文档中心>主机安全>API 文档>其他接口>获取容器视角应用防护内存马扫描列表

获取容器视角应用防护内存马扫描列表

最近更新时间:2026-03-18 01:37:16

我的收藏

1. 接口描述

接口请求域名: cwp.tencentcloudapi.com 。

获取容器视角内存马扫描事件列表

默认接口请求频率限制:20次/秒。

推荐使用 API Explorer
点击调试
API Explorer 提供了在线调用、签名验证、SDK 代码生成和快速检索接口等能力。您可查看每次调用的请求内容和返回结果以及自动生成 SDK 调用示例。

2. 输入参数

以下请求参数列表仅列出了接口请求参数和部分公共参数,完整公共参数列表见 公共请求参数

参数名称 必选 类型 描述
Action String 公共参数,本接口取值:DescribeRaspMemShellListTCSS。
Version String 公共参数,本接口取值:2018-02-28。
Region String 公共参数,此参数为可选参数。
Filters.N Array of Filter 过滤条件:InstanceID、IP、MachineName主机名模糊查询, Type,Status精确匹配,CreateBeginTime,CreateEndTime时间段
示例值:[{"Name":"MachineName","Values":["dev"]}]
Offset Integer 偏移量,默认为0。
示例值:0
Limit Integer 需要返回的数量,默认为10,最大值为100
示例值:10
Order String 排序方式
示例值:asc
By String 排序字段
示例值:RecentFountTime

3. 输出参数

参数名称 类型 描述
List Array of RaspMemShellEvent 事件列表
TotalCount Integer 总数
示例值:12
RequestId String 唯一请求 ID,由服务端生成,每次请求都会返回(若请求因其他原因未能抵达服务端,则该次请求不会获得 RequestId)。定位问题时需要提供该次请求的 RequestId。

4. 示例

示例1 获取容器视角应用防护内存马扫描列表

输入示例

POST / HTTP/1.1
Host: cwp.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: DescribeRaspMemShellListTCSS
<公共请求参数>

