{"ip":"45.115.26.33","data_as_of":"2026-10-26T06:40:18+00:00","observed":true,"total_events":26,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["26 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,453 bytes sent","bytes_sent":1453,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-15T14:01:14","last_seen":"2026-10-22T21:31:10","events_24h":0,"events_7d":21,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"HK","country_name":"Hong Kong","region":"","city":"","lat":22.2578,"lon":114.1657,"asn":199457,"org":"SolidCore Hosting LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":6379,"proto":"tcp","label":"Redis","count":21},{"port":2222,"proto":"tcp","label":"SSH-alt","count":2},{"port":2083,"proto":"tcp","label":"","count":2},{"port":3389,"proto":"tcp","label":"RDP","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i311000_e8f1e7e78f70_d41ae481755e"],"tls_client_hello":"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","tls_ja3":["c12b4ccd5320bbb380ca1a9df90f771d"],"http_akin":["b10cun020_00040010_724c10fb"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i311000_e8f1e7e78f70_d41ae481755e":688,"b10cun020_00040010_724c10fb":41},"akin_families":{},"user_agents":["Mozilla/5.0"],"timeline":[{"date":"2026-10-15","count":5},{"date":"2026-10-22","count":21}],"recent_events":[{"timestamp":"2026-10-22T21:31:10","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$10\r\nddad669998\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a2431300d0a646461643636393939380d0a","method":"","user_agent":"","ja3":"","session":"1bb02bc8-cf66-43cf-859b-4594961bbdc6","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":5,"enriched":{"digest":"19acd2f249cde611","label":"Redis (RESP)","strings":["hello","auth","redis","ddad669998"]}},{"timestamp":"2026-10-22T21:31:10","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$4\r\nuser\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a24340d0a757365720d0a","method":"","user_agent":"","ja3":"","session":"6ff45393-caa8-4a97-9fd3-b9fa87e39816","seq":1,"duration_ms":100,"bytes_in":53,"bytes_out":5,"enriched":{"digest":"5a22ae3ea506d5af","label":"Redis (RESP)","strings":["hello","auth","redis","user"]}},{"timestamp":"2026-10-22T21:31:09","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$6\r\n123456\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a24360d0a3132333435360d0a","method":"","user_agent":"","ja3":"","session":"cc3f42eb-6f1e-4f55-a032-3916d5a8bda6","seq":1,"duration_ms":100,"bytes_in":55,"bytes_out":5,"enriched":{"digest":"5fab9906c8ec6c50","label":"Redis (RESP)","strings":["hello","auth","redis","123456"]}},{"timestamp":"2026-10-22T21:31:08","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$5\r\nadmin\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a24350d0a61646d696e0d0a","method":"","user_agent":"","ja3":"","session":"610c6293-b44f-4f40-ab05-30ae733df8db","seq":1,"duration_ms":100,"bytes_in":54,"bytes_out":5,"enriched":{"digest":"c76373d3a137b5c8","label":"Redis (RESP)","strings":["hello","auth","redis","admin"]}},{"timestamp":"2026-10-22T21:31:08","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$7\r\n1527308\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a24370d0a313532373330380d0a","method":"","user_agent":"","ja3":"","session":"85a63454-7e39-4fd5-a779-81f708da4c8a","seq":1,"duration_ms":100,"bytes_in":56,"bytes_out":5,"enriched":{"digest":"5a3f53640120da1e","label":"Redis (RESP)","strings":["hello","auth","redis","1527308"]}},{"timestamp":"2026-10-22T21:31:07","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$7\r\n7755151\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a24370d0a373735353135310d0a","method":"","user_agent":"","ja3":"","session":"7cbe6a6c-3309-49e9-b5cb-308356170177","seq":1,"duration_ms":101,"bytes_in":56,"bytes_out":5,"enriched":{"digest":"c3fbdb24836951e7","label":"Redis (RESP)","strings":["hello","auth","redis","7755151"]}},{"timestamp":"2026-10-22T21:31:07","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$6\r\nlysmf7\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a24360d0a6c79736d66370d0a","method":"","user_agent":"","ja3":"","session":"e02171e0-4a6e-4fff-aaa8-92b50cbde414","seq":1,"duration_ms":100,"bytes_in":55,"bytes_out":5,"enriched":{"digest":"0b25f35fadffbbb1","label":"Redis (RESP)","strings":["hello","auth","redis","lysmf7"]}},{"timestamp":"2026-10-22T21:31:07","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$8\r\nab881228\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a24380d0a61623838313232380d0a","method":"","user_agent":"","ja3":"","session":"87fa86ec-dcfa-452c-817d-0adc7ff5cb5e","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":5,"enriched":{"digest":"f81b873cac5bc9d2","label":"Redis (RESP)","strings":["hello","auth","redis","ab881228"]}},{"timestamp":"2026-10-22T21:31:06","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$40\r\n3a962e28759ce207af1ddc9dedda8f926cbf856c\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a2434300d0a336139363265323837353963653230376166316464633964656464613866393236636266383536630d0a","method":"","user_agent":"","ja3":"","session":"eb99949c-0dd7-42d4-a78c-6540077137a3","seq":1,"duration_ms":100,"bytes_in":90,"bytes_out":5,"enriched":{"digest":"6c25d157451cf661","label":"Redis (RESP)","strings":["hello","auth","redis","3a962e28759ce207af1ddc9dedda8f926cbf856c"]}},{"timestamp":"2026-10-22T21:31:06","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*5\r\n$5\r\nhello\r\n$1\r\n3\r\n$4\r\nauth\r\n$5\r\nredis\r\n$10\r\n1442899562\r\n","payload_hex":"2a350d0a24350d0a68656c6c6f0d0a24310d0a330d0a24340d0a617574680d0a24350d0a72656469730d0a2431300d0a313434323839393536320d0a","method":"","user_agent":"","ja3":"","session":"b1472cc3-9b96-4514-8292-800c46e5b378","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":5,"enriched":{"digest":"6e26ef9e97182c8a","label":"Redis (RESP)","strings":["hello","auth","redis","1442899562"]}}],"http_methods":[{"method":"GET","count":4}],"distinct_ports_total":4,"top_paths":[{"path":"/","count":4,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}