{"Endpoints":{"http:80":{"Firsttime":1766963426.9751425,"lasttime":1768576328.3818982,"paths":["/__utm.gif","/dot.gif"],"port":"80","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"217.60.6.187","beacon_port":"80","config_hash":"74f2de9e3089258c3b0a842083bde0df088da00f6d0d8e0403c424a860764ec1","trial":false,"ts":1768576328.051438,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":987654321},{"arch":"x64","beacon_ip":"217.60.6.187","beacon_port":"80","config_hash":"3c179085792753b8b940ced50f9f4113ca5d4588ebb2a416fd93d8bdfe746699","trial":false,"ts":1768576328.3818982,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":987654321}],"submituris":["/submit.php"],"urls":["http://217.60.6.187:80/__utm.gif/submit.php","http://217.60.6.187:80/submit.php","http://217.60.6.187:80/dot.gif/submit.php"]},"https:443":{"Firsttime":1766732743.6331787,"lasttime":1768576325.9459379,"paths":["/g.pixel","/visit.js"],"port":"443","protocol":"https","seen_in":[{"arch":"x64","beacon_ip":"217.60.6.187","beacon_port":"443","config_hash":"7b665225c4f0f3e0f7e7343fe5bdfecff030c44566a77fa5f62705933fc832d5","trial":false,"ts":1768576325.9459379,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":987654321},{"arch":"x86","beacon_ip":"217.60.6.187","beacon_port":"443","config_hash":"4c511cc4eedb55ba7a1fecf8d56723175f7dfd302984f874e28ac6670b16a51f","trial":false,"ts":1768576325.5804296,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":987654321}],"submituris":["/submit.php"],"urls":["https://217.60.6.187:443/g.pixel/submit.php","https://217.60.6.187:443/submit.php","https://217.60.6.187:443/visit.js/submit.php"]}},"Firsttime":1766732743.6331787,"Host":"217.60.6.187","IP":"217.60.6.187","IPs":["217.60.6.187"],"Paths":["/g.pixel","/visit.js","/__utm.gif","/dot.gif"],"Ports":["443","80"],"Protocols":["https","http"],"SubmitURIs":["/submit.php"],"URLs":["https://217.60.6.187:443/g.pixel/submit.php","https://217.60.6.187:443/submit.php","https://217.60.6.187:443/visit.js/submit.php","http://217.60.6.187:80/__utm.gif/submit.php","http://217.60.6.187:80/submit.php","http://217.60.6.187:80/dot.gif/submit.php"],"ip_enrichment":{"217.60.6.187":{"ASN":{"number":2914,"org":"NTT-DATA-2914"},"GEO":{"country":"US","country_name":"United States","lat":38.0,"lon":-97.0},"first":1766732743.6331787,"last":1767452936.450177,"meta":{"build_db":"2025-10-14 12:06:54","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1767456639.1193056}},"lasttime":1768576328.3818982}