{"ip":"45.194.92.102","total_events":592,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"592 events across 3 port(s)","confidence":"medium","network_type":"CDN","why":["592 requests against only 3 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"173,717 bytes sent","bytes_sent":173717,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-17T08:47:02","last_seen":"2026-09-29T13:47:54","events_24h":64,"events_7d":350,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":215925,"org":"Vpsvault.host Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as215925","label":"VPSVAULTHOST","category":"cdn","url":"https://www.peeringdb.com/asn/215925"},"cve_matches":[],"malware":[],"top_ports":[{"port":17001,"proto":"tcp","label":"","count":200},{"port":6036,"proto":"tcp","label":"","count":196},{"port":17000,"proto":"tcp","label":"","count":196}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-17","count":30},{"date":"2026-09-18","count":48},{"date":"2026-09-19","count":44},{"date":"2026-09-20","count":46},{"date":"2026-09-21","count":50},{"date":"2026-09-22","count":44},{"date":"2026-09-23","count":22},{"date":"2026-09-24","count":32},{"date":"2026-09-25","count":76},{"date":"2026-09-26","count":69},{"date":"2026-09-27","count":67},{"date":"2026-09-28","count":10},{"date":"2026-09-29","count":54}],"recent_events":[{"timestamp":"2026-09-29T13:47:54","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"313131312e010000030000011b090000970100001e01000061646d696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000646f4c6f67696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38273f3e3c726571756573742075726c3d27646f4c6f67696e272076657273696f6e3d27312e30272073797374656d547970653d274e564d532d393030302720636c69656e74547970653d274d4f42494c452720757365726e616d653d2761646d696e27207077643d27313233343536273e3c2f726571756573743e0a","method":"","user_agent":"","ja3":"","session":"3e134fbd-0f0a-4f1a-ae90-7b68760d25ef","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-29T13:47:39","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"0681d18f-d146-4fce-bf7d-2329c1ed405e","seq":1,"duration_ms":101,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-29T13:27:58","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"313131312e010000030000011b090000970100001e01000061646d696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000646f4c6f67696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38273f3e3c726571756573742075726c3d27646f4c6f67696e272076657273696f6e3d27312e30272073797374656d547970653d274e564d532d393030302720636c69656e74547970653d274d4f42494c452720757365726e616d653d2761646d696e27207077643d27313233343536273e3c2f726571756573743e0a","method":"","user_agent":"","ja3":"","session":"9675d8d3-e039-42a0-927e-c11b13509b2a","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-29T13:27:43","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"cd8f1cc8-a088-4f00-8665-9b730cf320dd","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-29T13:03:06","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"68f043b1-9acc-4384-baee-404d61e02e34","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-29T13:02:51","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"111ce96d-48ce-452f-b3b7-f638685f84ac","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-29T12:50:54","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"313131312e010000030000011b090000970100001e01000061646d696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000646f4c6f67696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38273f3e3c726571756573742075726c3d27646f4c6f67696e272076657273696f6e3d27312e30272073797374656d547970653d274e564d532d393030302720636c69656e74547970653d274d4f42494c452720757365726e616d653d2761646d696e27207077643d27313233343536273e3c2f726571756573743e0a","method":"","user_agent":"","ja3":"","session":"78569498-0740-42f6-8202-04b8ccc5aed1","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-29T12:50:39","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"79215617-0b04-4f86-837d-a81abba35f14","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-29T11:14:29","port":6036,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4a47d222-4dda-4b95-819f-b0d0b819dfee","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-29T11:14:14","port":6036,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"db284378-320f-4b58-893f-ceb310c4446d","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}}],"http_methods":[],"distinct_ports_total":3,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-29T14:02:16.526360+00:00"}