BeaconBeagle Beacons C2 Search SuperSearch API

C2

Key: 192.168.111.25 · Resolved IP: 192.168.111.25
None / AS— / Not routed
Protocols: http · Ports: 5555, 6688, 8081
First view: 2026-04-12 00:05:48 CEST · Last view: 2026-08-25 16:06:08 CEST
Raw JSON

Endpoints

ID Protocol Port First view Last view SubmitURIs Paths URLs Seen in
http:5555 http 5555 2026-04-12 00:05:48 CEST 2026-05-17 16:06:54 CEST /submit.php /push, /dot.gif 3
sample
  • http://192.168.111.25:5555/push/submit.php
  • http://192.168.111.25:5555/submit.php
  • http://192.168.111.25:5555/dot.gif/submit.php
 2
hashes
http:6688 http 6688 2026-07-22 16:05:23 CEST 2026-07-22 16:05:26 CEST /submit.php /dpixel, /pixel 3
sample
  • http://192.168.111.25:6688/dpixel/submit.php
  • http://192.168.111.25:6688/submit.php
  • http://192.168.111.25:6688/pixel/submit.php
 2
hashes
http:8081 http 8081 2026-08-24 08:06:31 CEST 2026-08-25 16:06:08 CEST /submit.php /load, /ga.js 3
sample
  • http://192.168.111.25:8081/load/submit.php
  • http://192.168.111.25:8081/submit.php
  • http://192.168.111.25:8081/ga.js/submit.php
 2
hashes

Raw JSON

{
  "Endpoints": {
    "http:5555": {
      "Firsttime": 1775945148.7390356,
      "lasttime": 1779026814.6977992,
      "paths": [
        "/push",
        "/dot.gif"
      ],
      "port": "5555",
      "protocol": "http",
      "seen_in": [
        {
          "arch": "x86",
          "beacon_ip": "47.76.96.68",
          "beacon_port": "5555",
          "config_hash": "f16a79d6ced95774d067c75e4e1adfc2f4da5765c6ae81faeda39dc76013ab97",
          "trial": false,
          "ts": 1779026813.149986,
          "version": "Cobalt Strike 4.9 (Sep 19, 2023)",
          "watermark": 666666666
        },
        {
          "arch": "x64",
          "beacon_ip": "47.76.96.68",
          "beacon_port": "5555",
          "config_hash": "b7c389058fef20417ffc59b4ba0aa8acd41d39856d922ef174c428ddeeb15914",
          "trial": false,
          "ts": 1779026814.6977992,
          "version": "Cobalt Strike 4.9 (Sep 19, 2023)",
          "watermark": 666666666
        }
      ],
      "submituris": [
        "/submit.php"
      ],
      "urls": [
        "http://192.168.111.25:5555/push/submit.php",
        "http://192.168.111.25:5555/submit.php",
        "http://192.168.111.25:5555/dot.gif/submit.php"
      ]
    },
    "http:6688": {
      "Firsttime": 1784729123.4885685,
      "lasttime": 1784729126.9166956,
      "paths": [
        "/dpixel",
        "/pixel"
      ],
      "port": "6688",
      "protocol": "http",
      "seen_in": [
        {
          "arch": "x86",
          "beacon_ip": "47.119.181.66",
          "beacon_port": "6688",
          "config_hash": "64da21bb6d5a4eccf65d46110aeffee37a1a5424a26dc741c7b98c31fea372fd",
          "trial": false,
          "ts": 1784729123.4885685,
          "version": "Cobalt Strike 4.9 (Sep 19, 2023)",
          "watermark": 666666666
        },
        {
          "arch": "x64",
          "beacon_ip": "47.119.181.66",
          "beacon_port": "6688",
          "config_hash": "96e2f948120412d1896d52fe230da78ec0abe325d830945a20ac9c6fe1dfaf0d",
          "trial": false,
          "ts": 1784729126.9166956,
          "version": "Cobalt Strike 4.9 (Sep 19, 2023)",
          "watermark": 666666666
        }
      ],
      "submituris": [
        "/submit.php"
      ],
      "urls": [
        "http://192.168.111.25:6688/dpixel/submit.php",
        "http://192.168.111.25:6688/submit.php",
        "http://192.168.111.25:6688/pixel/submit.php"
      ]
    },
    "http:8081": {
      "Firsttime": 1787551591.9520388,
      "lasttime": 1787666768.3485563,
      "paths": [
        "/load",
        "/ga.js"
      ],
      "port": "8081",
      "protocol": "http",
      "seen_in": [
        {
          "arch": "x86",
          "beacon_ip": "103.185.249.199",
          "beacon_port": "8081",
          "config_hash": "fee17cdbeaa9bd670e8251aedad9f7196558ce35109ef9ff129d69c130886703",
          "trial": false,
          "ts": 1787666766.7680097,
          "version": "Cobalt Strike 4.7 (Aug 17, 2022)",
          "watermark": 391144938
        },
        {
          "arch": "x64",
          "beacon_ip": "103.185.249.199",
          "beacon_port": "8081",
          "config_hash": "436e55ef38e0e3dc5350671da6fd713674f303fece53bfd6f098b1d56ce3e517",
          "trial": false,
          "ts": 1787666768.3485563,
          "version": "Cobalt Strike 4.7 (Aug 17, 2022)",
          "watermark": 391144938
        }
      ],
      "submituris": [
        "/submit.php"
      ],
      "urls": [
        "http://192.168.111.25:8081/load/submit.php",
        "http://192.168.111.25:8081/submit.php",
        "http://192.168.111.25:8081/ga.js/submit.php"
      ]
    }
  },
  "Firsttime": 1775945148.7390356,
  "Host": "192.168.111.25",
  "IP": "192.168.111.25",
  "IPs": [
    "192.168.111.25"
  ],
  "Paths": [
    "/push",
    "/dot.gif",
    "/dpixel",
    "/pixel",
    "/load",
    "/ga.js"
  ],
  "Ports": [
    "5555",
    "6688",
    "8081"
  ],
  "Protocols": [
    "http"
  ],
  "SubmitURIs": [
    "/submit.php"
  ],
  "URLs": [
    "http://192.168.111.25:5555/push/submit.php",
    "http://192.168.111.25:5555/submit.php",
    "http://192.168.111.25:5555/dot.gif/submit.php",
    "http://192.168.111.25:6688/dpixel/submit.php",
    "http://192.168.111.25:6688/submit.php",
    "http://192.168.111.25:6688/pixel/submit.php",
    "http://192.168.111.25:8081/load/submit.php",
    "http://192.168.111.25:8081/submit.php",
    "http://192.168.111.25:8081/ga.js/submit.php"
  ],
  "ip_enrichment": {
    "192.168.111.25": {
      "ASN": {
        "number": 0,
        "org": "Not routed"
      },
      "GEO": {
        "country": "None",
        "country_name": null,
        "lat": null,
        "lon": null
      },
      "first": 1775945148.7390356,
      "last": 1775945150.641032,
      "meta": {
        "build_db": "2025-10-14 12:06:54",
        "db_source": "GeoOpen-Country-ASN"
      },
      "source": "ip.circl.lu",
      "updated": 1775945204.5226445
    }
  },
  "lasttime": 1787666768.3485563
}