{"ip":"45.115.26.21","data_as_of":"2026-10-26T06:40:53+00:00","observed":true,"total_events":21,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["21 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,178 bytes sent","bytes_sent":1178,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-22T21:02:10","last_seen":"2026-10-22T21:02:16","events_24h":0,"events_7d":21,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"HK","country_name":"Hong Kong","region":"","city":"","lat":22.2578,"lon":114.1657,"asn":199457,"org":"SolidCore Hosting LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":6379,"proto":"tcp","label":"Redis","count":21}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-22","count":21}],"recent_events":[{"timestamp":"2026-10-22T21:02:16","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$10\r\nddad669998\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a2431300d0a646461643636393939380d0a","method":"","user_agent":"","ja3":"","session":"0734f3ea-3d79-4867-9a6f-55ca0783223f","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":5,"enriched":{"digest":"19acd2f249cde611","label":"Redis (RESP)","strings":["hello","auth","redis","ddad669998"]}},{"timestamp":"2026-10-22T21:02:15","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$4\r\nuser\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a24340d0a757365720d0a","method":"","user_agent":"","ja3":"","session":"ac13d4c5-79ea-443c-a73c-022fa813f57f","seq":1,"duration_ms":100,"bytes_in":53,"bytes_out":5,"enriched":{"digest":"5a22ae3ea506d5af","label":"Redis (RESP)","strings":["hello","auth","redis","user"]}},{"timestamp":"2026-10-22T21:02:15","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$6\r\n123456\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a24360d0a3132333435360d0a","method":"","user_agent":"","ja3":"","session":"07350396-ebb2-4677-9617-4536cfa0afd9","seq":1,"duration_ms":100,"bytes_in":55,"bytes_out":5,"enriched":{"digest":"5fab9906c8ec6c50","label":"Redis (RESP)","strings":["hello","auth","redis","123456"]}},{"timestamp":"2026-10-22T21:02:15","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$5\r\nadmin\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a24350d0a61646d696e0d0a","method":"","user_agent":"","ja3":"","session":"4c16e31b-3b74-46be-a5fe-bbb1bb3446e0","seq":1,"duration_ms":100,"bytes_in":54,"bytes_out":5,"enriched":{"digest":"c76373d3a137b5c8","label":"Redis (RESP)","strings":["hello","auth","redis","admin"]}},{"timestamp":"2026-10-22T21:02:15","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$7\r\n1527308\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a24370d0a313532373330380d0a","method":"","user_agent":"","ja3":"","session":"1ffca90b-c2d5-4976-997d-5374a464c6a6","seq":1,"duration_ms":100,"bytes_in":56,"bytes_out":5,"enriched":{"digest":"5a3f53640120da1e","label":"Redis (RESP)","strings":["hello","auth","redis","1527308"]}},{"timestamp":"2026-10-22T21:02:14","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$7\r\n7755151\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a24370d0a373735353135310d0a","method":"","user_agent":"","ja3":"","session":"2246dc9e-9fad-43b3-9f72-8e64b0e057cd","seq":1,"duration_ms":100,"bytes_in":56,"bytes_out":5,"enriched":{"digest":"c3fbdb24836951e7","label":"Redis (RESP)","strings":["hello","auth","redis","7755151"]}},{"timestamp":"2026-10-22T21:02:14","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$6\r\nlysmf7\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a24360d0a6c79736d66370d0a","method":"","user_agent":"","ja3":"","session":"03bfaa52-ed7f-427c-9c36-848058074c47","seq":1,"duration_ms":100,"bytes_in":55,"bytes_out":5,"enriched":{"digest":"0b25f35fadffbbb1","label":"Redis (RESP)","strings":["hello","auth","redis","lysmf7"]}},{"timestamp":"2026-10-22T21:02:14","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$8\r\nab881228\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a24380d0a61623838313232380d0a","method":"","user_agent":"","ja3":"","session":"ed322beb-10e8-4d2a-bcc9-ff968113747b","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":5,"enriched":{"digest":"f81b873cac5bc9d2","label":"Redis (RESP)","strings":["hello","auth","redis","ab881228"]}},{"timestamp":"2026-10-22T21:02:13","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$40\r\n3a962e28759ce207af1ddc9dedda8f926cbf856c\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a2434300d0a336139363265323837353963653230376166316464633964656464613866393236636266383536630d0a","method":"","user_agent":"","ja3":"","session":"90c8239e-6387-4695-92ea-035c413058eb","seq":1,"duration_ms":100,"bytes_in":90,"bytes_out":5,"enriched":{"digest":"6c25d157451cf661","label":"Redis (RESP)","strings":["hello","auth","redis","3a962e28759ce207af1ddc9dedda8f926cbf856c"]}},{"timestamp":"2026-10-22T21:02:13","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$10\r\n1442899562\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a2431300d0a313434323839393536320d0a","method":"","user_agent":"","ja3":"","session":"2192cb72-4e07-49c0-8b46-ba3a29ad7398","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":5,"enriched":{"digest":"6e26ef9e97182c8a","label":"Redis (RESP)","strings":["hello","auth","redis","1442899562"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}