C2
Key: 121.40.37.253 · Resolved IP: 121.40.37.253
Protocols: http · Ports: 50059
First view: 2026-01-29 16:09:32 CET · Last view: 2026-03-05 22:57:07 CET
Endpoints
| ID |
Protocole |
Port |
First view |
Last view |
SubmitURIs |
Paths |
URLs |
Seen in |
| http:50059 |
http |
50059 |
2026-01-29 16:09:32 CET |
2026-03-05 22:57:07 CET |
/submit.php |
/dot.gif, /ga.js, /updates.rss, /en_US/all.js, /cm |
6
Sample
- http://121.40.37.253:50059/dot.gif/submit.php
- http://121.40.37.253:50059/submit.php
- http://121.40.37.253:50059/ga.js/submit.php
- http://121.40.37.253:50059/updates.rss/submit.php
- http://121.40.37.253:50059/en_US/all.js/submit.php
|
6
hashes
|
{
"Endpoints": {
"http:50059": {
"Firsttime": 1769699372.2127721,
"lasttime": 1772747827.5437467,
"paths": [
"/dot.gif",
"/ga.js",
"/updates.rss",
"/en_US/all.js",
"/cm"
],
"port": "50059",
"protocol": "http",
"seen_in": [
{
"arch": "x86",
"beacon_ip": "121.40.37.253",
"beacon_port": "50059",
"config_hash": "e26d0793b64d06cea577e81c5efe18ceb1e793ccddb7ae48525fa298d50bbc63",
"trial": false,
"ts": 1771641937.7762918,
"version": "Cobalt Strike 4.0 (Dec 05, 2019)",
"watermark": 305419896
},
{
"arch": "x64",
"beacon_ip": "121.40.37.253",
"beacon_port": "50059",
"config_hash": "b628f80bec12c989a85881d4ca743d910f121d850731f300e5fb218887ad29cf",
"trial": false,
"ts": 1771641949.4408278,
"version": "Unknown",
"watermark": 305419896
},
{
"arch": "x86",
"beacon_ip": "121.40.37.253",
"beacon_port": "50059",
"config_hash": "da5db3b4d9d7a15376f91b4cea0f5c32e8dd8498bf79bcae475cbc5910a45797",
"trial": false,
"ts": 1772308368.281243,
"version": "Cobalt Strike 4.0 (Dec 05, 2019)",
"watermark": 305419896
},
{
"arch": "x64",
"beacon_ip": "121.40.37.253",
"beacon_port": "50059",
"config_hash": "1f08323dea54bbdc7a8f2c62ef901bbff8d62f1dcdccfa28a498254c3b0b701b",
"trial": false,
"ts": 1772308371.4597683,
"version": "Unknown",
"watermark": 305419896
},
{
"arch": "x86",
"beacon_ip": "121.40.37.253",
"beacon_port": "50059",
"config_hash": "d10036983b5d3aa5ced15816c982d304bed28372d5eb2791d040acdbf20caf4f",
"trial": false,
"ts": 1772747825.5341158,
"version": "Cobalt Strike 4.0 (Dec 05, 2019)",
"watermark": 305419896
},
{
"arch": "x64",
"beacon_ip": "121.40.37.253",
"beacon_port": "50059",
"config_hash": "d5edc5f3f9692a556c7c0546232ba5a6bb184ac74001f338d02abc1a697004bf",
"trial": false,
"ts": 1772747827.5437467,
"version": "Unknown",
"watermark": 305419896
}
],
"submituris": [
"/submit.php"
],
"urls": [
"http://121.40.37.253:50059/dot.gif/submit.php",
"http://121.40.37.253:50059/submit.php",
"http://121.40.37.253:50059/ga.js/submit.php",
"http://121.40.37.253:50059/updates.rss/submit.php",
"http://121.40.37.253:50059/en_US/all.js/submit.php",
"http://121.40.37.253:50059/cm/submit.php"
]
}
},
"Firsttime": 1769699372.2127721,
"Host": "121.40.37.253",
"IP": "121.40.37.253",
"IPs": [
"121.40.37.253"
],
"Paths": [
"/dot.gif",
"/ga.js",
"/updates.rss",
"/en_US/all.js",
"/cm"
],
"Ports": [
"50059"
],
"Protocols": [
"http"
],
"SubmitURIs": [
"/submit.php"
],
"URLs": [
"http://121.40.37.253:50059/dot.gif/submit.php",
"http://121.40.37.253:50059/submit.php",
"http://121.40.37.253:50059/ga.js/submit.php",
"http://121.40.37.253:50059/updates.rss/submit.php",
"http://121.40.37.253:50059/en_US/all.js/submit.php",
"http://121.40.37.253:50059/cm/submit.php"
],
"ip_enrichment": {
"121.40.37.253": {
"ASN": {
"number": 37963,
"org": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd."
},
"GEO": {
"country": "CN",
"country_name": "China",
"lat": 35.0,
"lon": 105.0
},
"first": 1769699372.2127721,
"last": 1769699374.3336143,
"meta": {
"build_db": "2025-10-14 12:06:54",
"db_source": "GeoOpen-Country-ASN"
},
"source": "ip.circl.lu",
"updated": 1769699760.4909928
}
},
"lasttime": 1772747827.5437467
}