Home Beacons C2 Search SuperSearch API

C2

Key: 116.203.31.207 · Resolved IP: 116.203.31.207
Protocols: http · Ports: 9999
First view: 2025-12-26 00:11:20 CET · Last view: 2026-01-16 16:06:20 CET

Endpoints

ID Protocole Port First view Last view SubmitURIs Paths URLs Seen in
http:9999 http 9999 2025-12-26 00:11:20 CET 2026-01-16 16:06:20 CET /submit.php /j.ad, /activity, /ga.js, /dot.gif 5
Sample
  • http://116.203.31.207:9999/j.ad/submit.php
  • http://116.203.31.207:9999/submit.php
  • http://116.203.31.207:9999/activity/submit.php
  • http://116.203.31.207:9999/ga.js/submit.php
  • http://116.203.31.207:9999/dot.gif/submit.php
 4
hashes 
{
  "Endpoints": {
    "http:9999": {
      "Firsttime": 1766704280.9201412,
      "lasttime": 1768575980.97156,
      "paths": [
        "/j.ad",
        "/activity",
        "/ga.js",
        "/dot.gif"
      ],
      "port": "9999",
      "protocol": "http",
      "seen_in": [
        {
          "arch": "x64",
          "beacon_ip": "150.187.25.242",
          "beacon_port": "9999",
          "config_hash": "28ef0d2000d585a4cf1146b76dfcdbfe74e20332b81f9a4e4fc2a838886c8883",
          "trial": false,
          "ts": 1768403497.1787262,
          "version": "Cobalt Strike 4.9 (Sep 19, 2023)",
          "watermark": 987654321
        },
        {
          "arch": "x86",
          "beacon_ip": "150.187.25.242",
          "beacon_port": "9999",
          "config_hash": "d02ce04c48fce1e9fa4947cfff42809fe6bcf076d61cde3fee916517b3be7501",
          "trial": false,
          "ts": 1768403492.313913,
          "version": "Cobalt Strike 4.9 (Sep 19, 2023)",
          "watermark": 987654321
        },
        {
          "arch": "x86",
          "beacon_ip": "150.187.25.242",
          "beacon_port": "9999",
          "config_hash": "ddf6deb87901c1c3dcb37fb9117621eb3eb383d5e2ada09f520d39087f51d4a3",
          "trial": false,
          "ts": 1768575978.9252703,
          "version": "Cobalt Strike 4.9 (Sep 19, 2023)",
          "watermark": 987654321
        },
        {
          "arch": "x64",
          "beacon_ip": "150.187.25.242",
          "beacon_port": "9999",
          "config_hash": "866bef0abb4a8478e174abbe85f3a413c7ed728404f745ac9b01ac43d352b68c",
          "trial": false,
          "ts": 1768575980.97156,
          "version": "Cobalt Strike 4.9 (Sep 19, 2023)",
          "watermark": 987654321
        }
      ],
      "submituris": [
        "/submit.php"
      ],
      "urls": [
        "http://116.203.31.207:9999/j.ad/submit.php",
        "http://116.203.31.207:9999/submit.php",
        "http://116.203.31.207:9999/activity/submit.php",
        "http://116.203.31.207:9999/ga.js/submit.php",
        "http://116.203.31.207:9999/dot.gif/submit.php"
      ]
    }
  },
  "Firsttime": 1766704280.9201412,
  "Host": "116.203.31.207",
  "IP": "116.203.31.207",
  "IPs": [
    "116.203.31.207"
  ],
  "Paths": [
    "/j.ad",
    "/activity",
    "/ga.js",
    "/dot.gif"
  ],
  "Ports": [
    "9999"
  ],
  "Protocols": [
    "http"
  ],
  "SubmitURIs": [
    "/submit.php"
  ],
  "URLs": [
    "http://116.203.31.207:9999/j.ad/submit.php",
    "http://116.203.31.207:9999/submit.php",
    "http://116.203.31.207:9999/activity/submit.php",
    "http://116.203.31.207:9999/ga.js/submit.php",
    "http://116.203.31.207:9999/dot.gif/submit.php"
  ],
  "ip_enrichment": {
    "116.203.31.207": {
      "ASN": {
        "number": 24940,
        "org": "HETZNER-AS"
      },
      "GEO": {
        "country": "DE",
        "country_name": "Germany",
        "lat": 51.0,
        "lon": 9.0
      },
      "first": 1766704280.9201412,
      "last": 1767423995.5879605,
      "meta": {
        "build_db": "2025-10-14 12:06:54",
        "db_source": "GeoOpen-Country-ASN"
      },
      "source": "ip.circl.lu",
      "updated": 1767456638.717362
    }
  },
  "lasttime": 1768575980.97156
}