{"ip":"93.177.64.139","total_events":40,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["40 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,070 bytes sent","bytes_sent":1070,"session_seconds":4,"persistent":false}},"first_seen":"2026-09-03T12:23:08","last_seen":"2026-09-29T18:28:19","events_24h":2,"events_7d":6,"geo":{"country_code":"DE","country_name":"Germany","region":"Bavaria","city":"Nuremberg","lat":49.4527,"lon":11.0783,"asn":197540,"org":"netcup GmbH"},"source_domain":"v2202502253716312771.bestsrv.de","known_scanners":[],"scanner_tag":{"key":"peeringdb:as197540","label":"netcup GmbH","category":"cdn","url":"https://www.peeringdb.com/asn/197540"},"cve_matches":[],"malware":[],"top_ports":[{"port":6379,"proto":"tcp","label":"Redis","count":34},{"port":1080,"proto":"tcp","label":"SOCKS","count":2},{"port":16379,"proto":"tcp","label":"","count":2},{"port":6380,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-03","count":4},{"date":"2026-09-04","count":4},{"date":"2026-09-05","count":10},{"date":"2026-09-08","count":2},{"date":"2026-09-09","count":2},{"date":"2026-09-13","count":2},{"date":"2026-09-14","count":4},{"date":"2026-09-19","count":2},{"date":"2026-09-20","count":2},{"date":"2026-09-22","count":2},{"date":"2026-09-28","count":2},{"date":"2026-09-29","count":4}],"recent_events":[{"timestamp":"2026-09-29T18:28:19","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"","session":"a39b6cc6-3889-4008-b008-18e53fdb8678","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":7,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-09-29T18:28:19","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*2\r\n$4\r\nINFO\r\n$8\r\nkeyspace\r\n","payload_hex":"2a320d0a24340d0a494e464f0d0a24380d0a6b657973706163650d0a","method":"","user_agent":"","ja3":"","session":"a39b6cc6-3889-4008-b008-18e53fdb8678","seq":2,"duration_ms":515,"bytes_in":42,"bytes_out":12,"enriched":{"digest":"e55d01bcab337cf3","label":"Redis (RESP)","strings":["INFO","keyspace"]}},{"timestamp":"2026-09-29T03:49:11","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*2\r\n$4\r\nINFO\r\n$8\r\nkeyspace\r\n","payload_hex":"2a320d0a24340d0a494e464f0d0a24380d0a6b657973706163650d0a","method":"","user_agent":"","ja3":"","session":"4fedbb0a-6876-4966-a0d8-21a1a470c7fe","seq":2,"duration_ms":587,"bytes_in":42,"bytes_out":12,"enriched":{"digest":"e55d01bcab337cf3","label":"Redis (RESP)","strings":["INFO","keyspace"]}},{"timestamp":"2026-09-29T03:49:10","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"","session":"4fedbb0a-6876-4966-a0d8-21a1a470c7fe","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":7,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-09-28T03:05:29","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*2\r\n$4\r\nINFO\r\n$8\r\nkeyspace\r\n","payload_hex":"2a320d0a24340d0a494e464f0d0a24380d0a6b657973706163650d0a","method":"","user_agent":"","ja3":"","session":"619a6132-1d98-421c-835c-1895dfaeae92","seq":2,"duration_ms":585,"bytes_in":42,"bytes_out":12,"enriched":{"digest":"e55d01bcab337cf3","label":"Redis (RESP)","strings":["INFO","keyspace"]}},{"timestamp":"2026-09-28T03:05:28","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"","session":"619a6132-1d98-421c-835c-1895dfaeae92","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":7,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-09-22T17:44:09","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*2\r\n$4\r\nINFO\r\n$8\r\nkeyspace\r\n","payload_hex":"2a320d0a24340d0a494e464f0d0a24380d0a6b657973706163650d0a","method":"","user_agent":"","ja3":"","session":"a3a36442-4d74-434f-9741-113005f4945a","seq":2,"duration_ms":538,"bytes_in":42,"bytes_out":12,"enriched":{"digest":"e55d01bcab337cf3","label":"Redis (RESP)","strings":["INFO","keyspace"]}},{"timestamp":"2026-09-22T17:44:08","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"","session":"a3a36442-4d74-434f-9741-113005f4945a","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":7,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-09-20T09:15:08","port":1080,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"14ca2304-2c08-427f-ad4e-c5b526ef8431","seq":1,"duration_ms":101,"bytes_in":3,"bytes_out":13,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-09-20T09:15:07","port":1080,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"0685df2a-88e1-467a-977a-96d0ddec2215","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":13,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}}],"http_methods":[],"distinct_ports_total":4,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-30T11:33:20.816652+00:00"}