metrics-relay internal · C2 console (recovered) · read-only
← all campaigns

axius@2.7.1

2.x

95 check-ins recovered · 78 stage2 delivered · protocol waveshaper.v2

Beacons Stage 2 Payload Raw Log
HostSource IPPlatformCheck-inStatus
Kenjis-MacBook-Pro.local 10.186.92.118 macos 03:39:29 UTC (T+89s) delivered
CORP-SEC747 192.168.112.10 windows 03:40:06 UTC (T+126s) delivered
mac-build-09.local 192.0.2.175 macos 03:40:13 UTC (T+133s) delivered
jenkins-agent-11 10.6.68.195 linux 03:40:14 UTC (T+134s) delivered
DESKTOP-KLCDEF9 192.0.2.112 windows 03:40:15 UTC (T+135s) blocked
Tomass-MacBook-Pro.local 10.166.144.211 macos 03:40:20 UTC (T+140s) delivered
ubuntu-ci-22 192.168.182.58 linux 03:41:16 UTC (T+196s) blocked
CORP-HRD738 10.118.149.190 windows 03:41:45 UTC (T+225s) delivered
CORP-ENG494 192.168.213.155 windows 03:42:07 UTC (T+247s) delivered
LAPTOP-PXLQDT2 192.0.2.187 windows 03:42:42 UTC (T+282s) blocked
LAPTOP-PLE5AMX 10.164.93.103 windows 03:42:49 UTC (T+289s) delivered
mac-build-10.local 203.0.113.169 macos 03:43:01 UTC (T+301s) delivered
DESKTOP-XADB42T 172.27.157.130 windows 03:43:28 UTC (T+328s) delivered
Ravis-MacBook-Air.local 192.0.2.179 macos 03:43:33 UTC (T+333s) delivered
Elenas-MacBook-Pro.local 10.63.110.249 macos 03:43:33 UTC (T+333s) delivered
mac-build-12.local 198.51.100.162 macos 03:44:21 UTC (T+381s) delivered
Mayas-MacBook-Air.local 192.168.55.137 macos 03:45:31 UTC (T+451s) delivered
build-worker-26 198.51.100.208 linux 03:46:07 UTC (T+487s) blocked
mac-build-10.local 10.30.196.212 macos 03:47:08 UTC (T+548s) delivered
DESKTOP-XSD2REX 192.168.156.22 windows 03:48:28 UTC (T+628s) blocked
LAPTOP-VZTDQDU 10.122.127.20 windows 03:48:29 UTC (T+629s) delivered
Nadias-MacBook-Air.local 198.51.100.58 macos 03:49:36 UTC (T+696s) delivered
LAPTOP-KPHMYUU 192.168.202.103 windows 03:50:19 UTC (T+739s) delivered
DESKTOP-HQF8TKA 10.91.175.235 windows 03:51:04 UTC (T+784s) delivered
Mayas-MacBook-Air.local 172.22.101.171 macos 03:51:20 UTC (T+800s) delivered
Leahs-MacBook-Pro.local 192.168.6.9 macos 03:51:52 UTC (T+832s) delivered
Nadias-MacBook-Air.local 192.168.139.174 macos 03:51:56 UTC (T+836s) timeout
ubuntu-ci-02 172.20.30.152 linux 03:52:25 UTC (T+865s) delivered
LAPTOP-2S8H6SL 203.0.113.126 windows 03:52:41 UTC (T+881s) blocked
mac-build-03.local 192.0.2.24 macos 03:53:06 UTC (T+906s) blocked
LAPTOP-VE69NCA 192.168.47.147 windows 03:53:34 UTC (T+934s) delivered
DESKTOP-AVEZ4LM 192.0.2.146 windows 03:54:30 UTC (T+990s) delivered
LAPTOP-VVAKAZR 10.39.109.244 windows 03:54:34 UTC (T+994s) delivered
ubuntu-ci-14 203.0.113.53 linux 03:55:05 UTC (T+1025s) delivered
ubuntu-ci-09 172.27.171.97 linux 03:55:38 UTC (T+1058s) delivered
LAPTOP-5BA4BNA 172.17.58.11 windows 03:55:46 UTC (T+1066s) blocked
Elenas-MacBook-Pro.local 172.26.79.73 macos 03:56:12 UTC (T+1092s) delivered
Ravis-MacBook-Air.local 172.21.123.74 macos 03:56:31 UTC (T+1111s) blocked
LAPTOP-A5VS7CP 192.168.254.166 windows 03:57:00 UTC (T+1140s) blocked
DESKTOP-N4PGKF2 192.168.81.164 windows 03:57:32 UTC (T+1172s) timeout
jenkins-agent-06 192.168.124.192 linux 03:57:50 UTC (T+1190s) timeout
DESKTOP-Q79HR2Q 172.30.192.162 windows 03:58:38 UTC (T+1238s) delivered
Iness-MacBook-Air.local 172.18.155.32 macos 03:59:22 UTC (T+1282s) delivered
LAPTOP-HGU9Y2S 172.25.33.204 windows 03:59:35 UTC (T+1295s) blocked
DESKTOP-XJQNWJE 192.168.169.180 windows 03:59:43 UTC (T+1303s) delivered
DESKTOP-TBP9CU8 192.0.2.100 windows 04:00:39 UTC (T+1359s) delivered
ubuntu-ci-23 192.0.2.39 linux 04:01:18 UTC (T+1398s) delivered
mac-build-08.local 198.51.100.228 macos 04:01:40 UTC (T+1420s) delivered
CORP-OPS116 192.0.2.34 windows 04:01:54 UTC (T+1434s) timeout
