{ "__inputs": [ { "name": "DS_CLICKHOUSE", "label": "Clickhouse", "description": "", "type": "datasource", "pluginId": "vertamedia-clickhouse-datasource", "pluginName": "ClickHouse" } ], "__requires": [ { "type": "grafana", "id": "grafana", "name": "Grafana", "version": "4.5.1" }, { "type": "panel", "id": "graph", "name": "Graph", "version": "" }, { "type": "panel", "id": "table", "name": "Table", "version": "" }, { "type": "datasource", "id": "vertamedia-clickhouse-datasource", "name": "ClickHouse", "version": "0.0.2" } ], "annotations": { "list": [] }, "editable": true, "gnetId": 3248, "graphTooltip": 0, "hideControls": false, "id": null, "links": [], "refresh": false, "rows": [ { "collapse": false, "height": 200, "panels": [ { "aliasColors": { "count()": "#BF1B00" }, "bars": true, "dashLength": 10, "dashes": false, "datasource": "${DS_CLICKHOUSE}", "decimals": 0, "fill": 1, "id": 6, "legend": { "avg": false, "current": false, "max": false, "min": false, "show": true, "total": true, "values": true }, "lines": false, "linewidth": 1, "links": [], "nullPointMode": "null", "percentage": false, "pointradius": 5, "points": false, "renderer": "flot", "seriesOverrides": [], "spaceLength": 10, "span": 2, "stack": false, "steppedLine": false, "targets": [ { "database": "politraf", "dateColDataType": "event_date", "dateLoading": false, "dateTimeColDataType": "timestamp", "datetimeLoading": false, "formattedQuery": "SELECT $timeSeries as t, count(*) FROM $table WHERE $timeFilter AND score > 7 GROUP BY t ORDER BY t", "interval": "1d", "intervalFactor": 1, "query": "SELECT $timeSeries as t, count(*) FROM $table WHERE $timeFilter AND score > 7 GROUP BY t ORDER BY t", "rawQuery": "SELECT (intDiv(toUInt32(timestamp), 86400) * 86400) * 1000 as t, count(*) FROM politraf.open_ports WHERE event_date BETWEEN toDate(1505768400) AND toDate(1505854800) AND timestamp BETWEEN toDateTime(1505768400) AND toDateTime(1505854800) AND score > 7 GROUP BY t ORDER BY t", "refId": "A", "resultFormat": "time_series", "table": "open_ports", "tableLoading": false } ], "thresholds": [], "timeFrom": null, "timeShift": null, "title": "Services with high CVSS score", "tooltip": { "shared": true, "sort": 0, "value_type": "individual" }, "type": "graph", "xaxis": { "buckets": null, "mode": "time", "name": null, "show": true, "values": [] }, "yaxes": [ { "format": "short", "label": null, "logBase": 1, "max": null, "min": null, "show": true }, { "format": "short", "label": null, "logBase": 1, "max": null, "min": null, "show": true } ] }, { "aliasColors": { "count()": "#EAB839" }, "bars": true, "dashLength": 10, "dashes": false, "datasource": "${DS_CLICKHOUSE}", "decimals": 0, "fill": 1, "id": 5, "legend": { "avg": false, "current": false, "max": false, "min": false, "show": true, "total": true, "values": true }, "lines": false, "linewidth": 1, "links": [], "nullPointMode": "null", "percentage": false, "pointradius": 5, "points": false, "renderer": "flot", "seriesOverrides": [], "spaceLength": 10, "span": 2, "stack": false, "steppedLine": false, "targets": [ { "database": "politraf", "dateColDataType": "event_date", "dateLoading": false, "dateTimeColDataType": "timestamp", "datetimeLoading": false, "formattedQuery": "SELECT $timeSeries as t, count(*) FROM $table WHERE $timeFilter AND score > 0 AND score < 7 GROUP BY t ORDER BY t", "interval": "1d", "intervalFactor": 1, "query": "SELECT $timeSeries as t, count(*) FROM $table WHERE $timeFilter AND score > 0 AND score < 7 GROUP BY t ORDER BY t", "rawQuery": "SELECT (intDiv(toUInt32(timestamp), 86400) * 86400) * 1000 as t, count(*) FROM politraf.open_ports WHERE event_date BETWEEN toDate(1505768400) AND toDate(1505854800) AND timestamp BETWEEN toDateTime(1505768400) AND toDateTime(1505854800) AND score > 0 AND score < 7 GROUP BY t ORDER BY t", "refId": "A", "resultFormat": "time_series", "table": "open_ports", "tableLoading": false } ], "thresholds": [], "timeFrom": null, "timeShift": null, "title": "Services with medium CVSS score", "tooltip": { "shared": true, "sort": 0, "value_type": "individual" }, "type": "graph", "xaxis": { "buckets": null, "mode": "time", "name": null, "show": true, "values": [] }, "yaxes": [ { "format": "short", "label": null, "logBase": 1, "max": null, "min": null, "show": true }, { "format": "short", "label": null, "logBase": 1, "max": null, "min": null, "show": true } ] }, { "aliasColors": {}, "bars": true, "dashLength": 10, "dashes": false, "datasource": "${DS_CLICKHOUSE}", "decimals": 0, "fill": 1, "id": 4, "legend": { "avg": false, "current": false, "max": false, "min": false, "show": true, "total": true, "values": true }, "lines": false, "linewidth": 1, "links": [], "nullPointMode": "null", "percentage": false, "pointradius": 5, "points": false, "renderer": "flot", "seriesOverrides": [], "spaceLength": 10, "span": 2, "stack": false, "steppedLine": false, "targets": [ { "database": "politraf", "dateColDataType": "event_date", "dateLoading": false, "dateTimeColDataType": "timestamp", "datetimeLoading": false, "formattedQuery": "SELECT $timeSeries as t, count(*) FROM $table WHERE $timeFilter AND score = 0 GROUP BY t ORDER BY t", "interval": "1d", "intervalFactor": 1, "query": "SELECT $timeSeries as t, count(*) FROM $table WHERE $timeFilter AND score = 0 GROUP BY t ORDER BY t", "rawQuery": "SELECT (intDiv(toUInt32(timestamp), 86400) * 86400) * 1000 as t, count(*) FROM politraf.open_ports WHERE event_date BETWEEN toDate(1505768400) AND toDate(1505854800) AND timestamp BETWEEN toDateTime(1505768400) AND toDateTime(1505854800) AND score = 0 GROUP BY t ORDER BY t", "refId": "A", "resultFormat": "time_series", "table": "open_ports", "tableLoading": false } ], "thresholds": [], "timeFrom": null, "timeShift": null, "title": "Services without vunerabilities", "tooltip": { "shared": true, "sort": 0, "value_type": "individual" }, "type": "graph", "xaxis": { "buckets": null, "mode": "time", "name": null, "show": true, "values": [] }, "yaxes": [ { "format": "short", "label": null, "logBase": 1, "max": null, "min": null, "show": true }, { "format": "short", "label": null, "logBase": 1, "max": null, "min": null, "show": true } ] }, { "aliasColors": { "count()": "#EAB839" }, "bars": true, "dashLength": 10, "dashes": false, "datasource": "${DS_CLICKHOUSE}", "decimals": 0, "fill": 1, "id": 7, "legend": { "avg": false, "current": false, "max": false, "min": false, "show": true, "total": true, "values": true }, "lines": false, "linewidth": 1, "links": [], "nullPointMode": "null", "percentage": false, "pointradius": 5, "points": false, "renderer": "flot", "seriesOverrides": [], "spaceLength": 10, "span": 2, "stack": false, "steppedLine": false, "targets": [ { "database": "politraf", "dateColDataType": "event_date", "dateLoading": false, "dateTimeColDataType": "timestamp", "datetimeLoading": false, "formattedQuery": "SELECT $timeSeries as t, count(*) FROM $table WHERE $timeFilter AND srv='ssh'  GROUP BY t ORDER BY t", "interval": "1d", "intervalFactor": 1, "query": "SELECT $timeSeries as t, count(*) FROM $table WHERE $timeFilter AND srv='ssh' GROUP BY t ORDER BY t", "rawQuery": "SELECT (intDiv(toUInt32(timestamp), 86400) * 86400) * 1000 as t, count(*) FROM politraf.open_ports WHERE event_date BETWEEN toDate(1505768400) AND toDate(1505854800) AND timestamp BETWEEN toDateTime(1505768400) AND toDateTime(1505854800) AND srv='ssh' GROUP BY t ORDER BY t", "refId": "A", "resultFormat": "time_series", "table": "open_ports", "tableLoading": false } ], "thresholds": [], "timeFrom": null, "timeShift": null, "title": "Hosts with open SSH", "tooltip": { "shared": true, "sort": 0, "value_type": "individual" }, "type": "graph", "xaxis": { "buckets": null, "mode": "time", "name": null, "show": true, "values": [] }, "yaxes": [ { "format": "short", "label": null, "logBase": 1, "max": null, "min": null, "show": true }, { "format": "short", "label": null, "logBase": 1, "max": null, "min": null, "show": true } ] }, { "aliasColors": {}, "bars": true, "dashLength": 10, "dashes": false, "datasource": "${DS_CLICKHOUSE}", "decimals": 0, "fill": 1, "id": 9, "legend": { "avg": false, "current": false, "max": false, "min": false, "show": true, "total": true, "values": true }, "lines": false, "linewidth": 1, "links": [], "nullPointMode": "null", "percentage": false, "pointradius": 5, "points": false, "renderer": "flot", "seriesOverrides": [], "spaceLength": 10, "span": 2, "stack": false, "steppedLine": false, "targets": [ { "database": "politraf", "dateColDataType": "event_date", "dateLoading": false, "dateTimeColDataType": "timestamp", "datetimeLoading": false, "formattedQuery": "SELECT $timeSeries as t, count(*) FROM $table WHERE $timeFilter AND srv='http'  GROUP BY t ORDER BY t", "interval": "1d", "intervalFactor": 1, "query": "SELECT $timeSeries as t, count(*) FROM $table WHERE $timeFilter AND srv='http' GROUP BY t ORDER BY t", "rawQuery": "SELECT (intDiv(toUInt32(timestamp), 86400) * 86400) * 1000 as t, count(*) FROM politraf.open_ports WHERE event_date BETWEEN toDate(1505768400) AND toDate(1505854800) AND timestamp BETWEEN toDateTime(1505768400) AND toDateTime(1505854800) AND srv='http' GROUP BY t ORDER BY t", "refId": "A", "resultFormat": "time_series", "table": "open_ports", "tableLoading": false } ], "thresholds": [], "timeFrom": null, "timeShift": null, "title": "Hosts with open HTTP", "tooltip": { "shared": true, "sort": 0, "value_type": "individual" }, "type": "graph", "xaxis": { "buckets": null, "mode": "time", "name": null, "show": true, "values": [] }, "yaxes": [ { "format": "short", "label": null, "logBase": 1, "max": null, "min": null, "show": true }, { "format": "short", "label": null, "logBase": 1, "max": null, "min": null, "show": true } ] }, { "aliasColors": {}, "bars": true, "dashLength": 10, "dashes": false, "datasource": "${DS_CLICKHOUSE}", "decimals": 0, "fill": 1, "id": 8, "legend": { "avg": false, "current": false, "max": false, "min": false, "show": true, "total": true, "values": true }, "lines": false, "linewidth": 1, "links": [], "nullPointMode": "null", "percentage": false, "pointradius": 5, "points": false, "renderer": "flot", "seriesOverrides": [], "spaceLength": 10, "span": 2, "stack": false, "steppedLine": false, "targets": [ { "database": "politraf", "dateColDataType": "event_date", "dateLoading": false, "dateTimeColDataType": "timestamp", "datetimeLoading": false, "formattedQuery": "SELECT $timeSeries as t, count(*) FROM $table WHERE $timeFilter AND srv='smb'  GROUP BY t ORDER BY t", "interval": "1d", "intervalFactor": 1, "query": "SELECT $timeSeries as t, count(*) FROM $table WHERE $timeFilter AND srv='smb' GROUP BY t ORDER BY t", "rawQuery": "SELECT (intDiv(toUInt32(timestamp), 86400) * 86400) * 1000 as t, count(*) FROM politraf.open_ports WHERE event_date BETWEEN toDate(1505768400) AND toDate(1505854800) AND timestamp BETWEEN toDateTime(1505768400) AND toDateTime(1505854800) AND srv='smb' GROUP BY t ORDER BY t", "refId": "A", "resultFormat": "time_series", "table": "open_ports", "tableLoading": false } ], "thresholds": [], "timeFrom": null, "timeShift": null, "title": "Hosts with open SMB", "tooltip": { "shared": true, "sort": 0, "value_type": "individual" }, "type": "graph", "xaxis": { "buckets": null, "mode": "time", "name": null, "show": true, "values": [] }, "yaxes": [ { "format": "short", "label": null, "logBase": 1, "max": null, "min": null, "show": true }, { "format": "short", "label": null, "logBase": 1, "max": null, "min": null, "show": true } ] } ], "repeat": null, "repeatIteration": null, "repeatRowId": null, "showTitle": false, "title": "Dashboard