{"Endpoints":{"http:80":{"Firsttime":1780783536.9010084,"lasttime":1780898862.0512798,"paths":["/cx","/pixel.gif"],"port":"80","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"45.64.111.21","beacon_port":"80","config_hash":"2892822af386617ccea11e4ca0d4e2ce67cdee8e4a2e1d73273e53345712309a","trial":false,"ts":1780898794.1301584,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"45.64.111.21","beacon_port":"80","config_hash":"789b421e3eead1f15d3fa8be852666af3c5d2c2717df0190977bbc5cc50a86f5","trial":false,"ts":1780898796.2510533,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x86","beacon_ip":"45.64.111.18","beacon_port":"80","config_hash":"2892822af386617ccea11e4ca0d4e2ce67cdee8e4a2e1d73273e53345712309a","trial":false,"ts":1780898859.9279912,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"45.64.111.18","beacon_port":"80","config_hash":"789b421e3eead1f15d3fa8be852666af3c5d2c2717df0190977bbc5cc50a86f5","trial":false,"ts":1780898862.0512798,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x86","beacon_ip":"45.64.111.20","beacon_port":"80","config_hash":"2892822af386617ccea11e4ca0d4e2ce67cdee8e4a2e1d73273e53345712309a","trial":false,"ts":1780841258.5253596,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"45.64.111.20","beacon_port":"80","config_hash":"789b421e3eead1f15d3fa8be852666af3c5d2c2717df0190977bbc5cc50a86f5","trial":false,"ts":1780841260.6417277,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x86","beacon_ip":"45.64.111.19","beacon_port":"80","config_hash":"2892822af386617ccea11e4ca0d4e2ce67cdee8e4a2e1d73273e53345712309a","trial":false,"ts":1780898745.133854,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"45.64.111.19","beacon_port":"80","config_hash":"789b421e3eead1f15d3fa8be852666af3c5d2c2717df0190977bbc5cc50a86f5","trial":false,"ts":1780898750.0292864,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666}],"submituris":["/submit.php"],"urls":["http://45.64.111.18:80/cx/submit.php","http://45.64.111.18:80/submit.php","http://45.64.111.18:80/pixel.gif/submit.php"]}},"Firsttime":1780783536.9010084,"Host":"45.64.111.18","IP":"45.64.111.18","IPs":["45.64.111.18"],"Paths":["/cx","/pixel.gif"],"Ports":["80"],"Protocols":["http"],"SubmitURIs":["/submit.php"],"URLs":["http://45.64.111.18:80/cx/submit.php","http://45.64.111.18:80/submit.php","http://45.64.111.18:80/pixel.gif/submit.php"],"ip_enrichment":{"45.64.111.18":{"ASN":{"number":132839,"org":"POWERLINE-AS-AP POWER LINE DATACENTER"},"GEO":{"country":"HK","country_name":"Hong Kong","lat":22.25,"lon":114.1667},"first":1780783536.9010084,"last":1780783630.2939932,"meta":{"build_db":"2025-10-14 12:06:54","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1780783752.350198}},"lasttime":1780898862.0512798}
