{"ip":"45.194.92.106","total_events":548,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"548 events across 3 port(s)","confidence":"medium","network_type":"CDN","why":["548 requests against only 3 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"160,873 bytes sent","bytes_sent":160873,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-17T09:06:28","last_seen":"2026-09-30T10:38:12","events_24h":82,"events_7d":275,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":215925,"org":"Vpsvault.host Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as215925","label":"VPSVAULTHOST","category":"cdn","url":"https://www.peeringdb.com/asn/215925"},"cve_matches":[],"malware":[],"top_ports":[{"port":17000,"proto":"tcp","label":"","count":241},{"port":6036,"proto":"tcp","label":"","count":158},{"port":17001,"proto":"tcp","label":"","count":149}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-17","count":30},{"date":"2026-09-18","count":42},{"date":"2026-09-19","count":44},{"date":"2026-09-20","count":46},{"date":"2026-09-21","count":46},{"date":"2026-09-22","count":38},{"date":"2026-09-23","count":29},{"date":"2026-09-24","count":20},{"date":"2026-09-25","count":42},{"date":"2026-09-26","count":36},{"date":"2026-09-27","count":45},{"date":"2026-09-28","count":12},{"date":"2026-09-29","count":82},{"date":"2026-09-30","count":36}],"recent_events":[{"timestamp":"2026-09-30T10:38:12","port":6036,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"313131312e010000030000011b090000970100001e01000061646d696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000646f4c6f67696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38273f3e3c726571756573742075726c3d27646f4c6f67696e272076657273696f6e3d27312e30272073797374656d547970653d274e564d532d393030302720636c69656e74547970653d274d4f42494c452720757365726e616d653d2761646d696e27207077643d27313233343536273e3c2f726571756573743e0a","method":"","user_agent":"","ja3":"","session":"854b4348-e121-4682-be45-76a785565ff2","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-30T10:37:57","port":6036,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"cfd4aec7-3b8c-4eab-a182-5109bd2cc9a9","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-30T10:10:35","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c9b60565-80fc-42ba-8778-d5ee11c509bf","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-30T10:10:20","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ae09bbb6-9121-46b4-a47b-829233f9b750","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-30T09:30:32","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"313131312e010000030000011b090000970100001e01000061646d696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000646f4c6f67696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38273f3e3c726571756573742075726c3d27646f4c6f67696e272076657273696f6e3d27312e30272073797374656d547970653d274e564d532d393030302720636c69656e74547970653d274d4f42494c452720757365726e616d653d2761646d696e27207077643d27313233343536273e3c2f726571756573743e0a","method":"","user_agent":"","ja3":"","session":"7bab5c26-e7ea-4eae-8aff-d9c23b7c36e0","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-30T09:30:17","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"9c1eeffc-7ae8-48e8-ad0d-3b777a38a5f8","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-30T08:52:20","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4b80e202-0296-493d-8da3-d9bf100ad783","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-30T08:52:05","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"313131310c010000040000011b09000002010000fc00000061646d696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000717565727942617369634366670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c3f786d6c2076657273696f6e3d22312e302220656e636f64696e673d225554462d38223f3e0a3c726571756573742076657273696f6e3d22312e30222073797374656d547970653d224e564d532d393030302220636c69656e74547970653d22574542222075726c3d2271756572794261736963436667222f3e0a","method":"","user_agent":"","ja3":"","session":"3cb4cb5e-7786-4f52-9f21-6259add3f878","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-30T08:22:00","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d5ae57dd-65d4-44ea-bbfb-0e0bc6aaae67","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-30T08:21:45","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f00b2dcd-338f-478e-8b4a-95be1045a920","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}}],"http_methods":[],"distinct_ports_total":3,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-30T10:48:58.137873+00:00"}