{"Endpoints":{"http:80":{"Firsttime":1779746727.8745131,"lasttime":1780927622.7522297,"paths":["/push","/activity"],"port":"80","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"207.56.229.234","beacon_port":"80","config_hash":"aaa2b87f36da5b31f9494f3bd67fdb470189cd54c02fcdc8d31db545d4d275b8","trial":false,"ts":1780927620.670151,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"207.56.229.234","beacon_port":"80","config_hash":"d6ee0d0595cf7587f2b9e53071cbbb32c97fcfe49d0eac6125568adda9e098aa","trial":false,"ts":1780927622.7522297,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666}],"submituris":["/submit.php"],"urls":["http://207.56.229.234:80/push/submit.php","http://207.56.229.234:80/submit.php","http://207.56.229.234:80/activity/submit.php"]},"https:443":{"Firsttime":1780149910.100322,"lasttime":1780927589.0913126,"paths":["/en_US/all.js","/pixel.gif"],"port":"443","protocol":"https","seen_in":[{"arch":"x86","beacon_ip":"207.56.229.234","beacon_port":"443","config_hash":"82bdd8561d7dd24f25460363a39bb5e675294bb6d75a8dfef429515890d601c1","trial":false,"ts":1780927586.9684093,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"207.56.229.234","beacon_port":"443","config_hash":"9b4474284b2770d56a2810269cd08c579931b890e867e079ace1efc50479a587","trial":false,"ts":1780927589.0913126,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666}],"submituris":["/submit.php"],"urls":["https://207.56.229.234:443/en_US/all.js/submit.php","https://207.56.229.234:443/submit.php","https://207.56.229.234:443/pixel.gif/submit.php"]}},"Firsttime":1779746727.8745131,"Host":"207.56.229.234","IP":"207.56.229.234","IPs":["207.56.229.234"],"Paths":["/push","/activity","/en_US/all.js","/pixel.gif"],"Ports":["80","443"],"Protocols":["http","https"],"SubmitURIs":["/submit.php"],"URLs":["http://207.56.229.234:80/push/submit.php","http://207.56.229.234:80/submit.php","http://207.56.229.234:80/activity/submit.php","https://207.56.229.234:443/en_US/all.js/submit.php","https://207.56.229.234:443/submit.php","https://207.56.229.234:443/pixel.gif/submit.php"],"ip_enrichment":{"207.56.229.234":{"ASN":{"number":140224,"org":"NEBULA"},"GEO":{"country":"US","country_name":"United States","lat":38.0,"lon":-97.0},"first":1779746727.8745131,"last":1779746730.3707054,"meta":{"build_db":"2025-10-14 12:06:54","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1779746815.0946896}},"lasttime":1780927622.7522297}