{}

输出示例

{
    "Response": {
        "List": [
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "main\\.Payload",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "",
                "ContainerName": "",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-04-18 17:33:33",
                "Description": "检测到java进程206840/org.apache.catalina.startup.Bootstrap start中加载的main.Payload类中存在木马",
                "Exe": "",
                "HostInnerIP": "10.0.1.233",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 1,
                "ImageId": "",
                "ImageName": "",
                "InstanceID": "ins-j7vumfb6",
                "Interfaces": "",
                "LoaderClassName": "org\\.apache\\.jsp\\.bebinder_005fshell_jsp\\$U",
                "Md5": "",
                "NodeId": "ins-j7vumfb6",
                "NodeName": "v_llzlu微隔离测试(millionlan)",
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "acdd5474-6360-4fd4-bfc7-843162cb8116",
                "RecentFoundTime": "2025-04-18 17:40:26",
                "Status": 1,
                "SuperClassName": "",
                "Type": 5
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.bebinder_005fshell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "",
                "ContainerName": "",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-05-20 16:18:20",
                "Description": "检测到java进程47622/org.apache.catalina.startup.Bootstrap start中加载的org.apache.jsp.bebinder_005fshell_jsp类中存在木马",
                "Exe": "",
                "HostInnerIP": "10.0.1.233",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 2,
                "ImageId": "",
                "ImageName": "",
                "InstanceID": "ins-j7vumfb6",
                "Interfaces": "javax\\.servlet\\.jsp\\.HttpJspPage\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.Servlet\\|javax\\.servlet\\.ServletConfig\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-j7vumfb6",
                "NodeName": "v_llzlu微隔离测试(millionlan)",
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "acdd5474-6360-4fd4-bfc7-843162cb8116",
                "RecentFoundTime": "2025-05-20 16:18:20",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.bebinder_005fshell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "",
                "ContainerName": "",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-05-20 17:11:53",
                "Description": "检测到java进程68000/org.apache.catalina.startup.Bootstrap start中加载的org.apache.jsp.bebinder_005fshell_jsp类中存在木马",
                "Exe": "",
                "HostInnerIP": "10.0.1.233",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 3,
                "ImageId": "",
                "ImageName": "",
                "InstanceID": "ins-j7vumfb6",
                "Interfaces": "javax\\.servlet\\.jsp\\.HttpJspPage\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.Servlet\\|javax\\.servlet\\.ServletConfig\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-j7vumfb6",
                "NodeName": "v_llzlu微隔离测试(millionlan)",
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "acdd5474-6360-4fd4-bfc7-843162cb8116",
                "RecentFoundTime": "2025-05-20 17:11:53",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.bebinder_005fshell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "00443828e6bdd1e6bbc2e37296dcdbe5ee2f9d790ab55cf36c1a98bc60c1f305",
                "ContainerName": "",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-05-20 17:54:02",
                "Description": "检测到java进程84504/org.apache.catalina.startup.Bootstrap start中加载的org.apache.jsp.bebinder_005fshell_jsp类中存在木马",
                "Exe": "",
                "HostInnerIP": "10.0.1.233",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 4,
                "ImageId": "",
                "ImageName": "",
                "InstanceID": "ins-j7vumfb6",
                "Interfaces": "javax\\.servlet\\.jsp\\.HttpJspPage\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.Servlet\\|javax\\.servlet\\.ServletConfig\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-j7vumfb6",
                "NodeName": "v_llzlu微隔离测试(millionlan)",
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "acdd5474-6360-4fd4-bfc7-843162cb8116",
                "RecentFoundTime": "2025-05-20 17:54:02",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.bebinder_005fshell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "",
                "ContainerName": "",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-05-20 20:25:51",
                "Description": "检测到java进程140673/org.apache.catalina.startup.Bootstrap start中加载的org.apache.jsp.bebinder_005fshell_jsp类中存在木马",
                "Exe": "",
                "HostInnerIP": "10.0.1.233",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 5,
                "ImageId": "",
                "ImageName": "",
                "InstanceID": "ins-j7vumfb6",
                "Interfaces": "javax\\.servlet\\.jsp\\.HttpJspPage\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.Servlet\\|javax\\.servlet\\.ServletConfig\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-j7vumfb6",
                "NodeName": "v_llzlu微隔离测试(millionlan)",
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "acdd5474-6360-4fd4-bfc7-843162cb8116",
                "RecentFoundTime": "2025-05-20 20:25:51",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.shell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "d5280a714d80b708c83175bfbf5dbd29253a9ce259857c6beea425d729373304",
                "ContainerName": "/vultarget-web-1",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-06-04 15:24:21",
                "Description": "检测到java进程248671//opt/activemq/bin/activemq.jar start中加载的org.apache.jsp.shell_jsp类中存在木马",
                "Exe": "",
                "HostInnerIP": "172.17.17.11",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 6,
                "ImageId": "sha256:da3958ffd50cdf80b50aed310ff39e880f5f7a0c5fd84a140df3945b27bd3504",
                "ImageName": "ccr.ccs.tencentyun.com/vultarget/activemq_jolokia:5.17.3",
                "InstanceID": "ins-hbzudk94",
                "Interfaces": "org\\.apache\\.jasper\\.runtime\\.JspSourceImports\\|javax\\.servlet\\.ServletConfig\\|javax\\.servlet\\.Servlet\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.jsp\\.HttpJspPage\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-hbzudk94",
                "NodeName": "dy-test-linux2-rasp测试中勿动",
