{"Endpoints":{"http:80":{"Firsttime":1792044309.7041981,"lasttime":1792044310.2529,"paths":["/activity","/ca"],"port":"80","protocol":"http","seen_in":[{"arch":"x86","beacon_ip":"89.40.105.179","beacon_port":"80","config_hash":"7a62b996d72ca356d943fbc82836d5fa4d3796f0a01e65ea5ce3c064aa28268e","trial":false,"ts":1792044309.7041981,"version":"Cobalt Strike 4.7 (Aug 17, 2022)","watermark":391144938},{"arch":"x64","beacon_ip":"89.40.105.179","beacon_port":"80","config_hash":"04c184095ca2d461e5d3ebb886f1181cc5930cb13aface7b743a9b0d0fec18cb","trial":false,"ts":1792044310.2529,"version":"Cobalt Strike 4.7 (Aug 17, 2022)","watermark":391144938}],"submituris":["/submit.php"],"urls":["http://89.40.105.179:80/activity/submit.php","http://89.40.105.179:80/submit.php","http://89.40.105.179:80/ca/submit.php"]},"https:443":{"Firsttime":1792044328.1265156,"lasttime":1792044328.6460872,"paths":["/ga.js","/load"],"port":"443","protocol":"https","seen_in":[{"arch":"x86","beacon_ip":"89.40.105.179","beacon_port":"443","config_hash":"853573fd9c1074db8e0da2c6c2ed26ea97b7d2847cbac86af048e55dfed4786a","trial":false,"ts":1792044328.1265156,"version":"Cobalt Strike 4.7 (Aug 17, 2022)","watermark":391144938},{"arch":"x64","beacon_ip":"89.40.105.179","beacon_port":"443","config_hash":"a350f63f28294ce28c53aa4f145872cf786db7d826da707ca834d725afe59cef","trial":false,"ts":1792044328.6460872,"version":"Cobalt Strike 4.7 (Aug 17, 2022)","watermark":391144938}],"submituris":["/submit.php"],"urls":["https://89.40.105.179:443/ga.js/submit.php","https://89.40.105.179:443/submit.php","https://89.40.105.179:443/load/submit.php"]}},"Firsttime":1792044309.7041981,"Host":"89.40.105.179","IP":"89.40.105.179","IPs":["89.40.105.179"],"Paths":["/activity","/ca","/ga.js","/load"],"Ports":["80","443"],"Protocols":["http","https"],"SubmitURIs":["/submit.php"],"URLs":["http://89.40.105.179:80/activity/submit.php","http://89.40.105.179:80/submit.php","http://89.40.105.179:80/ca/submit.php","https://89.40.105.179:443/ga.js/submit.php","https://89.40.105.179:443/submit.php","https://89.40.105.179:443/load/submit.php"],"ip_enrichment":{"89.40.105.179":{"ASN":{"number":9009,"org":"M247"},"GEO":{"country":"RO","country_name":"Romania","lat":46.0,"lon":25.0},"first":1792044309.7041981,"last":1792044328.6460872,"meta":{"build_db":"2026-09-24 15:43:43","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1792044398.126111}},"lasttime":1792044328.6460872}