{"Endpoints":{"http:80":{"Firsttime":1766416151.493458,"lasttime":1766416153.375894,"paths":["/j.ad","/IE9CompatViewList.xml"],"port":"80","protocol":"http","seen_in":[{"arch":"x64","beacon_ip":"47.109.189.74","beacon_port":"80","config_hash":"4f63c5c70f9e6c2a872d66010060c8b80bc4d06dfc89ad8f77583290ec176678","trial":false,"ts":1766416153.375894,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":987654321},{"arch":"x86","beacon_ip":"47.109.189.74","beacon_port":"80","config_hash":"19b8f568a800fa355bb2a2b7116bd50f35750923a487c0cd50e4aaf515d3e81f","trial":false,"ts":1766416151.493458,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":987654321}],"submituris":["/submit.php"],"urls":["http://172.22.138.183:80/j.ad/submit.php","http://172.22.138.183:80/submit.php","http://172.22.138.183:80/IE9CompatViewList.xml/submit.php"]}},"Firsttime":1766416151.493458,"Host":"172.22.138.183","IP":"172.22.138.183","IPs":["172.22.138.183"],"Paths":["/j.ad","/IE9CompatViewList.xml"],"Ports":["80"],"Protocols":["http"],"SubmitURIs":["/submit.php"],"URLs":["http://172.22.138.183:80/j.ad/submit.php","http://172.22.138.183:80/submit.php","http://172.22.138.183:80/IE9CompatViewList.xml/submit.php"],"ip_enrichment":{"172.22.138.183":{"ASN":{"number":0,"org":"Not routed"},"GEO":{"country":"None","country_name":null,"lat":null,"lon":null},"first":1766416151.493458,"last":1766416153.375894,"meta":{"build_db":"2025-10-14 12:06:54","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1767456638.1890645}},"lasttime":1766416153.375894}