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "470dd074-4d37-47bf-a204-c4fec27ef152",
                "RecentFoundTime": "2025-06-04 15:24:21",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.shell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "eb4e9328a6e228f51d16ba68ba450204f81ab878b2e18f6f681db5312e127b43",
                "ContainerName": "/vultarget-web-1",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-06-04 15:31:05",
                "Description": "检测到java进程249353//opt/activemq/bin/activemq.jar start中加载的org.apache.jsp.shell_jsp类中存在木马",
                "Exe": "",
                "HostInnerIP": "172.17.17.11",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 7,
                "ImageId": "sha256:da3958ffd50cdf80b50aed310ff39e880f5f7a0c5fd84a140df3945b27bd3504",
                "ImageName": "ccr.ccs.tencentyun.com/vultarget/activemq_jolokia:5.17.3",
                "InstanceID": "ins-hbzudk94",
                "Interfaces": "org\\.apache\\.jasper\\.runtime\\.JspSourceImports\\|javax\\.servlet\\.ServletConfig\\|javax\\.servlet\\.Servlet\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.jsp\\.HttpJspPage\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-hbzudk94",
                "NodeName": "dy-test-linux2-rasp测试中勿动",
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "470dd074-4d37-47bf-a204-c4fec27ef152",
                "RecentFoundTime": "2025-06-04 15:31:05",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.shell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "738231ce616468252f4adc114c5a8987f434aa25d539d02f16cb6c4d3380f4bb",
                "ContainerName": "/vultarget-web-1",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-06-04 15:35:45",
                "Description": "检测到java进程249983//opt/activemq/bin/activemq.jar start中加载的org.apache.jsp.shell_jsp类中存在木马",
                "Exe": "",
                "HostInnerIP": "172.17.17.11",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 8,
                "ImageId": "sha256:da3958ffd50cdf80b50aed310ff39e880f5f7a0c5fd84a140df3945b27bd3504",
                "ImageName": "ccr.ccs.tencentyun.com/vultarget/activemq_jolokia:5.17.3",
                "InstanceID": "ins-hbzudk94",
                "Interfaces": "org\\.apache\\.jasper\\.runtime\\.JspSourceImports\\|javax\\.servlet\\.ServletConfig\\|javax\\.servlet\\.Servlet\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.jsp\\.HttpJspPage\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-hbzudk94",
                "NodeName": "dy-test-linux2-rasp测试中勿动",
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "470dd074-4d37-47bf-a204-c4fec27ef152",
                "RecentFoundTime": "2025-06-04 15:35:45",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.shell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "d7c92823ba8a4fe4e9c684a21fc25f5ec56617fac40edd456d9d69da59644abc",
                "ContainerName": "/vultarget-web-1",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-06-04 15:39:50",
                "Description": "检测到java进程250674//opt/activemq/bin/activemq.jar start中加载的org.apache.jsp.shell_jsp类中存在木马",
                "Exe": "",
                "HostInnerIP": "172.17.17.11",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 9,
                "ImageId": "sha256:da3958ffd50cdf80b50aed310ff39e880f5f7a0c5fd84a140df3945b27bd3504",
                "ImageName": "ccr.ccs.tencentyun.com/vultarget/activemq_jolokia:5.17.3",
                "InstanceID": "ins-hbzudk94",
                "Interfaces": "org\\.apache\\.jasper\\.runtime\\.JspSourceImports\\|javax\\.servlet\\.ServletConfig\\|javax\\.servlet\\.Servlet\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.jsp\\.HttpJspPage\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-hbzudk94",
                "NodeName": "dy-test-linux2-rasp测试中勿动",
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "470dd074-4d37-47bf-a204-c4fec27ef152",
                "RecentFoundTime": "2025-06-04 15:39:50",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            },
            {
                "Alias": "",
                "Annotations": "",
                "Args": "",
                "ClassName": "org\\.apache\\.jsp\\.shell_jsp",
                "ClusterId": "",
                "ClusterName": "",
                "ContainerId": "25aeacdd8500944e2c61ad41042f05db8806dbe0c0658f9ff5e84363c7551a7c",
                "ContainerName": "/vultarget-web-1",
                "ContainerNetStatus": "",
                "ContainerStatus": "",
                "CreateTime": "2025-06-04 15:56:26",
                "Description": "检测到java进程251632//opt/activemq/bin/activemq.jar start中加载的org.apache.jsp.shell_jsp类中存在木马",
                "Exe": "",
                "HostInnerIP": "172.17.17.11",
                "HostIp": "",
                "HostPublicIP": "xx.xx.xx.xx",
                "Id": 10,
                "ImageId": "sha256:da3958ffd50cdf80b50aed310ff39e880f5f7a0c5fd84a140df3945b27bd3504",
                "ImageName": "ccr.ccs.tencentyun.com/vultarget/activemq_jolokia:5.17.3",
                "InstanceID": "ins-hbzudk94",
                "Interfaces": "org\\.apache\\.jasper\\.runtime\\.JspSourceImports\\|javax\\.servlet\\.ServletConfig\\|javax\\.servlet\\.Servlet\\|org\\.apache\\.jasper\\.runtime\\.JspSourceDependent\\|javax\\.servlet\\.jsp\\.HttpJspPage\\|java\\.io\\.Serializable",
                "LoaderClassName": "",
                "Md5": "",
                "NodeId": "ins-hbzudk94",
                "NodeName": "dy-test-linux2-rasp测试中勿动",
                "NodeType": "NORMAL",
                "NodeUniqueID": "",
                "Pid": 0,
                "PodIp": "",
                "PodName": "",
                "Quuid": "470dd074-4d37-47bf-a204-c4fec27ef152",
                "RecentFoundTime": "2025-06-04 15:56:26",
                "Status": 0,
                "SuperClassName": "org\\.apache\\.jasper\\.runtime\\.HttpJspBase\\|javax\\.servlet\\.http\\.HttpServlet\\|javax\\.servlet\\.GenericServlet",
                "Type": 2
            }
        ],
        "RequestId": "0f914fed-385a-4c15-820e-633fa508e879",
        "TotalCount": 39
    }
}

5. 开发者资源

腾讯云 API 平台

腾讯云 API 平台 是综合 API 文档、错误码、API Explorer 及 SDK 等资源的统一查询平台,方便您从同一入口查询及使用腾讯云提供的所有 API 服务。

API Inspector

用户可通过 API Inspector 查看控制台每一步操作关联的 API 调用情况,并自动生成各语言版本的 API 代码,也可前往 API Explorer 进行在线调试。

SDK

云 API 3.0 提供了配套的开发工具集(SDK),支持多种编程语言,能更方便的调用 API。

命令行工具

6. 错误码

该接口暂无业务逻辑相关的错误码,其他错误码详见 公共错误码