Tomass-MacBook-Pro.local 10.1.50.108 macos 04:02:05 UTC (T+1445s) delivered
DESKTOP-V68AXAK 10.33.69.115 windows 04:03:09 UTC (T+1509s) blocked
Nadias-MacBook-Air.local 203.0.113.26 macos 04:03:51 UTC (T+1551s) delivered
LAPTOP-6VUHXH8 192.168.211.193 windows 04:05:37 UTC (T+1657s) delivered
DESKTOP-MHM7KLX 172.19.217.194 windows 04:06:31 UTC (T+1711s) delivered
LAPTOP-H4WAXNG 172.23.36.195 windows 04:07:00 UTC (T+1740s) timeout
build-worker-03 172.31.246.81 linux 04:07:23 UTC (T+1763s) delivered
build-worker-24 10.97.230.208 linux 04:07:55 UTC (T+1795s) delivered
CORP-SEC209 198.51.100.229 windows 04:10:28 UTC (T+1948s) delivered
CORP-HRD532 192.168.156.141 windows 04:11:17 UTC (T+1997s) delivered
build-worker-04 198.51.100.5 linux 04:12:53 UTC (T+2093s) delivered
Anas-MacBook-Pro.local 172.22.249.85 macos 04:13:06 UTC (T+2106s) delivered
mac-build-06.local 198.51.100.57 macos 04:13:14 UTC (T+2114s) delivered
UNKNOWN-5KBKNX 192.0.2.104 unknown 04:15:00 UTC (T+2220s) delivered
DESKTOP-AKRSUG7 198.51.100.217 windows 04:17:10 UTC (T+2350s) delivered
ubuntu-ci-12 192.168.203.9 linux 04:20:00 UTC (T+2520s) delivered
LAPTOP-225R3AF 10.102.159.60 windows 04:20:30 UTC (T+2550s) delivered
Tomass-MacBook-Air.local 192.0.2.50 macos 04:20:41 UTC (T+2561s) delivered
DESKTOP-TAC8K4T 172.31.216.55 windows 04:21:43 UTC (T+2623s) delivered
DESKTOP-G6GZV9Y 203.0.113.79 windows 04:22:07 UTC (T+2647s) delivered
Kenjis-MacBook-Air.local 172.26.149.87 macos 04:22:36 UTC (T+2676s) delivered
LAPTOP-J379JGZ 10.222.97.167 windows 04:23:13 UTC (T+2713s) delivered
Noahs-MacBook-Air.local 198.51.100.142 macos 04:23:38 UTC (T+2738s) delivered
jenkins-agent-06 203.0.113.215 linux 04:25:50 UTC (T+2870s) delivered
DESKTOP-F39ZFYS 198.51.100.214 windows 04:27:04 UTC (T+2944s) delivered
build-worker-01 192.168.66.144 linux 04:29:10 UTC (T+3070s) delivered
Victors-MacBook-Pro.local 203.0.113.11 macos 04:33:32 UTC (T+3332s) delivered
CORP-ENG846 172.19.93.1 windows 04:33:42 UTC (T+3342s) delivered
DESKTOP-E7X8RGS 172.22.187.94 windows 04:35:30 UTC (T+3450s) delivered
DESKTOP-M5JLDRN 172.22.198.186 windows 04:37:07 UTC (T+3547s) delivered
DESKTOP-P5HXU2R 10.69.209.192 windows 04:37:50 UTC (T+3590s) delivered
mac-build-04.local 192.0.2.92 macos 04:38:34 UTC (T+3634s) delivered
Jordans-MacBook-Air.local 203.0.113.219 macos 04:38:53 UTC (T+3653s) delivered
CORP-SEC765 10.39.224.35 windows 04:39:07 UTC (T+3667s) delivered
Diegos-MacBook-Air.local 10.237.13.131 macos 04:40:41 UTC (T+3761s) delivered
CORP-FIN141 172.28.134.203 windows 04:49:07 UTC (T+4267s) delivered
CORP-FIN695 203.0.113.2 windows 04:49:31 UTC (T+4291s) delivered
DESKTOP-N3M89TT 192.0.2.215 windows 04:57:43 UTC (T+4783s) delivered
Omars-MacBook-Air.local 10.219.182.198 macos 05:04:07 UTC (T+5167s) delivered
ubuntu-ci-23 203.0.113.227 linux 05:06:04 UTC (T+5284s) delivered
Victors-MacBook-Air.local 172.16.6.220 macos 05:13:30 UTC (T+5730s) delivered
Marcos-MacBook-Pro.local 192.168.173.241 macos 05:15:17 UTC (T+5837s) delivered
LAPTOP-BY8RTV3 203.0.113.90 windows 05:31:13 UTC (T+6793s) delivered
LAPTOP-PZVP862 192.168.126.240 windows 05:56:13 UTC (T+8293s) delivered
build-worker-30 203.0.113.248 linux 06:03:01 UTC (T+8701s) delivered
CORP-SEC130 203.0.113.131 windows 06:13:14 UTC (T+9314s) delivered

Every row is a single recovered postinstall run: cipher-lite-js's `setup.js` executes once on `npm install`, attempts its stage2 fetch, then deletes itself. There is no persistent beacon loop to correlate against, this table is the complete recovered history per host.

metrics-relay · recovered instance · read-only snapshot window 2026-02-10 03:38–06:52 UTC