tencent cloud

APIs

DescribeRaspMemShellListTCSS

다운로드
포커스 모드
폰트 크기
마지막 업데이트 시간: 2026-06-08 10:21:29

1. API Description

Domain name for API request: cwp.intl.tencentcloudapi.com.

Retrieve Java Webshell scan event list from container perspective

A maximum of 20 requests can be initiated per second for this API.

We recommend you to use API Explorer
Try it
API Explorer provides a range of capabilities, including online call, signature authentication, SDK code generation, and API quick search. It enables you to view the request, response, and auto-generated examples.

2. Input Parameters

The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.

Parameter Name Required Type Description
Action Yes String Common Params. The value used for this API: DescribeRaspMemShellListTCSS.
Version Yes String Common Params. The value used for this API: 2018-02-28.
Region No String Common Params. This parameter is not required.
Filters.N No Array of Filter Filter criteria: InstanceID, IP, MachineName host name fuzzy query, Type, Status for precise match, CreateBeginTime, CreateEndTime time period
Offset No Integer Offset. Default value: 0.
Limit No Integer Number of entries to be returned. Default value: 10. Maximum value: 100.
Order No String Sorting method.
By No String Sorting field

3. Output Parameters

Parameter Name Type Description
List Array of RaspMemShellEvent Event list
TotalCount Integer Total number
RequestId String The unique request ID, generated by the server, will be returned for every request (if the request fails to reach the server for other reasons, the request will not obtain a RequestId). RequestId is required for locating a problem.

4. Example

Example1 Retrieve the container perspective application protection Java Webshell scan list

Input Example

POST / HTTP/1.1
Host: cwp.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: DescribeRaspMemShellListTCSS
<Common request parameters>

