{"ip":"45.194.92.100","total_events":606,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"606 events across 3 port(s)","confidence":"medium","network_type":"CDN","why":["606 requests against only 3 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"177,861 bytes sent","bytes_sent":177861,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-17T08:45:28","last_seen":"2026-09-29T13:52:24","events_24h":62,"events_7d":324,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":215925,"org":"Vpsvault.host Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as215925","label":"VPSVAULTHOST","category":"cdn","url":"https://www.peeringdb.com/asn/215925"},"cve_matches":[],"malware":[],"top_ports":[{"port":17000,"proto":"tcp","label":"","count":218},{"port":17001,"proto":"tcp","label":"","count":200},{"port":6036,"proto":"tcp","label":"","count":188}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-17","count":32},{"date":"2026-09-18","count":58},{"date":"2026-09-19","count":50},{"date":"2026-09-20","count":58},{"date":"2026-09-21","count":58},{"date":"2026-09-22","count":44},{"date":"2026-09-23","count":28},{"date":"2026-09-24","count":28},{"date":"2026-09-25","count":66},{"date":"2026-09-26","count":66},{"date":"2026-09-27","count":56},{"date":"2026-09-28","count":8},{"date":"2026-09-29","count":54}],"recent_events":[{"timestamp":"2026-09-29T13:52:24","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"86d07759-a75d-459c-8156-e38ef938c173","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-29T13:52:09","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4a0d6c76-6429-4fb4-9633-1e9ace691692","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-29T13:04:33","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"3345f612-24dc-4327-af22-22d5885f0ade","seq":1,"duration_ms":101,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-29T13:04:18","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f65089f1-a00c-4688-9e1c-cfbd64278424","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-29T13:01:00","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"090821c9-706d-4eca-949d-87b05c936fa8","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-29T13:00:45","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f8d2e396-d6c3-4b47-834a-4a9308ce6229","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-29T12:01:14","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"dbc01ecf-c93d-45b6-ac4f-90301b62ec2d","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-29T12:00:58","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"313131310c010000040000011b09000002010000fc00000061646d696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000717565727942617369634366670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c3f786d6c2076657273696f6e3d22312e302220656e636f64696e673d225554462d38223f3e0a3c726571756573742076657273696f6e3d22312e30222073797374656d547970653d224e564d532d393030302220636c69656e74547970653d22574542222075726c3d2271756572794261736963436667222f3e0a","method":"","user_agent":"","ja3":"","session":"20e11b10-0ca4-4d17-b471-b5c9b6c4fe33","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-29T11:29:48","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"313131312e010000030000011b090000970100001e01000061646d696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000646f4c6f67696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38273f3e3c726571756573742075726c3d27646f4c6f67696e272076657273696f6e3d27312e30272073797374656d547970653d274e564d532d393030302720636c69656e74547970653d274d4f42494c452720757365726e616d653d2761646d696e27207077643d27313233343536273e3c2f726571756573743e0a","method":"","user_agent":"","ja3":"","session":"9a446f44-9224-4886-9a09-7656b9dde7f9","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-29T11:29:33","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"97518bb7-f33a-4321-a5d8-d07aaf69c86e","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}}],"http_methods":[],"distinct_ports_total":3,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-29T14:02:15.466995+00:00"}