{"Endpoints":{"http:30005":{"Firsttime":1776722703.9212122,"lasttime":1781013962.2994742,"paths":["/api/x"],"port":"30005","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"117.72.39.83","beacon_port":"30005","config_hash":"c095ddcfaaca6c10149583e1402589db08cb92bfb4d03caa4beffd00f3bcd66b","trial":false,"ts":1781013960.5071354,"version":"Cobalt Strike 4.7 (Aug 17, 2022)","watermark":391144938},{"arch":"x64","beacon_ip":"117.72.39.83","beacon_port":"30005","config_hash":"9c1007f977f20ff903108f5fd09a9c590c99a7adeef0ee59edc8173c9bd822ef","trial":false,"ts":1781013962.2994742,"version":"Cobalt Strike 4.7 (Aug 17, 2022)","watermark":391144938}],"submituris":["/api/y"],"urls":["http://117.72.39.83:30005/api/x/api/y","http://117.72.39.83:30005/api/y"]},"http:33333":{"Firsttime":1778508654.4031746,"lasttime":1778595179.6974838,"paths":["/api/x"],"port":"33333","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"117.72.39.83","beacon_port":"33333","config_hash":"f1284e1f999f8f003b27cff6a8c01fed0f7ef8b190b54a429a95fc3c189cd2ab","trial":false,"ts":1778595169.5436773,"version":"Cobalt Strike 4.7 (Aug 17, 2022)","watermark":391144938},{"arch":"x64","beacon_ip":"117.72.39.83","beacon_port":"33333","config_hash":"d9dac0770e522c2bf70bb8d622d7a003da0f67f50ecf3073d7603b58b1e4917e","trial":false,"ts":1778595179.6974838,"version":"Cobalt Strike 4.7 (Aug 17, 2022)","watermark":391144938}],"submituris":["/api/y"],"urls":["http://117.72.39.83:33333/api/x/api/y","http://117.72.39.83:33333/api/y"]},"http:4433":{"Firsttime":1776722708.459577,"lasttime":1779718052.6209602,"paths":["/api/x"],"port":"4433","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"117.72.39.83","beacon_port":"4433","config_hash":"967d566e324768488da83761675a5df9b57daf15f53af63b2ee8c9ba0ec68a4e","trial":false,"ts":1779718043.832911,"version":"Cobalt Strike 4.7 (Aug 17, 2022)","watermark":391144938},{"arch":"x64","beacon_ip":"117.72.39.83","beacon_port":"4433","config_hash":"27319e3ffd9b40d6ae65a86955e2c04e1cd10698c4d8e86afa97fcc09ed9426a","trial":false,"ts":1779718052.6209602,"version":"Cobalt Strike 4.7 (Aug 17, 2022)","watermark":391144938}],"submituris":["/api/y"],"urls":["http://117.72.39.83:4433/api/x/api/y","http://117.72.39.83:4433/api/y"]},"https:43872":{"Firsttime":1778508662.8550506,"lasttime":1778595187.8034651,"paths":["/api/x"],"port":"43872","protocol":"https","seen_in":[{"arch":"x86","beacon_ip":"117.72.39.83","beacon_port":"43872","config_hash":"5ffdc5c90f6ee13ea65a85a7be0b6b99d0e32f7bad76ad6cb15f160b80894241","trial":false,"ts":1778595183.703385,"version":"Cobalt Strike 4.7 (Aug 17, 2022)","watermark":391144938},{"arch":"x64","beacon_ip":"117.72.39.83","beacon_port":"43872","config_hash":"f09f9228b2a888f150688f851227567f6e7a5de8e3012375ae7d2678aca9b50e","trial":false,"ts":1778595187.8034651,"version":"Cobalt Strike 4.7 (Aug 17, 2022)","watermark":391144938}],"submituris":["/api/y"],"urls":["https://117.72.39.83:43872/api/x/api/y","https://117.72.39.83:43872/api/y"]}},"Firsttime":1776722703.9212122,"Host":"117.72.39.83","IP":"117.72.39.83","IPs":["117.72.39.83"],"Paths":["/api/x"],"Ports":["30005","4433","33333","43872"],"Protocols":["http","https"],"SubmitURIs":["/api/y"],"URLs":["http://117.72.39.83:30005/api/x/api/y","http://117.72.39.83:30005/api/y","http://117.72.39.83:4433/api/x/api/y","http://117.72.39.83:4433/api/y","http://117.72.39.83:33333/api/x/api/y","http://117.72.39.83:33333/api/y","https://117.72.39.83:43872/api/x/api/y","https://117.72.39.83:43872/api/y"],"ip_enrichment":{"117.72.39.83":{"ASN":{"number":141679,"org":"CHINATELECOM-IDC-BTHBD-AP China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch"},"GEO":{"country":"CN","country_name":"China","lat":35.0,"lon":105.0},"first":1776722703.9212122,"last":1776722713.6020586,"meta":{"build_db":"2025-10-14 12:06:54","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1776722778.0432508}},"lasttime":1781013962.2994742}