{"Endpoints":{"http:80":{"Firsttime":1784009113.8540075,"lasttime":1784066725.693625,"paths":["/j.ad","/match"],"port":"80","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"139.155.157.79","beacon_port":"80","config_hash":"0428640009754e5a37320236dc528f9812a710ce58dd8e2af55b2bfa1cd176bd","trial":false,"ts":1784066721.723974,"version":"Cobalt Strike 4.4 (Aug 04, 2021)","watermark":1234567890},{"arch":"x64","beacon_ip":"139.155.157.79","beacon_port":"80","config_hash":"a2785b192bb54ca9b6696cfdc79009deed72010f45a9a97c36ce7b875850dd42","trial":false,"ts":1784066725.693625,"version":"Unknown","watermark":1234567890}],"submituris":["/submit.php"],"urls":["http://139.155.157.79:80/j.ad/submit.php","http://139.155.157.79:80/submit.php","http://139.155.157.79:80/match/submit.php"]},"https:1443":{"Firsttime":1783980331.1014643,"lasttime":1784124399.281131,"paths":["/wc/58462514417"],"port":"1443","protocol":"https","seen_in":[{"arch":"x86","beacon_ip":"139.155.157.79","beacon_port":"1443","config_hash":"e520c601e879aa05f8e0daf9339f16c844025446f4ea173ea2b5d6ad47cf24ae","trial":false,"ts":1784124388.326806,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"139.155.157.79","beacon_port":"1443","config_hash":"5a9fdaf48cab609dbc9d6db46b7c584d51d4df381f378810c1d9cc92f5dc6164","trial":false,"ts":1784124399.281131,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666}],"submituris":["/meeting/save"],"urls":["https://139.155.157.79:1443/meeting/save","https://139.155.157.79:1443/wc/58462514417/meeting/save"]}},"Firsttime":1783980331.1014643,"Host":"139.155.157.79","IP":"139.155.157.79","IPs":["139.155.157.79"],"Paths":["/wc/58462514417","/j.ad","/match"],"Ports":["1443","80"],"Protocols":["https","http"],"SubmitURIs":["/meeting/save","/submit.php"],"URLs":["https://139.155.157.79:1443/meeting/save","https://139.155.157.79:1443/wc/58462514417/meeting/save","http://139.155.157.79:80/j.ad/submit.php","http://139.155.157.79:80/submit.php","http://139.155.157.79:80/match/submit.php"],"ip_enrichment":{"139.155.157.79":{"ASN":{"number":45090,"org":"TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited"},"GEO":{"country":"CN","country_name":"China","lat":35.0,"lon":105.0},"first":1783980331.1014643,"last":1783980333.8755257,"meta":{"build_db":"2025-10-14 12:06:54","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1783980424.2852387}},"lasttime":1784124399.281131}