C2

Key: 113.44.67.52 · Resolved IP: 113.44.67.52
Protocols: http · Ports: 8089
First view: 2025-12-25 16:06:50 CET · Last view: 2026-01-15 08:09:28 CET

Endpoints

ID	Protocole	Port	First view	Last view	SubmitURIs	Paths	URLs	Seen in
http:8089	http	8089	2025-12-25 16:06:50 CET	2026-01-15 08:09:28 CET	/uploadLog	/getLogs	2 Sample http://113.44.67.52:8089/getLogs/uploadLog http://113.44.67.52:8089/uploadLog	2 hashes 8d25ec06d98ad09acabf41e1b7cc72d0e0b2788f04467638dab5229445125b7d dc0ca64e4b5c2ce7a1fddd3fcdfdee3ca40a8bcb32a082a6f3590b281f4874b1

{
  "Endpoints": {
    "http:8089": {
      "Firsttime": 1766675210.103409,
      "lasttime": 1768460968.0899148,
      "paths": [
        "/getLogs"
      ],
      "port": "8089",
      "protocol": "http",
      "seen_in": [
        {
          "arch": "x64",
          "beacon_ip": "113.44.67.52",
          "beacon_port": "8089",
          "config_hash": "dc0ca64e4b5c2ce7a1fddd3fcdfdee3ca40a8bcb32a082a6f3590b281f4874b1",
          "trial": false,
          "ts": 1768460968.0899148,
          "version": "Unknown",
          "watermark": 987654321
        },
        {
          "arch": "x86",
          "beacon_ip": "113.44.67.52",
          "beacon_port": "8089",
          "config_hash": "8d25ec06d98ad09acabf41e1b7cc72d0e0b2788f04467638dab5229445125b7d",
          "trial": false,
          "ts": 1768460962.0676646,
          "version": "Cobalt Strike 4.9 (Sep 19, 2023)",
          "watermark": 987654321
        }
      ],
      "submituris": [
        "/uploadLog"
      ],
      "urls": [
        "http://113.44.67.52:8089/getLogs/uploadLog",
        "http://113.44.67.52:8089/uploadLog"
      ]
    }
  },
  "Firsttime": 1766675210.103409,
  "Host": "113.44.67.52",
  "IP": "113.44.67.52",
  "IPs": [
    "113.44.67.52"
  ],
  "Paths": [
    "/getLogs"
  ],
  "Ports": [
    "8089"
  ],
  "Protocols": [
    "http"
  ],
  "SubmitURIs": [
    "/uploadLog"
  ],
  "URLs": [
    "http://113.44.67.52:8089/getLogs/uploadLog",
    "http://113.44.67.52:8089/uploadLog"
  ],
  "ip_enrichment": {
    "113.44.67.52": {
      "ASN": {
        "number": 55990,
        "org": "HWCSNET Huawei Cloud Service data center"
      },
      "GEO": {
        "country": "CN",
        "country_name": "China",
        "lat": 35.0,
        "lon": 105.0
      },
      "first": 1766675210.103409,
      "last": 1767453139.202405,
      "meta": {
        "build_db": "2025-10-14 12:06:54",
        "db_source": "GeoOpen-Country-ASN"
      },
      "source": "ip.circl.lu",
      "updated": 1767456638.891323
    }
  },
  "lasttime": 1768460968.0899148
}