{"ip":"45.194.92.221","total_events":2987,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"2,987 events across 4 port(s)","confidence":"medium","network_type":"CDN","why":["2,987 requests against only 4 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"875,002 bytes sent","bytes_sent":875002,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-13T19:07:47","last_seen":"2026-09-28T15:30:58","events_24h":5,"events_7d":1568,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":215925,"org":"Vpsvault.host Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as215925","label":"VPSVAULTHOST","category":"cdn","url":"https://www.peeringdb.com/asn/215925"},"cve_matches":[],"malware":[],"top_ports":[{"port":17001,"proto":"tcp","label":"","count":993},{"port":17000,"proto":"tcp","label":"","count":993},{"port":6036,"proto":"tcp","label":"","count":989},{"port":80,"proto":"tcp","label":"HTTP","count":12}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["a11cun030_0000004a_c91eaf54"]},"fingerprint_peers":{"a11cun030_0000004a_c91eaf54":235},"akin_families":{"a11cun030_0000004a_c91eaf54":{"head":"a11cun030_0000004a_c91eaf54","shapes":3,"ips":235}},"user_agents":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","iLoveKT/1.0","Mozilla/5.0"],"timeline":[{"date":"2026-09-13","count":33},{"date":"2026-09-15","count":1},{"date":"2026-09-16","count":40},{"date":"2026-09-17","count":193},{"date":"2026-09-18","count":266},{"date":"2026-09-19","count":252},{"date":"2026-09-20","count":248},{"date":"2026-09-21","count":198},{"date":"2026-09-22","count":324},{"date":"2026-09-23","count":419},{"date":"2026-09-24","count":443},{"date":"2026-09-25","count":367},{"date":"2026-09-26","count":196},{"date":"2026-09-27","count":2},{"date":"2026-09-28","count":5}],"recent_events":[{"timestamp":"2026-09-28T15:30:58","port":6036,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d90e2798-3593-45f4-8910-8460cf0a3a01","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-28T15:30:43","port":6036,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"34a46773-a946-4ca2-b8b5-f972a7a5a2ab","seq":1,"duration_ms":102,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-28T15:30:11","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"1540c424-a32f-4157-b9d8-357fd715ddb2","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-28T15:29:56","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"313131310c010000040000011b09000002010000fc00000061646d696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000717565727942617369634366670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c3f786d6c2076657273696f6e3d22312e302220656e636f64696e673d225554462d38223f3e0a3c726571756573742076657273696f6e3d22312e30222073797374656d547970653d224e564d532d393030302220636c69656e74547970653d22574542222075726c3d2271756572794261736963436667222f3e0a","method":"","user_agent":"","ja3":"","session":"ec037893-0b63-4def-97d3-668a8b7b0374","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-28T15:22:00","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"f487a131-39dc-485b-b327-19f71491bc02","seq":1,"duration_ms":100,"bytes_in":86,"bytes_out":78},{"timestamp":"2026-09-27T15:51:04","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"4f036a58-4e73-41fc-8080-05c15369bd34","seq":1,"duration_ms":100,"bytes_in":86,"bytes_out":78},{"timestamp":"2026-09-27T15:34:29","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"824278b7-316c-41fe-a9ed-53824d54487e","seq":1,"duration_ms":100,"bytes_in":85,"bytes_out":78},{"timestamp":"2026-09-26T22:21:51","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"313131312e010000030000011b090000970100001e01000061646d696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000646f4c6f67696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38273f3e3c726571756573742075726c3d27646f4c6f67696e272076657273696f6e3d27312e30272073797374656d547970653d274e564d532d393030302720636c69656e74547970653d274d4f42494c452720757365726e616d653d2761646d696e27207077643d27313233343536273e3c2f726571756573743e0a","method":"","user_agent":"","ja3":"","session":"dd84393c-0b90-4ef8-9f3b-1eb904608705","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}},{"timestamp":"2026-09-26T22:21:36","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111\f\u0001\u0000\u0000\u0004\u0000\u0000\u0001\u001b\t\u0000\u0000\u0002\u0001\u0000\u0000�\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000queryBasicCfg\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCfg\"/>\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f708fa0a-d63a-4334-95b1-bc074c98f6de","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"01e5a0448b4cc0e7","strings":["1111","admin","queryBasicCfg","<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<request version=\"1.0\" systemType=\"NVMS-9000\" clientType=\"WEB\" url=\"queryBasicCf…","adminqueryBasicCfg<?xml version=\"1.0\" encoding=\"UTF-8\"?>"]}},{"timestamp":"2026-09-26T21:52:32","port":17001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111.\u0001\u0000\u0000\u0003\u0000\u0000\u0001\u001b\t\u0000\u0000�\u0001\u0000\u0000\u001e\u0001\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000doLogin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' systemType='NVMS-9000' clientType='MOBILE' username='admin' pwd='123456'></request>\n","payload_hex":"313131312e010000030000011b090000970100001e01000061646d696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000646f4c6f67696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38273f3e3c726571756573742075726c3d27646f4c6f67696e272076657273696f6e3d27312e30272073797374656d547970653d274e564d532d393030302720636c69656e74547970653d274d4f42494c452720757365726e616d653d2761646d696e27207077643d27313233343536273e3c2f726571756573743e0a","method":"","user_agent":"","ja3":"","session":"6a9b709a-f271-42b5-8c78-d31a2ae8972d","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":13,"enriched":{"digest":"98ccbcb6ebefda94","strings":["1111.","admin","doLogin","<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version='1.0' syste…","admindoLogin<?xml version='1.0' encoding='utf-8'?><request url='doLogin' version…"]}}],"http_methods":[{"method":"GET","count":12}],"distinct_ports_total":4,"top_paths":[{"path":"/","count":12,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Connection","Host","User-Agent"],"representative":[{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:80","notable":false},{"name":"User-Agent","value":"Mozilla/5.0","notable":false}],"distinct_sets":1,"events_with_headers":3},"tags":[],"data_as_of":"2026-09-29T14:02:23.141380+00:00"}