{"Endpoints":{"https:443":{"Firsttime":1786485915.347903,"lasttime":1787321232.7856047,"paths":["/ga.js","/visit.js","/j.ad","/cm"],"port":"443","protocol":"https","seen_in":[{"arch":"x86","beacon_ip":"192.252.185.78","beacon_port":"443","config_hash":"a98518fd261f6a6dd99042a24f02f71a3d69aa259ec5b0bdea9cda26300c5b10","trial":false,"ts":1786630026.8753107,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"192.252.185.78","beacon_port":"443","config_hash":"6814fd3ed7faee30700e013981b425efd3a283a76e48cff350dfd9b15e8c4292","trial":false,"ts":1786630028.6506546,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x86","beacon_ip":"192.252.179.24","beacon_port":"443","config_hash":"a98518fd261f6a6dd99042a24f02f71a3d69aa259ec5b0bdea9cda26300c5b10","trial":false,"ts":1786630030.2751818,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"192.252.179.24","beacon_port":"443","config_hash":"6814fd3ed7faee30700e013981b425efd3a283a76e48cff350dfd9b15e8c4292","trial":false,"ts":1786630031.9204404,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x86","beacon_ip":"192.252.185.78","beacon_port":"443","config_hash":"6fa6492084d8b94861b6105859f03b0f85f91f4472649254e3a49d04e877949a","trial":false,"ts":1787321231.1685967,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"192.252.185.78","beacon_port":"443","config_hash":"bfba528335ab6abd6c3255a597821c40d745815349ac019fb8a8e85524b69282","trial":false,"ts":1787321232.7856047,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x86","beacon_ip":"192.252.179.24","beacon_port":"443","config_hash":"6fa6492084d8b94861b6105859f03b0f85f91f4472649254e3a49d04e877949a","trial":false,"ts":1787321227.9489546,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666},{"arch":"x64","beacon_ip":"192.252.179.24","beacon_port":"443","config_hash":"bfba528335ab6abd6c3255a597821c40d745815349ac019fb8a8e85524b69282","trial":false,"ts":1787321229.5970514,"version":"Cobalt Strike 4.9 (Sep 19, 2023)","watermark":666666666}],"submituris":["/submit.php"],"urls":["https://192.252.179.24:443/ga.js/submit.php","https://192.252.179.24:443/submit.php","https://192.252.179.24:443/visit.js/submit.php","https://192.252.179.24:443/j.ad/submit.php","https://192.252.179.24:443/cm/submit.php"]}},"Firsttime":1786485915.347903,"Host":"192.252.179.24","IP":"192.252.179.24","IPs":["192.252.179.24"],"Paths":["/ga.js","/visit.js","/j.ad","/cm"],"Ports":["443"],"Protocols":["https"],"SubmitURIs":["/submit.php"],"URLs":["https://192.252.179.24:443/ga.js/submit.php","https://192.252.179.24:443/submit.php","https://192.252.179.24:443/visit.js/submit.php","https://192.252.179.24:443/j.ad/submit.php","https://192.252.179.24:443/cm/submit.php"],"ip_enrichment":{"192.252.179.24":{"ASN":{"number":152194,"org":"CTGSERVERLIMITED-AS-AP CTG Server Limited"},"GEO":{"country":"HK","country_name":"Hong Kong","lat":22.25,"lon":114.1667},"first":1786485915.347903,"last":1786485922.60863,"meta":{"build_db":"2025-10-14 12:06:54","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1786485941.563078}},"lasttime":1787321232.7856047}
