{"Endpoints":{"http:5555":{"Firsttime":1775945148.7390356,"lasttime":1779026814.6977992,"paths":["/push","/dot.gif"],"port":"5555","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"47.76.96.68","beacon_port":"5555","config_hash":"f16a79d6ced95774d067c75e4e1adfc2f4da5765c6ae81faeda39dc76013ab97","trial":false,"ts":1779026813.149986,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"47.76.96.68","beacon_port":"5555","config_hash":"b7c389058fef20417ffc59b4ba0aa8acd41d39856d922ef174c428ddeeb15914","trial":false,"ts":1779026814.6977992,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666}],"submituris":["/submit.php"],"urls":["http://192.168.111.25:5555/push/submit.php","http://192.168.111.25:5555/submit.php","http://192.168.111.25:5555/dot.gif/submit.php"]},"http:6688":{"Firsttime":1784729123.4885685,"lasttime":1784729126.9166956,"paths":["/dpixel","/pixel"],"port":"6688","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"47.119.181.66","beacon_port":"6688","config_hash":"64da21bb6d5a4eccf65d46110aeffee37a1a5424a26dc741c7b98c31fea372fd","trial":false,"ts":1784729123.4885685,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"47.119.181.66","beacon_port":"6688","config_hash":"96e2f948120412d1896d52fe230da78ec0abe325d830945a20ac9c6fe1dfaf0d","trial":false,"ts":1784729126.9166956,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666}],"submituris":["/submit.php"],"urls":["http://192.168.111.25:6688/dpixel/submit.php","http://192.168.111.25:6688/submit.php","http://192.168.111.25:6688/pixel/submit.php"]}},"Firsttime":1775945148.7390356,"Host":"192.168.111.25","IP":"192.168.111.25","IPs":["192.168.111.25"],"Paths":["/push","/dot.gif","/dpixel","/pixel"],"Ports":["5555","6688"],"Protocols":["http"],"SubmitURIs":["/submit.php"],"URLs":["http://192.168.111.25:5555/push/submit.php","http://192.168.111.25:5555/submit.php","http://192.168.111.25:5555/dot.gif/submit.php","http://192.168.111.25:6688/dpixel/submit.php","http://192.168.111.25:6688/submit.php","http://192.168.111.25:6688/pixel/submit.php"],"ip_enrichment":{"192.168.111.25":{"ASN":{"number":0,"org":"Not routed"},"GEO":{"country":"None","country_name":null,"lat":null,"lon":null},"first":1775945148.7390356,"last":1775945150.641032,"meta":{"build_db":"2025-10-14 12:06:54","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1775945204.5226445}},"lasttime":1784729126.9166956}