{}

Output Example

{
    "Response": {
        "List": [
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "main\\.Payload",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "",
                "ContainerName": "",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-04-18 17:33:33",
"Description": "Detected Trojan in the main.Payload class loaded by java process 206840/org.apache.catalina.startup.Bootstrap start"
                "Exe": "",
                "HostInnerIP": "10.0.1.233",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 1,
                "ImageId": "",
                "ImageName": "",
                "InstanceID": "ins-j7vumfb6",
                "Interfaces": "",
                "LoaderClassName": "org\\.apache\\.jsp\\.bebinder_005fshell_jsp\\$U",
                "Md5": "",
                "NodeId": "ins-j7vumfb6",
"NodeName": "v_llzlu micro-segmentation test (millionlan)"
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "acdd5474-6360-4fd4-bfc7-843162cb8116",
                "RecentFoundTime": "2025-04-18 17:40:26",
                "Status": 1,
                "SuperClassName": "",
                "Type": 5
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.bebinder_005fshell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "",
                "ContainerName": "",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-05-20 16:18:20",
"Description": "Detected a Trojan in the org.apache.jsp.bebinder_005fshell_jsp class loaded by java process 47622/org.apache.catalina.startup.Bootstrap start"
                "Exe": "",
                "HostInnerIP": "10.0.1.233",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 2,
                "ImageId": "",
                "ImageName": "",
                "InstanceID": "ins-j7vumfb6",
                "Interfaces": "javax\\.servlet\\.jsp\\.HttpJspPage\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.Servlet\\|javax\\.servlet\\.ServletConfig\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-j7vumfb6",
"NodeName": "v_llzlu micro-segmentation test (millionlan)"
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "acdd5474-6360-4fd4-bfc7-843162cb8116",
                "RecentFoundTime": "2025-05-20 16:18:20",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.bebinder_005fshell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "",
                "ContainerName": "",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-05-20 17:11:53",
"Description": "Detected Trojan in the org.apache.jsp.bebinder_005fshell_jsp class loaded by java process 68000/org.apache.catalina.startup.Bootstrap start"
                "Exe": "",
                "HostInnerIP": "10.0.1.233",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 3,
                "ImageId": "",
                "ImageName": "",
                "InstanceID": "ins-j7vumfb6",
                "Interfaces": "javax\\.servlet\\.jsp\\.HttpJspPage\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.Servlet\\|javax\\.servlet\\.ServletConfig\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-j7vumfb6",
"NodeName": "v_llzlu micro-segmentation test (millionlan)"
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "acdd5474-6360-4fd4-bfc7-843162cb8116",
                "RecentFoundTime": "2025-05-20 17:11:53",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.bebinder_005fshell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "00443828e6bdd1e6bbc2e37296dcdbe5ee2f9d790ab55cf36c1a98bc60c1f305",
                "ContainerName": "",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-05-20 17:54:02",
"Description": "A Trojan was detected in the org.apache.jsp.bebinder_005fshell_jsp class loaded by the java process 84504/org.apache.catalina.startup.Bootstrap start"
                "Exe": "",
                "HostInnerIP": "10.0.1.233",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 4,
                "ImageId": "",
                "ImageName": "",
                "InstanceID": "ins-j7vumfb6",
                "Interfaces": "javax\\.servlet\\.jsp\\.HttpJspPage\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.Servlet\\|javax\\.servlet\\.ServletConfig\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-j7vumfb6",
"NodeName": "v_llzlu micro-segmentation test (millionlan)"
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "acdd5474-6360-4fd4-bfc7-843162cb8116",
                "RecentFoundTime": "2025-05-20 17:54:02",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.bebinder_005fshell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "",
                "ContainerName": "",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-05-20 20:25:51",
"Description": "Detected a Trojan in the org.apache.jsp.bebinder_005fshell_jsp class loaded by the java process 140673/org.apache.catalina.startup.Bootstrap start"
                "Exe": "",
                "HostInnerIP": "10.0.1.233",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 5,
                "ImageId": "",
                "ImageName": "",
                "InstanceID": "ins-j7vumfb6",
                "Interfaces": "javax\\.servlet\\.jsp\\.HttpJspPage\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.Servlet\\|javax\\.servlet\\.ServletConfig\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-j7vumfb6",
"NodeName": "v_llzlu micro-segmentation test (millionlan)"
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "acdd5474-6360-4fd4-bfc7-843162cb8116",
                "RecentFoundTime": "2025-05-20 20:25:51",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.shell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "d5280a714d80b708c83175bfbf5dbd29253a9ce259857c6beea425d729373304",
                "ContainerName": "/vultarget-web-1",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-06-04 15:24:21",
"Description": "Detected Trojan in the org.apache.jsp.shell_jsp class loaded by java process 248671 //opt/activemq/bin/activemq.jar start"
                "Exe": "",
                "HostInnerIP": "172.17.17.11",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 6,
                "ImageId": "sha256:da3958ffd50cdf80b50aed310ff39e880f5f7a0c5fd84a140df3945b27bd3504",
