C2
Key: 192.168.111.25 · Resolved IP: 192.168.111.25
None / AS— / Not routed
Protocols: http · Ports: 5555
First view: 2026-04-12 00:05:48 CEST · Last view: 2026-04-27 16:07:13 CEST
None / AS— / Not routed
Protocols: http · Ports: 5555
First view: 2026-04-12 00:05:48 CEST · Last view: 2026-04-27 16:07:13 CEST
Endpoints
| ID | Protocol | Port | First view | Last view | SubmitURIs | Paths | URLs | Seen in |
|---|---|---|---|---|---|---|---|---|
| http:5555 | http | 5555 | 2026-04-12 00:05:48 CEST | 2026-04-27 16:07:13 CEST | /submit.php | /push, /dot.gif |
3
sample
|
2 |
Raw JSON
{
"Endpoints": {
"http:5555": {
"Firsttime": 1775945148.7390356,
"lasttime": 1777298833.246065,
"paths": [
"/push",
"/dot.gif"
],
"port": "5555",
"protocol": "http",
"seen_in": [
{
"arch": "x86",
"beacon_ip": "47.76.96.68",
"beacon_port": "5555",
"config_hash": "f16a79d6ced95774d067c75e4e1adfc2f4da5765c6ae81faeda39dc76013ab97",
"trial": false,
"ts": 1777298831.7125967,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 666666666
},
{
"arch": "x64",
"beacon_ip": "47.76.96.68",
"beacon_port": "5555",
"config_hash": "b7c389058fef20417ffc59b4ba0aa8acd41d39856d922ef174c428ddeeb15914",
"trial": false,
"ts": 1777298833.246065,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 666666666
}
],
"submituris": [
"/submit.php"
],
"urls": [
"http://192.168.111.25:5555/push/submit.php",
"http://192.168.111.25:5555/submit.php",
"http://192.168.111.25:5555/dot.gif/submit.php"
]
}
},
"Firsttime": 1775945148.7390356,
"Host": "192.168.111.25",
"IP": "192.168.111.25",
"IPs": [
"192.168.111.25"
],
"Paths": [
"/push",
"/dot.gif"
],
"Ports": [
"5555"
],
"Protocols": [
"http"
],
"SubmitURIs": [
"/submit.php"
],
"URLs": [
"http://192.168.111.25:5555/push/submit.php",
"http://192.168.111.25:5555/submit.php",
"http://192.168.111.25:5555/dot.gif/submit.php"
],
"ip_enrichment": {
"192.168.111.25": {
"ASN": {
"number": 0,
"org": "Not routed"
},
"GEO": {
"country": "None",
"country_name": null,
"lat": null,
"lon": null
},
"first": 1775945148.7390356,
"last": 1775945150.641032,
"meta": {
"build_db": "2025-10-14 12:06:54",
"db_source": "GeoOpen-Country-ASN"
},
"source": "ip.circl.lu",
"updated": 1775945204.5226445
}
},
"lasttime": 1777298833.246065
}