{"ip":"144.172.64.19","data_as_of":"2026-10-23T03:39:07+00:00","observed":true,"total_events":54,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["54 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 6,060 bytes to few ports with no known exploit path, which is focused interaction with one service."],"engagement":{"level":"payload","label":"Sustained payload","detail":"6,060 bytes sent","bytes_sent":6060,"session_seconds":3,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-08T19:28:32","last_seen":"2026-10-09T18:52:50","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"AU","country_name":"Australia","region":"New South Wales","city":"Sydney","lat":-33.8672,"lon":151.1997,"asn":14956,"org":"RouterHosting LLC"},"source_domain":"19.64.172.144.static.cloudzy.com","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":6379,"proto":"tcp","label":"Redis","count":54}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-08","count":9},{"date":"2026-10-09","count":45}],"recent_events":[{"timestamp":"2026-10-09T18:52:50","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*2\r\n$3\r\nACL\r\n$6\r\nWHOAMI\r\n","payload_hex":"2a320d0a24330d0a41434c0d0a24360d0a57484f414d490d0a","method":"","user_agent":"","ja3":"","session":"fff576d9-852f-4e37-bca7-64a87b8a3e13","seq":8,"duration_ms":2969,"bytes_in":187,"bytes_out":42,"enriched":{"digest":"3598c4ce21d73c3a","label":"Redis (RESP)","strings":["WHOAMI"]}},{"timestamp":"2026-10-09T18:52:50","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*3\r\n$7\r\nSLOWLOG\r\n$3\r\nGET\r\n$2\r\n10\r\n","payload_hex":"2a330d0a24370d0a534c4f574c4f470d0a24330d0a4745540d0a24320d0a31300d0a","method":"","user_agent":"","ja3":"","session":"fff576d9-852f-4e37-bca7-64a87b8a3e13","seq":9,"duration_ms":3356,"bytes_in":221,"bytes_out":47,"enriched":{"digest":"eca8b65e43bebdbb","label":"Redis (RESP)","strings":["SLOWLOG"]}},{"timestamp":"2026-10-09T18:52:49","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*2\r\n$6\r\nMODULE\r\n$4\r\nLIST\r\n","payload_hex":"2a320d0a24360d0a4d4f44554c450d0a24340d0a4c4953540d0a","method":"","user_agent":"","ja3":"","session":"fff576d9-852f-4e37-bca7-64a87b8a3e13","seq":6,"duration_ms":2197,"bytes_in":139,"bytes_out":32,"enriched":{"digest":"d307cfbaf75aae55","label":"Redis (RESP)","strings":["MODULE","LIST"]}},{"timestamp":"2026-10-09T18:52:49","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*2\r\n$3\r\nACL\r\n$4\r\nLIST\r\n","payload_hex":"2a320d0a24330d0a41434c0d0a24340d0a4c4953540d0a","method":"","user_agent":"","ja3":"","session":"fff576d9-852f-4e37-bca7-64a87b8a3e13","seq":7,"duration_ms":2584,"bytes_in":162,"bytes_out":37,"enriched":{"digest":"ce2a892d69e3193c","label":"Redis (RESP)","strings":["LIST"]}},{"timestamp":"2026-10-09T18:52:48","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*3\r\n$6\r\nCONFIG\r\n$3\r\nGET\r\n$1\r\n*\r\n","payload_hex":"2a330d0a24360d0a434f4e4649470d0a24330d0a4745540d0a24310d0a2a0d0a","method":"","user_agent":"","ja3":"","session":"fff576d9-852f-4e37-bca7-64a87b8a3e13","seq":3,"duration_ms":971,"bytes_in":60,"bytes_out":17,"enriched":{"digest":"0ea7929dfbfb2b3a","label":"Redis (RESP)","strings":["CONFIG"]}},{"timestamp":"2026-10-09T18:52:48","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*2\r\n$6\r\nCLIENT\r\n$4\r\nLIST\r\n","payload_hex":"2a320d0a24360d0a434c49454e540d0a24340d0a4c4953540d0a","method":"","user_agent":"","ja3":"","session":"fff576d9-852f-4e37-bca7-64a87b8a3e13","seq":4,"duration_ms":1356,"bytes_in":86,"bytes_out":22,"enriched":{"digest":"c8c3a9e720cfed9f","label":"Redis (RESP)","strings":["CLIENT","LIST"]}},{"timestamp":"2026-10-09T18:52:48","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*2\r\n$7\r\nCLUSTER\r\n$4\r\nINFO\r\n","payload_hex":"2a320d0a24370d0a434c55535445520d0a24340d0a494e464f0d0a","method":"","user_agent":"","ja3":"","session":"fff576d9-852f-4e37-bca7-64a87b8a3e13","seq":5,"duration_ms":1740,"bytes_in":113,"bytes_out":27,"enriched":{"digest":"05e971f20563b993","label":"Redis (RESP)","strings":["CLUSTER","INFO"]}},{"timestamp":"2026-10-09T18:52:47","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"","session":"fff576d9-852f-4e37-bca7-64a87b8a3e13","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":7,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-10-09T18:52:47","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nINFO\r\n","payload_hex":"2a310d0a24340d0a494e464f0d0a","method":"","user_agent":"","ja3":"","session":"fff576d9-852f-4e37-bca7-64a87b8a3e13","seq":2,"duration_ms":585,"bytes_in":28,"bytes_out":12,"enriched":{"digest":"2c31890b53b348f2","label":"Redis (RESP)","strings":["INFO"]}},{"timestamp":"2026-10-09T18:16:31","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*2\r\n$3\r\nACL\r\n$6\r\nWHOAMI\r\n","payload_hex":"2a320d0a24330d0a41434c0d0a24360d0a57484f414d490d0a","method":"","user_agent":"","ja3":"","session":"6275f9eb-a618-48c1-b968-622523622096","seq":8,"duration_ms":2447,"bytes_in":187,"bytes_out":42,"enriched":{"digest":"3598c4ce21d73c3a","label":"Redis (RESP)","strings":["WHOAMI"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}