{"ip":"45.194.92.103","total_events":573,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"573 events across 3 port(s)","confidence":"medium","network_type":"CDN","why":["573 requests against only 3 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"168,193 bytes sent","bytes_sent":168193,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-17T09:03:27","last_seen":"2026-09-29T13:22:23","events_24h":42,"events_7d":339,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":215925,"org":"Vpsvault.host Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as215925","label":"VPSVAULTHOST","category":"cdn","url":"https://www.peeringdb.com/asn/215925"},"cve_matches":[],"malware":[],"top_ports":[{"port":6036,"proto":"tcp","label":"","count":224},{"port":17001,"proto":"tcp","label":"","count":184},{"port":17000,"proto":"tcp","label":"","count":165}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-17","count":30},{"date":"2026-09-18","count":42},{"date":"2026-09-19","count":46},{"date":"2026-09-20","count":44},{"date":"2026-09-21","count":48},{"date":"2026-09-22","count":40},{"date":"2026-09-23","count":28},{"date":"2026-09-24","count":36},{"date":"2026-09-25","count":72},{"date":"2026-09-26","count":80},{"date":"2026-09-27","count":65},{"date":"2026-09-28","count":8},{"date":"2026-09-29","count":34}],"recent_events":[{"timestamp":"2026-09-29T13:22:23","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"704352ce-357f-4497-b027-133e29747e43","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-29T13:22:08","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"494a16a6-c6ba-44aa-b8e0-fdb7d43ff872","seq":1,"duration_ms":101,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-29T11:27:07","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"17ff9a06-6519-4fda-9d0b-88b25f6e0940","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-29T11:26:52","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"40295ebc-3d33-490e-ad61-c7619ca4ae8b","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-29T11:24:08","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4eaa50f4-7f57-4879-b756-dbe96eafbd1b","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-29T11:23:53","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a55e1898-cfb8-4767-82ed-10ae81aa81e8","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-29T10:52:02","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b73bf107-9a7b-48d0-831b-d2b0d89fe177","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-29T10:51:47","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"50753615-3dba-40db-b983-51ec85ea12f9","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-29T10:38:23","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e3877359-3d1d-4906-b2eb-e01da8057db6","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-29T10:38:08","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d0d68300-a5e6-4c6b-acd4-9d2924b15659","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}}],"http_methods":[],"distinct_ports_total":3,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-29T14:02:12.777780+00:00"}