{"Endpoints":{"https:30005":{"Firsttime":1785420317.8397987,"lasttime":1790345313.4758575,"paths":["/IE9CompatViewList.xml","/g.pixel","/match","/ptj","/ca","/pixel"],"port":"30005","protocol":"https","seen_in":[{"arch":"x86","beacon_ip":"14.225.212.124","beacon_port":"30005","config_hash":"08b6ca300dc206930ec509f1793ee87d432b3f97f712ec2ab913473b1e927f7e","trial":false,"ts":1787061959.7514403,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321},{"arch":"x64","beacon_ip":"14.225.212.124","beacon_port":"30005","config_hash":"1269759915aff3d94a6047eaa391f507108ceb70419d9c5084852a24368800e7","trial":false,"ts":1787061961.5417657,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321},{"arch":"x86","beacon_ip":"222.255.215.42","beacon_port":"30005","config_hash":"08b6ca300dc206930ec509f1793ee87d432b3f97f712ec2ab913473b1e927f7e","trial":false,"ts":1787148336.6595325,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321},{"arch":"x64","beacon_ip":"222.255.215.42","beacon_port":"30005","config_hash":"1269759915aff3d94a6047eaa391f507108ceb70419d9c5084852a24368800e7","trial":false,"ts":1787148338.487161,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321},{"arch":"x86","beacon_ip":"222.255.215.42","beacon_port":"30005","config_hash":"de45752c3f4e396a011d252210147855dfa5a67e9f1bddc1ac243e59b022bc18","trial":false,"ts":1788876338.2317066,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321},{"arch":"x64","beacon_ip":"222.255.215.42","beacon_port":"30005","config_hash":"4b88f0a1a098005415f400fe16a962e7ff902e6bc40deaf76ca387459d7fabd4","trial":false,"ts":1788876340.1150014,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321},{"arch":"x86","beacon_ip":"14.225.212.124","beacon_port":"30005","config_hash":"de45752c3f4e396a011d252210147855dfa5a67e9f1bddc1ac243e59b022bc18","trial":false,"ts":1788789983.215067,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321},{"arch":"x64","beacon_ip":"14.225.212.124","beacon_port":"30005","config_hash":"4b88f0a1a098005415f400fe16a962e7ff902e6bc40deaf76ca387459d7fabd4","trial":false,"ts":1788789986.226425,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321},{"arch":"x86","beacon_ip":"222.255.215.42","beacon_port":"30005","config_hash":"d511e4bcaf75ce79ae766b3a2eb71fdf4d9696205d18e96156ad1b1d9068f4c4","trial":false,"ts":1790345311.6886625,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321},{"arch":"x64","beacon_ip":"222.255.215.42","beacon_port":"30005","config_hash":"a907ef33088ab8d524f3714a0fd375778bc67c910478ea2c3885ce84c555ee8d","trial":false,"ts":1790345313.4758575,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321},{"arch":"x86","beacon_ip":"14.225.212.124","beacon_port":"30005","config_hash":"d511e4bcaf75ce79ae766b3a2eb71fdf4d9696205d18e96156ad1b1d9068f4c4","trial":false,"ts":1790345306.5865066,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321},{"arch":"x64","beacon_ip":"14.225.212.124","beacon_port":"30005","config_hash":"a907ef33088ab8d524f3714a0fd375778bc67c910478ea2c3885ce84c555ee8d","trial":false,"ts":1790345309.8168585,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321}],"submituris":["/submit.php"],"urls":["https://14.225.212.124:30005/IE9CompatViewList.xml/submit.php","https://14.225.212.124:30005/submit.php","https://14.225.212.124:30005/g.pixel/submit.php","https://14.225.212.124:30005/match/submit.php","https://14.225.212.124:30005/ptj/submit.php","https://14.225.212.124:30005/ca/submit.php","https://14.225.212.124:30005/pixel/submit.php"]}},"Firsttime":1785420317.8397987,"Host":"14.225.212.124","IP":"14.225.212.124","IPs":["14.225.212.124"],"Paths":["/IE9CompatViewList.xml","/g.pixel","/match","/ptj","/ca","/pixel"],"Ports":["30005"],"Protocols":["https"],"SubmitURIs":["/submit.php"],"URLs":["https://14.225.212.124:30005/IE9CompatViewList.xml/submit.php","https://14.225.212.124:30005/submit.php","https://14.225.212.124:30005/g.pixel/submit.php","https://14.225.212.124:30005/match/submit.php","https://14.225.212.124:30005/ptj/submit.php","https://14.225.212.124:30005/ca/submit.php","https://14.225.212.124:30005/pixel/submit.php"],"ip_enrichment":{"14.225.212.124":{"ASN":{"number":135905,"org":"VNPT-AS-VN VIETNAM POSTS AND TELECOMMUNICATIONS GROUP"},"GEO":{"country":"VN","country_name":"Vietnam","lat":16.0,"lon":106.0},"first":1785420317.8397987,"last":1785420319.9358752,"meta":{"build_db":"2025-10-14 12:06:54","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1785420405.6576762}},"lasttime":1790345313.4758575}