{
    "id": "1822031",
    "ioc": "104.28.154.251:2375",
    "ioc_type": "ip:port",
    "threat_type": "payload_delivery",
    "malware": "elf.xmrig",
    "malware_printable": "XMRIG",
    "malware_alias": null,
    "confidence_level": "80",
    "first_seen": "2026-06-04 05:16:14 UTC",
    "last_seen": null,
    "reporter": null,
    "reference": "https:\/\/twitter.com\/NullBlue67",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1822031",
    "tags": [
        "backdoor-key",
        "Cloudflare",
        "container-escape",
        "docker-api",
        "nginx-alpine",
        "ssh-key-plant"
    ]
}