{"ip":"45.255.125.15","total_events":82,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["82 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 20,040 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"20,040 bytes sent","bytes_sent":20040,"session_seconds":5,"persistent":false}},"first_seen":"2026-09-16T15:57:20","last_seen":"2026-09-28T20:04:10","events_24h":0,"events_7d":52,"geo":{"country_code":"","country_name":"","region":"","city":"","lat":null,"lon":null,"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":20000,"proto":"tcp","label":"","count":27},{"port":2000,"proto":"tcp","label":"","count":9},{"port":9002,"proto":"tcp","label":"","count":9},{"port":1024,"proto":"tcp","label":"","count":9},{"port":9080,"proto":"tcp","label":"","count":7},{"port":85,"proto":"tcp","label":"","count":7},{"port":15672,"proto":"tcp","label":"RabbitMQ","count":7},{"port":123,"proto":"tcp","label":"NTP","count":7}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i130900_f57a46bbacb6_e7c285222651"],"tls_client_hello":"16030105ac010005a80303cc22028c6a2617ed33c9a577474ed8cde4ff3df59eb1a99c2ac317998c2291002068b95df43c31c642d3057da41ecda07c6b796c582d9c460152f2fe1d8b243bc8001ac02bc02fc02cc030cca9cca8c009c013c00ac01413011302130301000545000b00020100ff010001000017000000120000000500050100000000000a000c000a11ec001d001700180019000d001a0018080404030807080508060401050106010503060302010203002b0009080304030303020301003304ea04e811ec04c08a240a5be8a12c333a4df89b7933500b867e02705c5b489101d13dc82455cd6c137265505f88b90b118431a9b277a7c560743184919d6c658668eca1ac080f7ce839fb083ba832773ea6a1b4b13d18231e0b36678ad5bc85f8a58363259c82cfa8758aaee622fe62b1a0300131796201bb9d81cb4580335e150974a899a9f6fab72af307fa53896e26b8518479f4640ffd063fb3f0c33ffa6613f3310bda49394603415cb05d101c663c2ca9092b6cbb170f28a2ae54a36e648ff9020e641c24d0d5a94b546ecc912aae260309b24cacc03af050a893c3477ba93c13f38e6085664627a1af70a6a5d0aac001c9546a5f9840a9b7bb3cfdc06aa5e67fa459be900028ab9c2fff8a48c0ba73e9279748937208a1c7b2d50e70d47740794e64bb5e6ab154c24b46ac23313c171ac296864672712a29949727678a30118b384cafb6950753660984cbcf52b65f2605d258a35b58917a36a8ea0427a0064d5745c83a45403f4254bcc1cba6dc8f8284c73ea37f0e6aa43975bf7a06052cf500a62c09e44090462b2b8483829d4010e7436d549927c6121deb491ec3d616bcb84fd64b1078201bc1087ef72ccf377a3f47cbc84b597c9ce9c706cb4062c9b0d5f716c9b3716131b719ab19b56c1d0f8a553f93683182321e72b91675b9ab9abb88845b595263ab4777dc901b9a16761f790e243a8aaa99cbe3805fa701a342e905aae6c962db547bca0903564f05228d9cb938b48c5f2cf80ab62b6888e2815d4a8863fa20cb0659a2c32edf263efb2a6a0df5a6d7913b8d71b5e0a45f679778d7f081783c43341cb7b9311174460cffe978c4c6a98167a47cbbc18b28133f31b70d784fb0ca3826a93fb66669ddac88483c0655ec601173abe2c696b87964916c2009cb991b059255fc7974566719ab2393a038fc9c5a5e120e35921e818b2b2fc6b16603bc9298087f6a0ba4dc323722710c07b39ac00fc06225cc4cb14106410f6896ed510c45770c788b0049868521f6cc78bc102d922be1ba784f0915056c18ff33b5ccc834bbccb8c7eca97695601d0820efc2bedf94911eaa9f1bcb9042a6405a225b5a2450a30ab1b09747cdc48a12f7811282bae00ac7e29332c503281f37636e696a1816c972b10057655aae08c1e2185e807555d284984170791cd02bc146bb20d5428ea66c838a5e38f2447be83a78dc6546e084e5c2463cb06ba2690b4b4a2818c5966a32111f80cae66727acd17c599821f72398d9b2bf106a7ac0f2caf30b75015217b294a3d8660c086c5711d8197c12a16d1124846b0d446585016074e5ebae6a3473545acb35e0ce17ba8531d11917d7891e0a2d8e4196ef85236e5160ce4c65b7ac64f7029acd95cbfed1be0163126f287a29a21904d66e552645cf88b2ad2ccaa5c82c6d8392e15012df49baaf4b9f08f972c5eb36f87ac5c709727bb4461fb23bc494b25b486bf2d3a539e14e0ff0b09406138e7b5991211fef81bd44a51ec510c789d0198372453b9c82f2b76ba6a3472a2067d1acadc8a8c6db1846ec8633c12a522c8b4259ec84c5c44c264c714437bf84e22ecf1b7bb3cc1f6b68076cd918cd5859e3d072adeb8aa8e412bdb89e04721c4da9415a598be932c6edc98c1f0a8974c0badb80c7c1a466bf92a25ce9196994ffeae085b82108403e1a7b316ed5b07304777e9bcda1fc93badcd317f1fbae1e71f7fd91c533001d002008403e1a7b316ed5b07304777e9bcda1fc93badcd317f1fbae1e71f7","tls_ja3":["6639916abfac56b9257ca216677085bc"],"http_akin":["a11cun030_00000058_f74a6e72","a11cun050_0000005d_361dcb62"]},"fingerprint_peers":{"t13i130900_f57a46bbacb6_e7c285222651":3821,"a11cun030_00000058_f74a6e72":318,"a11cun050_0000005d_361dcb62":313},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"],"timeline":[{"date":"2026-09-16","count":7},{"date":"2026-09-18","count":9},{"date":"2026-09-19","count":14},{"date":"2026-09-23","count":9},{"date":"2026-09-25","count":7},{"date":"2026-09-27","count":9},{"date":"2026-09-28","count":27}],"recent_events":[{"timestamp":"2026-09-28T20:04:10","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**50##","payload_hex":"2a2331332a2a35302323","method":"","user_agent":"","ja3":"","session":"f65f7510-1377-4acc-a113-475179d40591","seq":14,"duration_ms":3959,"bytes_in":138,"bytes_out":182,"enriched":{"digest":"29f249ec11695da5","label":"Redis (RESP)","strings":["*#13**50##"]}},{"timestamp":"2026-09-28T20:04:10","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**51##","payload_hex":"2a2331332a2a35312323","method":"","user_agent":"","ja3":"","session":"f65f7510-1377-4acc-a113-475179d40591","seq":15,"duration_ms":4278,"bytes_in":148,"bytes_out":195,"enriched":{"digest":"e3c1c87d1b46000a","label":"Redis (RESP)","strings":["*#13**51##"]}},{"timestamp":"2026-09-28T20:04:10","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**52##","payload_hex":"2a2331332a2a35322323","method":"","user_agent":"","ja3":"","session":"f65f7510-1377-4acc-a113-475179d40591","seq":16,"duration_ms":4567,"bytes_in":158,"bytes_out":208,"enriched":{"digest":"eed2a2977615f80f","label":"Redis (RESP)","strings":["*#13**52##"]}},{"timestamp":"2026-09-28T20:04:09","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**22##","payload_hex":"2a2331332a2a32322323","method":"","user_agent":"","ja3":"","session":"f65f7510-1377-4acc-a113-475179d40591","seq":11,"duration_ms":2988,"bytes_in":108,"bytes_out":143,"enriched":{"digest":"b00d35ed5d021e0c","label":"Redis (RESP)","strings":["*#13**22##"]}},{"timestamp":"2026-09-28T20:04:09","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**23##","payload_hex":"2a2331332a2a32332323","method":"","user_agent":"","ja3":"","session":"f65f7510-1377-4acc-a113-475179d40591","seq":12,"duration_ms":3277,"bytes_in":118,"bytes_out":156,"enriched":{"digest":"d78fcaf88128befb","label":"Redis (RESP)","strings":["*#13**23##"]}},{"timestamp":"2026-09-28T20:04:09","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**24##","payload_hex":"2a2331332a2a32342323","method":"","user_agent":"","ja3":"","session":"f65f7510-1377-4acc-a113-475179d40591","seq":13,"duration_ms":3565,"bytes_in":128,"bytes_out":169,"enriched":{"digest":"f81e00dc15067b2c","label":"Redis (RESP)","strings":["*#13**24##"]}},{"timestamp":"2026-09-28T20:04:08","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**16##","payload_hex":"2a2331332a2a31362323","method":"","user_agent":"","ja3":"","session":"f65f7510-1377-4acc-a113-475179d40591","seq":7,"duration_ms":1833,"bytes_in":68,"bytes_out":91,"enriched":{"digest":"db5e85f4506f6dea","label":"Redis (RESP)","strings":["*#13**16##"]}},{"timestamp":"2026-09-28T20:04:08","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**17##","payload_hex":"2a2331332a2a31372323","method":"","user_agent":"","ja3":"","session":"f65f7510-1377-4acc-a113-475179d40591","seq":8,"duration_ms":2122,"bytes_in":78,"bytes_out":104,"enriched":{"digest":"2b09564151e2d9a7","label":"Redis (RESP)","strings":["*#13**17##"]}},{"timestamp":"2026-09-28T20:04:08","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**19##","payload_hex":"2a2331332a2a31392323","method":"","user_agent":"","ja3":"","session":"f65f7510-1377-4acc-a113-475179d40591","seq":9,"duration_ms":2410,"bytes_in":88,"bytes_out":117,"enriched":{"digest":"7fc7af8aee573346","label":"Redis (RESP)","strings":["*#13**19##"]}},{"timestamp":"2026-09-28T20:04:08","port":20000,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*#13**20##","payload_hex":"2a2331332a2a32302323","method":"","user_agent":"","ja3":"","session":"f65f7510-1377-4acc-a113-475179d40591","seq":10,"duration_ms":2699,"bytes_in":98,"bytes_out":130,"enriched":{"digest":"b35389914264d55e","label":"Redis (RESP)","strings":["*#13**20##"]}}],"http_methods":[{"method":"GET","count":40}],"distinct_ports_total":8,"top_paths":[{"path":"/","count":8,"ports":8},{"path":"/config.json","count":8,"ports":8},{"path":"/robots.txt","count":8,"ports":8},{"path":"/sitemap.xml","count":8,"ports":8},{"path":"/favicon.ico","count":8,"ports":8}],"distinct_paths_total":5,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-30T03:59:53.323595+00:00"}