Row", "titleSize": "h6" }, { "collapse": false, "height": 717, "panels": [ { "columns": [], "datasource": "${DS_CLICKHOUSE}", "fontSize": "80%", "id": 2, "links": [], "minSpan": null, "pageSize": 254, "scroll": true, "showHeader": true, "sort": { "col": 8, "desc": true }, "span": 8, "styles": [ { "alias": "Title", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 2, "link": true, "linkTargetBlank": true, "linkTooltip": "Go to vulners.com", "linkUrl": "https://vulners.com/search?query=$__cell", "pattern": "title", "preserveFormat": false, "thresholds": [], "type": "string", "unit": "short" }, { "alias": "Service", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 2, "pattern": "srv", "thresholds": [], "type": "string", "unit": "short" }, { "alias": "IP addres", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 2, "pattern": "addr", "thresholds": [], "type": "string", "unit": "short" }, { "alias": "", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 0, "pattern": "Port", "thresholds": [], "type": "number", "unit": "short" }, { "alias": "Product", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 2, "pattern": "product", "thresholds": [], "type": "string", "unit": "short" }, { "alias": "Version", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 0, "pattern": "version", "thresholds": [], "type": "string", "unit": "short" }, { "alias": "Vulerability description", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 2, "link": true, "linkTargetBlank": true, "linkTooltip": "Go to vulners.com", "linkUrl": "https://vulners.com/search?query=$__cell_7", "pattern": "vdesc", "preserveFormat": false, "thresholds": [], "type": "string", "unit": "short" }, { "alias": "CVSS", "colorMode": "cell", "colors": [ "rgba(50, 172, 45, 0.97)", "rgba(237, 129, 40, 0.89)", "rgba(245, 54, 54, 0.9)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 1, "link": false, "linkUrl": "", "pattern": "score", "thresholds": [ "5", "7" ], "type": "number", "unit": "short" }, { "alias": "", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "DD/MM/YY h:mm:ss", "decimals": 2, "pattern": "Time", "thresholds": [], "type": "date", "unit": "short" } ], "targets": [ { "database": "politraf", "dateColDataType": "event_date", "dateLoading": false, "dateTimeColDataType": "timestamp", "datetimeLoading": false, "formattedQuery": "SELECT
    timestamp,
    os_v,
    addr,
    port,
    srv,
    product,
    version,
    title,
    score,
    vdesc
FROM $table
WHERE $timeFilter AND score > 0 AND srv LIKE $Services AND addr LIKE $Host
GROUP BY score, timestamp, addr, port, os_v, srv, product, version, title, vdesc
ORDER BY score DESC", "interval": "", "intervalFactor": 1, "query": "SELECT\n timestamp,\n os_v,\n addr,\n port,\n srv,\n product,\n version,\n title,\n score,\n vdesc\nFROM $table\nWHERE $timeFilter AND score > 0 AND srv LIKE $Services AND addr LIKE $Host\nGROUP BY score, timestamp, addr, port, os_v, srv, product, version, title, vdesc\nORDER BY score DESC", "rawQuery": "SELECT timestamp, os_v, addr, port, srv, product, version, title, score, vdesc FROM politraf.open_ports WHERE event_date >= toDate(1505723776) AND timestamp >= toDateTime(1505723776) AND score > 0 AND srv LIKE '%' AND addr LIKE '%' GROUP BY score, timestamp, addr, port, os_v, srv, product, version, title, vdesc ORDER BY score DESC", "refId": "A", "resultFormat": "time_series", "table": "open_ports", "tableLoading": false } ], "timeFrom": "1d", "title": "Vulnerable services - $Services", "transform": "timeseries_to_columns", "type": "table" }, { "columns": [], "datasource": "${DS_CLICKHOUSE}", "fontSize": "80%", "id": 10, "links": [], "minSpan": null, "pageSize": 254, "repeat": null, "scroll": true, "showHeader": true, "sort": { "col": 0, "desc": true }, "span": 4, "styles": [ { "alias": "OS Verion", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 