{"Endpoints":{"http:4444":{"Firsttime":1789164305.5670402,"lasttime":1789308396.6102045,"paths":["/ca","/ga.js"],"port":"4444","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"213.218.160.253","beacon_port":"4444","config_hash":"b685a7ef03cfc760f4719c1e2f9f640f285467132b3b995095e5dacf9e933540","trial":false,"ts":1789308396.301689,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":0},{"arch":"x64","beacon_ip":"213.218.160.253","beacon_port":"4444","config_hash":"bc30fcbd13a2f6d9f309189afd2a2bd5412c37caddfff33547fbf245c25df621","trial":false,"ts":1789308396.6102045,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":0}],"submituris":["/submit.php"],"urls":["http://213.218.160.253:4444/ca/submit.php","http://213.218.160.253:4444/submit.php","http://213.218.160.253:4444/ga.js/submit.php"]}},"Firsttime":1789164305.5670402,"Host":"213.218.160.253","IP":"213.218.160.253","IPs":["213.218.160.253"],"Paths":["/ca","/ga.js"],"Ports":["4444"],"Protocols":["http"],"SubmitURIs":["/submit.php"],"URLs":["http://213.218.160.253:4444/ca/submit.php","http://213.218.160.253:4444/submit.php","http://213.218.160.253:4444/ga.js/submit.php"],"ip_enrichment":{"213.218.160.253":{"ASN":{"number":0,"org":"Not routed"},"GEO":{"country":"None","country_name":null,"lat":null,"lon":null},"first":1789164305.5670402,"last":1789164306.0807474,"meta":{"build_db":"2025-10-14 12:06:54","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1789164400.3548717}},"lasttime":1789308396.6102045}