{"Endpoints":{"http:50059":{"Firsttime":1769699372.2127721,"lasttime":1774100120.457866,"paths":["/dot.gif","/ga.js","/updates.rss","/en_US/all.js","/cm"],"port":"50059","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"121.40.37.253","beacon_port":"50059","config_hash":"e26d0793b64d06cea577e81c5efe18ceb1e793ccddb7ae48525fa298d50bbc63","trial":false,"ts":1771641937.7762918,"version":"Cobalt Strike 4.0 (Dec 05, 2019)","watermark":305419896},{"arch":"x64","beacon_ip":"121.40.37.253","beacon_port":"50059","config_hash":"b628f80bec12c989a85881d4ca743d910f121d850731f300e5fb218887ad29cf","trial":false,"ts":1771641949.4408278,"version":"Unknown","watermark":305419896},{"arch":"x86","beacon_ip":"121.40.37.253","beacon_port":"50059","config_hash":"da5db3b4d9d7a15376f91b4cea0f5c32e8dd8498bf79bcae475cbc5910a45797","trial":false,"ts":1772308368.281243,"version":"Cobalt Strike 4.0 (Dec 05, 2019)","watermark":305419896},{"arch":"x64","beacon_ip":"121.40.37.253","beacon_port":"50059","config_hash":"1f08323dea54bbdc7a8f2c62ef901bbff8d62f1dcdccfa28a498254c3b0b701b","trial":false,"ts":1772308371.4597683,"version":"Unknown","watermark":305419896},{"arch":"x86","beacon_ip":"121.40.37.253","beacon_port":"50059","config_hash":"d10036983b5d3aa5ced15816c982d304bed28372d5eb2791d040acdbf20caf4f","trial":false,"ts":1774100117.7412753,"version":"Cobalt Strike 4.0 (Dec 05, 2019)","watermark":305419896},{"arch":"x64","beacon_ip":"121.40.37.253","beacon_port":"50059","config_hash":"d5edc5f3f9692a556c7c0546232ba5a6bb184ac74001f338d02abc1a697004bf","trial":false,"ts":1774100120.457866,"version":"Unknown","watermark":305419896}],"submituris":["/submit.php"],"urls":["http://121.40.37.253:50059/dot.gif/submit.php","http://121.40.37.253:50059/submit.php","http://121.40.37.253:50059/ga.js/submit.php","http://121.40.37.253:50059/updates.rss/submit.php","http://121.40.37.253:50059/en_US/all.js/submit.php","http://121.40.37.253:50059/cm/submit.php"]}},"Firsttime":1769699372.2127721,"Host":"121.40.37.253","IP":"121.40.37.253","IPs":["121.40.37.253"],"Paths":["/dot.gif","/ga.js","/updates.rss","/en_US/all.js","/cm"],"Ports":["50059"],"Protocols":["http"],"SubmitURIs":["/submit.php"],"URLs":["http://121.40.37.253:50059/dot.gif/submit.php","http://121.40.37.253:50059/submit.php","http://121.40.37.253:50059/ga.js/submit.php","http://121.40.37.253:50059/updates.rss/submit.php","http://121.40.37.253:50059/en_US/all.js/submit.php","http://121.40.37.253:50059/cm/submit.php"],"ip_enrichment":{"121.40.37.253":{"ASN":{"number":37963,"org":"ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd."},"GEO":{"country":"CN","country_name":"China","lat":35.0,"lon":105.0},"first":1769699372.2127721,"last":1769699374.3336143,"meta":{"build_db":"2025-10-14 12:06:54","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1769699760.4909928}},"lasttime":1774100120.457866}