{"ip":"128.14.232.117","total_events":56,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["56 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 13,856 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"13,856 bytes sent","bytes_sent":13856,"session_seconds":4,"persistent":false}},"first_seen":"2026-09-14T23:07:22","last_seen":"2026-09-19T19:16:34","events_24h":0,"events_7d":42,"geo":{"country_code":"US","country_name":"United States","region":"California","city":"Los Angeles","lat":34.0544,"lon":-118.244,"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":20000,"proto":"tcp","label":"","count":27},{"port":49667,"proto":"tcp","label":"","count":8},{"port":2332,"proto":"tcp","label":"","count":7},{"port":60152,"proto":"tcp","label":"","count":7},{"port":12239,"proto":"tcp","label":"","count":7}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i130900_f57a46bbacb6_e7c285222651"],"tls_client_hello":"","tls_ja3":["6639916abfac56b9257ca216677085bc"],"http_akin":[]},"fingerprint_peers":{"t13i130900_f57a46bbacb6_e7c285222651":4416},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"],"timeline":[{"date":"2026-09-14","count":7},{"date":"2026-09-15","count":7},{"date":"2026-09-17","count":8},{"date":"2026-09-18","count":7},{"date":"2026-09-19","count":27}],"recent_events":[{"timestamp":"2026-09-19T19:16:34","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**51##","payload_hex":"2a2331332a2a35312323","method":"","user_agent":"","ja3":"","session":"aaa12564-c54a-4cd6-a9cd-b507041dc200","seq":15,"duration_ms":3850,"bytes_in":148,"bytes_out":210,"enriched":{"digest":"e3c1c87d1b46000a","label":"Redis (RESP)","strings":["*#13**51##"]}},{"timestamp":"2026-09-19T19:16:34","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**52##","payload_hex":"2a2331332a2a35322323","method":"","user_agent":"","ja3":"","session":"aaa12564-c54a-4cd6-a9cd-b507041dc200","seq":16,"duration_ms":4117,"bytes_in":158,"bytes_out":224,"enriched":{"digest":"eed2a2977615f80f","label":"Redis (RESP)","strings":["*#13**52##"]}},{"timestamp":"2026-09-19T19:16:33","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**50##","payload_hex":"2a2331332a2a35302323","method":"","user_agent":"","ja3":"","session":"aaa12564-c54a-4cd6-a9cd-b507041dc200","seq":14,"duration_ms":3583,"bytes_in":138,"bytes_out":196,"enriched":{"digest":"29f249ec11695da5","label":"Redis (RESP)","strings":["*#13**50##"]}},{"timestamp":"2026-09-19T19:16:33","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**24##","payload_hex":"2a2331332a2a32342323","method":"","user_agent":"","ja3":"","session":"aaa12564-c54a-4cd6-a9cd-b507041dc200","seq":13,"duration_ms":3315,"bytes_in":128,"bytes_out":182,"enriched":{"digest":"f81e00dc15067b2c","label":"Redis (RESP)","strings":["*#13**24##"]}},{"timestamp":"2026-09-19T19:16:33","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**23##","payload_hex":"2a2331332a2a32332323","method":"","user_agent":"","ja3":"","session":"aaa12564-c54a-4cd6-a9cd-b507041dc200","seq":12,"duration_ms":3049,"bytes_in":118,"bytes_out":168,"enriched":{"digest":"d78fcaf88128befb","label":"Redis (RESP)","strings":["*#13**23##"]}},{"timestamp":"2026-09-19T19:16:33","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**22##","payload_hex":"2a2331332a2a32322323","method":"","user_agent":"","ja3":"","session":"aaa12564-c54a-4cd6-a9cd-b507041dc200","seq":11,"duration_ms":2781,"bytes_in":108,"bytes_out":154,"enriched":{"digest":"b00d35ed5d021e0c","label":"Redis (RESP)","strings":["*#13**22##"]}},{"timestamp":"2026-09-19T19:16:32","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**17##","payload_hex":"2a2331332a2a31372323","method":"","user_agent":"","ja3":"","session":"aaa12564-c54a-4cd6-a9cd-b507041dc200","seq":8,"duration_ms":1977,"bytes_in":78,"bytes_out":112,"enriched":{"digest":"2b09564151e2d9a7","label":"Redis (RESP)","strings":["*#13**17##"]}},{"timestamp":"2026-09-19T19:16:32","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**16##","payload_hex":"2a2331332a2a31362323","method":"","user_agent":"","ja3":"","session":"aaa12564-c54a-4cd6-a9cd-b507041dc200","seq":7,"duration_ms":1710,"bytes_in":68,"bytes_out":98,"enriched":{"digest":"db5e85f4506f6dea","label":"Redis (RESP)","strings":["*#13**16##"]}},{"timestamp":"2026-09-19T19:16:32","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**19##","payload_hex":"2a2331332a2a31392323","method":"","user_agent":"","ja3":"","session":"aaa12564-c54a-4cd6-a9cd-b507041dc200","seq":9,"duration_ms":2246,"bytes_in":88,"bytes_out":126,"enriched":{"digest":"7fc7af8aee573346","label":"Redis (RESP)","strings":["*#13**19##"]}},{"timestamp":"2026-09-19T19:16:32","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**20##","payload_hex":"2a2331332a2a32302323","method":"","user_agent":"","ja3":"","session":"aaa12564-c54a-4cd6-a9cd-b507041dc200","seq":10,"duration_ms":2514,"bytes_in":98,"bytes_out":140,"enriched":{"digest":"b35389914264d55e","label":"Redis (RESP)","strings":["*#13**20##"]}}],"http_methods":[{"method":"GET","count":25}],"distinct_ports_total":5,"top_paths":[{"path":"/","count":5,"ports":5},{"path":"/config.json","count":5,"ports":5},{"path":"/robots.txt","count":5,"ports":5},{"path":"/sitemap.xml","count":5,"ports":5},{"path":"/favicon.ico","count":5,"ports":5}],"distinct_paths_total":5,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-23T12:16:53.343101+00:00"}