11T12:00:46","port":6379,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"info server\r\n","payload_hex":"696e666f207365727665720d0a","method":"","user_agent":"","ja3":"","session":"6aee4b83-1e0b-4229-b81f-e5c903a8b9ed","seq":1,"duration_ms":100,"bytes_in":13,"bytes_out":5,"enriched":{"digest":"7c59a57ce2b164f2","strings":["info server"]}},{"timestamp":"2026-10-11T11:59:39","port":6379,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"info server\r\n","payload_hex":"696e666f207365727665720d0a","method":"","user_agent":"","ja3":"","session":"8a085116-4845-44f1-84d9-c7713e0add4a","seq":1,"duration_ms":100,"bytes_in":13,"bytes_out":5,"enriched":{"digest":"7c59a57ce2b164f2","strings":["info server"]}},{"timestamp":"2026-10-11T11:58:32","port":6379,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"info server\r\n","payload_hex":"696e666f207365727665720d0a","method":"","user_agent":"","ja3":"","session":"1122bf1a-f5a7-4b1e-bd4c-fd39862d8257","seq":1,"duration_ms":100,"bytes_in":13,"bytes_out":5,"enriched":{"digest":"7c59a57ce2b164f2","strings":["info server"]}},{"timestamp":"2026-10-11T11:57:26","port":6379,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"info server\r\n","payload_hex":"696e666f207365727665720d0a","method":"","user_agent":"","ja3":"","session":"8d86a7e5-5e35-427e-ba50-50be325be8d4","seq":1,"duration_ms":100,"bytes_in":13,"bytes_out":5,"enriched":{"digest":"7c59a57ce2b164f2","strings":["info server"]}},{"timestamp":"2026-10-11T11:56:19","port":6379,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"info server\r\n","payload_hex":"696e666f207365727665720d0a","method":"","user_agent":"","ja3":"","session":"2a6283a5-c7b5-4d91-b6d4-e47c330ed805","seq":1,"duration_ms":100,"bytes_in":13,"bytes_out":5,"enriched":{"digest":"7c59a57ce2b164f2","strings":["info server"]}},{"timestamp":"2026-10-11T11:55:13","port":6379,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"info server\r\n","payload_hex":"696e666f207365727665720d0a","method":"","user_agent":"","ja3":"","session":"e10c7166-b566-4e34-a9c1-64b74b050a75","seq":1,"duration_ms":100,"bytes_in":13,"bytes_out":5,"enriched":{"digest":"7c59a57ce2b164f2","strings":["info server"]}},{"timestamp":"2026-10-11T11:54:06","port":6379,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"info server\r\n","payload_hex":"696e666f207365727665720d0a","method":"","user_agent":"","ja3":"","session":"ef970cd1-3e15-4cd0-840c-4255e12dd294","seq":1,"duration_ms":100,"bytes_in":13,"bytes_out":5,"enriched":{"digest":"7c59a57ce2b164f2","strings":["info server"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}