2, "pattern": "os_v", "thresholds": [], "type": "string", "unit": "short" }, { "alias": "Service", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 2, "pattern": "srv", "thresholds": [], "type": "string", "unit": "short" }, { "alias": "IP addres", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 2, "pattern": "addr", "thresholds": [], "type": "string", "unit": "short" }, { "alias": "", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 0, "pattern": "Port", "thresholds": [], "type": "number", "unit": "short" }, { "alias": "Product", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 2, "pattern": "product", "thresholds": [], "type": "string", "unit": "short" }, { "alias": "Version", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 0, "pattern": "version", "thresholds": [], "type": "string", "unit": "short" }, { "alias": "Vulerability description", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 2, "pattern": "vdesc", "preserveFormat": false, "thresholds": [], "type": "string", "unit": "short" }, { "alias": "CVSS", "colorMode": "cell", "colors": [ "rgba(50, 172, 45, 0.97)", "rgba(237, 129, 40, 0.89)", "rgba(245, 54, 54, 0.9)" ], "dateFormat": "YYYY-MM-DD HH:mm:ss", "decimals": 1, "link": false, "linkUrl": "", "pattern": "score", "thresholds": [ "7", " 5", " 0" ], "type": "number", "unit": "short" }, { "alias": "", "colorMode": null, "colors": [ "rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)" ], "dateFormat": "DD/MM/YY h:mm:ss", "decimals": 2, "pattern": "Time", "thresholds": [], "type": "date", "unit": "short" } ], "targets": [ { "database": "politraf", "dateColDataType": "event_date", "dateLoading": false, "dateTimeColDataType": "timestamp", "datetimeLoading": false, "formattedQuery": "SELECT
    timestamp,
    os_v,
    addr,
    srv,
    port,
    product,
    version
FROM $table
WHERE $timeFilter AND score = 0 AND srv LIKE $Services AND addr LIKE $Host
ORDER BY addr", "interval": "1s", "intervalFactor": 1, "query": "SELECT\n timestamp,\n os_v,\n addr,\n srv,\n port,\n product,\n version\nFROM $table\nWHERE $timeFilter AND score = 0 AND srv LIKE $Services AND addr LIKE $Host\nORDER BY addr", "rawQuery": "SELECT timestamp, os_v, addr, srv, port, product, version FROM politraf.open_ports WHERE event_date >= toDate(1505723776) AND timestamp >= toDateTime(1505723776) AND score = 0 AND srv LIKE '%' AND addr LIKE '%' ORDER BY addr", "refId": "A", "resultFormat": "time_series", "table": "open_ports", "tableLoading": false } ], "timeFrom": "1d", "title": "Full list. Service - $Services", "transform": "timeseries_to_columns", "type": "table" } ], "repeat": null, "repeatIteration": null, "repeatRowId": null, "showTitle": false, "title": "Dashboard Row", "titleSize": "h6" } ], "schemaVersion": 14, "style": "dark", "tags": [], "templating": { "list": [ { "allValue": "'%'", "current": {}, "datasource": "${DS_CLICKHOUSE}", "hide": 0, "includeAll": true, "label": "Select service", "multi": false, "name": "Services", "options": [], "query": "SELECT srv FROM politraf.open_ports GROUP BY srv", "refresh": 2, "regex": "", "sort": 1, "tagValuesQuery": "", "tags": [], "tagsQuery": "", "type": "query", "useTags": false }, { "allValue": "'%'", "current": {}, "datasource": "${DS_CLICKHOUSE}", "hide": 0, "includeAll": true, "label": "Select host", "multi": false, "name": "Host", "options": [], "query": "SELECT addr FROM politraf.open_ports GROUP BY addr", "refresh": 2, "regex": "", "sort": 1, "tagValuesQuery": "", "tags": [], "tagsQuery": "", "type": "query", "useTags": false } ] }, "time": { "from": "now/d", "to": "now/d" }, "timepicker": { "refresh_intervals": [ "5s", "10s", "30s", "1m", "5m", "15m", "30m", "1h", "2h", "1d" ], "time_options": [ "5m", "15m", "1h", "6h", "12h", "24h", "2d", "7d", "30d" ] }, "timezone": "", "title": "politraf_censys_vulners", "version": 68, "description": "politraf_censys_vulners" }