{"Endpoints":{"http:80":{"Firsttime":1768633526.6437113,"lasttime":1775311597.5956519,"paths":["/ga.js","/dpixel","/cm"],"port":"80","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"39.107.242.125","beacon_port":"80","config_hash":"29a96927d8d8f48fc55d242018c7df7230b158800d99559e21e94ae26ec08840","trial":false,"ts":1770188711.7002294,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":426352781},{"arch":"x64","beacon_ip":"39.107.242.125","beacon_port":"80","config_hash":"d82ed7587dc646ae842af6f82413a193ac464224307a6c5e2fcd9b654966a5c3","trial":false,"ts":1770188713.0492544,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":426352781},{"arch":"x86","beacon_ip":"39.107.242.125","beacon_port":"80","config_hash":"85ac4416b2ba520fbb646ed2f72f48c64fbdaac00898241de6fcfa51b666c500","trial":false,"ts":1775311581.4299085,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":426352781},{"arch":"x64","beacon_ip":"39.107.242.125","beacon_port":"80","config_hash":"b6d19e795056de1d7022348dee931f60bbfded46cc93d3b9bfb7d5fa691ca6b1","trial":false,"ts":1775311597.5956519,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":426352781}],"submituris":["/submit.php"],"urls":["http://39.107.242.125:80/ga.js/submit.php","http://39.107.242.125:80/submit.php","http://39.107.242.125:80/dpixel/submit.php","http://39.107.242.125:80/cm/submit.php"]},"https:443":{"Firsttime":1768633511.8102336,"lasttime":1775311736.9141402,"paths":["/match","/j.ad"],"port":"443","protocol":"https","seen_in":[{"arch":"x86","beacon_ip":"39.107.242.125","beacon_port":"443","config_hash":"49ca2a98d0a74a1664b87722136a72db8635db203053fe624463e58c5f763e01","trial":false,"ts":1770188714.4923294,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":426352781},{"arch":"x64","beacon_ip":"39.107.242.125","beacon_port":"443","config_hash":"cb92fdf04da084a17cdcb9526d80b616ea8960998c3fe4783ca10fce23b1ee12","trial":false,"ts":1770188716.9949558,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":426352781},{"arch":"x86","beacon_ip":"39.107.242.125","beacon_port":"443","config_hash":"bc7e0c001387d79264910ac6f24da9c33e9f500375ca28cb8ad943b0ab72fa78","trial":false,"ts":1775311735.1762617,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":426352781},{"arch":"x64","beacon_ip":"39.107.242.125","beacon_port":"443","config_hash":"725137893d86b733c9307db815ec3decd275fc42ecfa6ca1663ff9647c582d0d","trial":false,"ts":1775311736.9141402,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":426352781}],"submituris":["/submit.php"],"urls":["https://39.107.242.125:443/match/submit.php","https://39.107.242.125:443/submit.php","https://39.107.242.125:443/j.ad/submit.php"]},"https:666":{"Firsttime":1778508525.2590344,"lasttime":1779833113.8358145,"paths":["/ga.js","/load"],"port":"666","protocol":"https","seen_in":[{"arch":"x86","beacon_ip":"39.107.242.125","beacon_port":"666","config_hash":"1af9b19ad5956b44657f81d600b70bb6bd5ba1b0c61235c43d5113e30d4283d1","trial":false,"ts":1779833110.2369742,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":426352781},{"arch":"x64","beacon_ip":"39.107.242.125","beacon_port":"666","config_hash":"f0ba38808735e9df563c012a93fa1ed79edc5c13ec421978d40b46de85de53a0","trial":false,"ts":1779833113.8358145,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":426352781}],"submituris":["/submit.php"],"urls":["https://39.107.242.125:666/ga.js/submit.php","https://39.107.242.125:666/submit.php","https://39.107.242.125:666/load/submit.php"]},"https:80":{"Firsttime":1778162750.337047,"lasttime":1778853974.3961434,"paths":["/fwlink","/visit.js","/activity"],"port":"80","protocol":"https","seen_in":[{"arch":"x86","beacon_ip":"39.107.242.125","beacon_port":"80","config_hash":"5ade98b36f5958d890570ebc04beb3589541030e49a84cba7462f5a0518bebc2","trial":false,"ts":1778249169.935579,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":426352781},{"arch":"x64","beacon_ip":"39.107.242.125","beacon_port":"80","config_hash":"bbc176a0662808823d8f3aedaa7de8f78f825c287f887697e715b7a88c5ac9e8","trial":false,"ts":1778249172.4126306,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":426352781},{"arch":"x86","beacon_ip":"39.107.242.125","beacon_port":"80","config_hash":"6ac6ee9f4804801e5cb831fbf068b1f94eba64e1f101f14a996062919caef266","trial":false,"ts":1778853968.8177845,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":426352781},{"arch":"x64","beacon_ip":"39.107.242.125","beacon_port":"80","config_hash":"1ff34535b61afec5f63b1c8f71aef8e44822ff24029237d668bc920f5e39f50a","trial":false,"ts":1778853974.3961434,"version":"Cobalt Strike 4.3 (Mar 03, 2021)","watermark":426352781}],"submituris":["/submit.php"],"urls":["https://39.107.242.125:80/fwlink/submit.php","https://39.107.242.125:80/submit.php","https://39.107.242.125:80/visit.js/submit.php","https://39.107.242.125:80/activity/submit.php"]}},"Firsttime":1768633511.8102336,"Host":"39.107.242.125","IP":"39.107.242.125","IPs":["39.107.242.125"],"Paths":["/match","/ga.js","/j.ad","/dpixel","/cm","/fwlink","/visit.js","/activity","/load"],"Ports":["443","80","666"],"Protocols":["https","http"],"SubmitURIs":["/submit.php"],"URLs":["https://39.107.242.125:443/match/submit.php","https://39.107.242.125:443/submit.php","http://39.107.242.125:80/ga.js/submit.php","http://39.107.242.125:80/submit.php","https://39.107.242.125:443/j.ad/submit.php","http://39.107.242.125:80/dpixel/submit.php","http://39.107.242.125:80/cm/submit.php","https://39.107.242.125:80/fwlink/submit.php","https://39.107.242.125:80/submit.php","https://39.107.242.125:80/visit.js/submit.php","https://39.107.242.125:80/activity/submit.php","https://39.107.242.125:666/ga.js/submit.php","https://39.107.242.125:666/submit.php","https://39.107.242.125:666/load/submit.php"],"ip_enrichment":{"39.107.242.125":{"ASN":{"number":37963,"org":"ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd."},"GEO":{"country":"CN","country_name":"China","lat":35.0,"lon":105.0},"first":1768633511.8102336,"last":1768633529.953035,"meta":{"build_db":"2025-10-14 12:06:54","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1768634008.6111727}},"lasttime":1779833113.8358145}