                "ImageName": "ccr.ccs.tencentyun.com/vultarget/activemq_jolokia:5.17.3",
                "InstanceID": "ins-hbzudk94",
                "Interfaces": "org\\.apache\\.jasper\\.runtime\\.JspSourceImports\\|javax\\.servlet\\.ServletConfig\\|javax\\.servlet\\.Servlet\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.jsp\\.HttpJspPage\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-hbzudk94",
"NodeName": "dy-test-linux2-rasp in testing, do not touch"
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "470dd074-4d37-47bf-a204-c4fec27ef152",
                "RecentFoundTime": "2025-06-04 15:24:21",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.shell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "eb4e9328a6e228f51d16ba68ba450204f81ab878b2e18f6f681db5312e127b43",
                "ContainerName": "/vultarget-web-1",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-06-04 15:31:05",
"Description": "Detected Trojan in the org.apache.jsp.shell_jsp class loaded by java process 249353//opt/activemq/bin/activemq.jar start"
                "Exe": "",
                "HostInnerIP": "172.17.17.11",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 7,
                "ImageId": "sha256:da3958ffd50cdf80b50aed310ff39e880f5f7a0c5fd84a140df3945b27bd3504",
                "ImageName": "ccr.ccs.tencentyun.com/vultarget/activemq_jolokia:5.17.3",
                "InstanceID": "ins-hbzudk94",
                "Interfaces": "org\\.apache\\.jasper\\.runtime\\.JspSourceImports\\|javax\\.servlet\\.ServletConfig\\|javax\\.servlet\\.Servlet\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.jsp\\.HttpJspPage\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-hbzudk94",
"NodeName": "dy-test-linux2-rasp in testing, do not touch"
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "470dd074-4d37-47bf-a204-c4fec27ef152",
                "RecentFoundTime": "2025-06-04 15:31:05",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.shell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "738231ce616468252f4adc114c5a8987f434aa25d539d02f16cb6c4d3380f4bb",
                "ContainerName": "/vultarget-web-1",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-06-04 15:35:45",
"Description": "Detected Trojan in the org.apache.jsp.shell_jsp class loaded by java process 249983//opt/activemq/bin/activemq.jar start"
                "Exe": "",
                "HostInnerIP": "172.17.17.11",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 8,
                "ImageId": "sha256:da3958ffd50cdf80b50aed310ff39e880f5f7a0c5fd84a140df3945b27bd3504",
                "ImageName": "ccr.ccs.tencentyun.com/vultarget/activemq_jolokia:5.17.3",
                "InstanceID": "ins-hbzudk94",
                "Interfaces": "org\\.apache\\.jasper\\.runtime\\.JspSourceImports\\|javax\\.servlet\\.ServletConfig\\|javax\\.servlet\\.Servlet\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.jsp\\.HttpJspPage\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-hbzudk94",
"NodeName": "dy-test-linux2-rasp in testing, do not touch"
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "470dd074-4d37-47bf-a204-c4fec27ef152",
                "RecentFoundTime": "2025-06-04 15:35:45",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.shell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "d7c92823ba8a4fe4e9c684a21fc25f5ec56617fac40edd456d9d69da59644abc",
                "ContainerName": "/vultarget-web-1",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-06-04 15:39:50",
"Description": "A Trojan was detected in the org.apache.jsp.shell_jsp class loaded by the java process 250674//opt/activemq/bin/activemq.jar start"
                "Exe": "",
                "HostInnerIP": "172.17.17.11",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 9,
                "ImageId": "sha256:da3958ffd50cdf80b50aed310ff39e880f5f7a0c5fd84a140df3945b27bd3504",
                "ImageName": "ccr.ccs.tencentyun.com/vultarget/activemq_jolokia:5.17.3",
                "InstanceID": "ins-hbzudk94",
                "Interfaces": "org\\.apache\\.jasper\\.runtime\\.JspSourceImports\\|javax\\.servlet\\.ServletConfig\\|javax\\.servlet\\.Servlet\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.jsp\\.HttpJspPage\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-hbzudk94",
"NodeName": "dy-test-linux2-rasp in testing, do not touch"
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "470dd074-4d37-47bf-a204-c4fec27ef152",
                "RecentFoundTime": "2025-06-04 15:39:50",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.shell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "25aeacdd8500944e2c61ad41042f05db8806dbe0c0658f9ff5e84363c7551a7c",
                "ContainerName": "/vultarget-web-1",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-06-04 15:56:26",
"Description": "Detected Trojan in org.apache.jsp.shell_jsp class loaded by java process 251632//opt/activemq/bin/activemq.jar start"
                "Exe": "",
                "HostInnerIP": "172.17.17.11",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 10,
                "ImageId": "sha256:da3958ffd50cdf80b50aed310ff39e880f5f7a0c5fd84a140df3945b27bd3504",
                "ImageName": "ccr.ccs.tencentyun.com/vultarget/activemq_jolokia:5.17.3",
                "InstanceID": "ins-hbzudk94",
                "Interfaces": "org\\.apache\\.jasper\\.runtime\\.JspSourceImports\\|javax\\.servlet\\.ServletConfig\\|javax\\.servlet\\.Servlet\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.jsp\\.HttpJspPage\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-hbzudk94",
"NodeName": "dy-test-linux2-rasp in testing, do not touch"
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "470dd074-4d37-47bf-a204-c4fec27ef152",
                "RecentFoundTime": "2025-06-04 15:56:26",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            }
        ],
        "RequestId": "0f914fed-385a-4c15-820e-633fa508e879",
        "TotalCount": 39
    }
}

5. Developer Resources

SDK

TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.

Command Line Interface

6. Error Code

There is no error code related to the API business logic. For other error codes, please see Common Error Codes.

도움말 및 지원

문제 해결에 도움이 되었나요?

피드백