C2
Key: 47.76.96.68 · Resolved IP: 47.76.96.68
CN / AS45102 / ALIBABA-CN-NET Alibaba US Technology Co., Ltd.
Protocols: http · Ports: 80
First view: 2026-03-23 15:59:33 CET · Last view: 2026-04-27 16:07:17 CEST
CN / AS45102 / ALIBABA-CN-NET Alibaba US Technology Co., Ltd.
Protocols: http · Ports: 80
First view: 2026-03-23 15:59:33 CET · Last view: 2026-04-27 16:07:17 CEST
Endpoints
| ID | Protocol | Port | First view | Last view | SubmitURIs | Paths | URLs | Seen in |
|---|---|---|---|---|---|---|---|---|
| http:80 | http | 80 | 2026-03-23 15:59:33 CET | 2026-04-27 16:07:17 CEST | /submit.php | /cm, /g.pixel, /fwlink, /cx, /ptj, /activity |
7
sample
|
8
hashes
|
Raw JSON
{
"Endpoints": {
"http:80": {
"Firsttime": 1774277973.7089238,
"lasttime": 1777298837.055138,
"paths": [
"/cm",
"/g.pixel",
"/fwlink",
"/cx",
"/ptj",
"/activity"
],
"port": "80",
"protocol": "http",
"seen_in": [
{
"arch": "x86",
"beacon_ip": "47.76.96.68",
"beacon_port": "80",
"config_hash": "c907cd1cabc53c649360f4d21cf8a54f5dc618a97c5de96e78a6220ef114db8b",
"trial": false,
"ts": 1774307154.908298,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 666666666
},
{
"arch": "x64",
"beacon_ip": "47.76.96.68",
"beacon_port": "80",
"config_hash": "82305a54a9ee1434e1cbc7eac944ddac3acd63610ed23aab20fa428962eebdd4",
"trial": false,
"ts": 1774307156.7066023,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 666666666
},
{
"arch": "x86",
"beacon_ip": "47.76.96.68",
"beacon_port": "80",
"config_hash": "6c67958869446aa019d373e9be34338d04264f0dee84466890fa69040ede795b",
"trial": false,
"ts": 1774965980.708778,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 666666666
},
{
"arch": "x64",
"beacon_ip": "47.76.96.68",
"beacon_port": "80",
"config_hash": "7f949de2121c5007c0af073ab150b7297ffbfd529e0e3b5c2e745e6b8383ff64",
"trial": false,
"ts": 1774965982.2535987,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 666666666
},
{
"arch": "x86",
"beacon_ip": "47.76.96.68",
"beacon_port": "80",
"config_hash": "4cb448d22112f3e89e64405575b28876c066004617743f1d8d73d4aa5ea8227f",
"trial": false,
"ts": 1775150360.2669358,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 666666666
},
{
"arch": "x64",
"beacon_ip": "47.76.96.68",
"beacon_port": "80",
"config_hash": "feee35b869866ba6a732f9e4fecdf2aaec18e6f1ba9388566a3a5c468bdbd962",
"trial": false,
"ts": 1775150362.0655377,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 666666666
},
{
"arch": "x86",
"beacon_ip": "47.76.96.68",
"beacon_port": "80",
"config_hash": "fb61ca4aa3a85ec8dd43e83955106d360d8dde8b54c2b879e57b3fa2f2bdb1c4",
"trial": false,
"ts": 1777298835.523505,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 666666666
},
{
"arch": "x64",
"beacon_ip": "47.76.96.68",
"beacon_port": "80",
"config_hash": "aac6617bf918d1be71111feb214e60633c1066d96d5ec7b84df27ed45b61c7c9",
"trial": false,
"ts": 1777298837.055138,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 666666666
}
],
"submituris": [
"/submit.php"
],
"urls": [
"http://47.76.96.68:80/cm/submit.php",
"http://47.76.96.68:80/submit.php",
"http://47.76.96.68:80/g.pixel/submit.php",
"http://47.76.96.68:80/fwlink/submit.php",
"http://47.76.96.68:80/cx/submit.php",
"http://47.76.96.68:80/ptj/submit.php",
"http://47.76.96.68:80/activity/submit.php"
]
}
},
"Firsttime": 1774277973.7089238,
"Host": "47.76.96.68",
"IP": "47.76.96.68",
"IPs": [
"47.76.96.68"
],
"Paths": [
"/cm",
"/g.pixel",
"/fwlink",
"/cx",
"/ptj",
"/activity"
],
"Ports": [
"80"
],
"Protocols": [
"http"
],
"SubmitURIs": [
"/submit.php"
],
"URLs": [
"http://47.76.96.68:80/cm/submit.php",
"http://47.76.96.68:80/submit.php",
"http://47.76.96.68:80/g.pixel/submit.php",
"http://47.76.96.68:80/fwlink/submit.php",
"http://47.76.96.68:80/cx/submit.php",
"http://47.76.96.68:80/ptj/submit.php",
"http://47.76.96.68:80/activity/submit.php"
],
"ip_enrichment": {
"47.76.96.68": {
"ASN": {
"number": 45102,
"org": "ALIBABA-CN-NET Alibaba US Technology Co., Ltd."
},
"GEO": {
"country": "CN",
"country_name": "China",
"lat": 35.0,
"lon": 105.0
},
"first": 1774277973.7089238,
"last": 1774278360.8844552,
"meta": {
"build_db": "2025-10-14 12:06:54",
"db_source": "GeoOpen-Country-ASN"
},
"source": "ip.circl.lu",
"updated": 1774278416.1243355
}
},
"lasttime": 1777298837.055138
}