{"Endpoints":{"http:80":{"Firsttime":1789481121.6041074,"lasttime":1790345216.8247683,"paths":["/ptj","/activity"],"port":"80","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"156.239.224.131","beacon_port":"80","config_hash":"c0d7fb473254bc5255d3d5a59eed8e974e59e49207e9d3e71f2d5d17c865a885","trial":false,"ts":1790345206.7141657,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321},{"arch":"x64","beacon_ip":"156.239.224.131","beacon_port":"80","config_hash":"ffc162814f54cef57a7e61e44de84aaffa8e22d915664526f513bece0ffd2934","trial":false,"ts":1790345216.8247683,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321}],"submituris":["/submit.php"],"urls":["http://156.239.224.131:80/ptj/submit.php","http://156.239.224.131:80/submit.php","http://156.239.224.131:80/activity/submit.php"]}},"Firsttime":1789481121.6041074,"Host":"156.239.224.131","IP":"156.239.224.131","IPs":["156.239.224.131"],"Paths":["/ptj","/activity"],"Ports":["80"],"Protocols":["http"],"SubmitURIs":["/submit.php"],"URLs":["http://156.239.224.131:80/ptj/submit.php","http://156.239.224.131:80/submit.php","http://156.239.224.131:80/activity/submit.php"],"ip_enrichment":{"156.239.224.131":{"ASN":{"number":152705,"org":"GCTL-AS-AP Gcc Cloud Technology Limited"},"GEO":{"country":"HK","country_name":"Hong Kong","lat":22.25,"lon":114.1667},"first":1789481121.6041074,"last":1789481129.0916216,"meta":{"build_db":"2025-10-14 12:06:54","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1789481289.0742521}},"lasttime":1790345216.8247683}
