{"Endpoints":{"http:4444":{"Firsttime":1774537525.3222446,"lasttime":1776002742.2058847,"paths":["/g.pixel","/activity"],"port":"4444","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"5.104.86.108","beacon_port":"4444","config_hash":"1b7308fad6e4dba2320ff96434c50f4bb5300687861f39c2331dd6e2aded3649","trial":false,"ts":1776002739.8715286,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321},{"arch":"x64","beacon_ip":"5.104.86.108","beacon_port":"4444","config_hash":"3113290cdd182c622f2eac33c7ce537f335ea78a13e71f9f517b09c87edbbd16","trial":false,"ts":1776002742.2058847,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321}],"submituris":["/submit.php"],"urls":["http://5.104.86.108:4444/g.pixel/submit.php","http://5.104.86.108:4444/submit.php","http://5.104.86.108:4444/activity/submit.php"]},"http:8089":{"Firsttime":1789164322.4374242,"lasttime":1789308405.626344,"paths":["/g.pixel","/dot.gif"],"port":"8089","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"5.104.86.108","beacon_port":"8089","config_hash":"08472df1973d6106f9380786c099a59c8234d61209b74ca9bf92cd5685430659","trial":false,"ts":1789308403.4942064,"version":"Cobalt Strike 4.7 (Aug 17, 2022)","watermark":987654321},{"arch":"x64","beacon_ip":"5.104.86.108","beacon_port":"8089","config_hash":"4a5f5b44079ab3db7e1f8f9a0f553df8482133ac14c29d07c440480386180eb8","trial":false,"ts":1789308405.626344,"version":"Cobalt Strike 4.7 (Aug 17, 2022)","watermark":987654321}],"submituris":["/submit.php"],"urls":["http://5.104.86.108:8089/g.pixel/submit.php","http://5.104.86.108:8089/submit.php","http://5.104.86.108:8089/dot.gif/submit.php"]}},"Firsttime":1774537525.3222446,"Host":"5.104.86.108","IP":"5.104.86.108","IPs":["5.104.86.108"],"Paths":["/g.pixel","/activity","/dot.gif"],"Ports":["4444","8089"],"Protocols":["http"],"SubmitURIs":["/submit.php"],"URLs":["http://5.104.86.108:4444/g.pixel/submit.php","http://5.104.86.108:4444/submit.php","http://5.104.86.108:4444/activity/submit.php","http://5.104.86.108:8089/g.pixel/submit.php","http://5.104.86.108:8089/submit.php","http://5.104.86.108:8089/dot.gif/submit.php"],"ip_enrichment":{"5.104.86.108":{"ASN":{"number":141995,"org":"CAPL-AS-AP Contabo Asia Private Limited"},"GEO":{"country":"SG","country_name":"Singapore","lat":1.3667,"lon":103.8},"first":1774537525.3222446,"last":1774537527.4285743,"meta":{"build_db":"2025-10-14 12:06:54","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1774537597.128735}},"lasttime":1789308405.626344}