{
  "field": "beacon_type",
  "label": "beacon type",
  "value": "ws",
  "page": "https://publicmosaic.com/config/beacon_type/d3M",
  "generated": "2026-10-30T20:37:43.901Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 353,
  "hosts_total": 311,
  "samples": [
    {
      "sha256": "e46485afab67fbb8071c462b335c72bc1718c076049a7e6371fdda4b85adc472",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:47.118284+00:00",
      "served_by": [
        "134.122.153.121:80"
      ]
    },
    {
      "sha256": "e988a418a20f6e6c451be816e60a03f764f16567e87c791519cc00990de87c66",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:47.042866+00:00",
      "served_by": [
        "38.45.125.100:8084"
      ]
    },
    {
      "sha256": "fd2af8ec4665b6a90039a996240500e50eff0c6b8aeab3630fbfdc5372fabee1",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:46.583398+00:00",
      "served_by": [
        "107.173.85.194:80"
      ]
    },
    {
      "sha256": "e024758dc6c73a32ee85f9e1cfa715a9aced69f1dc1757ad1aab3c80c9f18841",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:46.077993+00:00",
      "served_by": [
        "88.216.191.9:8880"
      ]
    },
    {
      "sha256": "e57c9a648ebef69568d4e745a23a133826bd4a59467aac153bd3836010aa8576",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:45.243450+00:00",
      "served_by": [
        "8.210.222.251:56789"
      ]
    },
    {
      "sha256": "ea546b7d63dfa4608392afa46a779db82a8f1d49ebee60559a44fda6fd91ea07",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:45.024559+00:00",
      "served_by": [
        "172.245.168.240:80"
      ]
    },
    {
      "sha256": "defabd6ce4a66d1fedf3be3284ce0ab398c6fef8554eb6138ecca85797778a6c",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:43.740958+00:00",
      "served_by": [
        "204.194.51.97:443"
      ]
    },
    {
      "sha256": "dd122fd2d14ecba7a4e153fa753d12765c883ffd036c73c789d1b5d09fc25b8b",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:42.661918+00:00",
      "served_by": [
        "170.62.130.154:80"
      ]
    },
    {
      "sha256": "d8d36252a0b11fa9d5a5bdaa0eb4b7071657f3f78e57e5b0fc1e6135d09f4b3c",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:40.946043+00:00",
      "served_by": [
        "198.12.77.134:80"
      ]
    },
    {
      "sha256": "d4c8ab217bb04f21ec47afd687fa6d3770b34092f9b47121969bbf770990ac23",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:40.740336+00:00",
      "served_by": [
        "155.94.144.168:80"
      ]
    },
    {
      "sha256": "c4745084c921588470b467aa880b86f28b3a44d7a6bf56b6b1ac0c52d513a58a",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:37.831432+00:00",
      "served_by": [
        "139.180.216.149:80"
      ]
    },
    {
      "sha256": "c664799e18c4022434deebb4bf8ea2b297bcaef1f948133490a2295a3118b61d",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:36.836187+00:00",
      "served_by": [
        "47.76.245.121:80"
      ]
    },
    {
      "sha256": "bf925e9ec9e95818a5f8d8058c4311ee4c83ad5ba38d350beab84dc3ce95bced",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:33.739111+00:00",
      "served_by": [
        "16.162.195.211:8443"
      ]
    },
    {
      "sha256": "b8ef9c98722f9193af59cf594d8751b7f3d1ff542bc0af3a8e6f138ed3b1ddde",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:32.747685+00:00",
      "served_by": [
        "69.48.228.156:443"
      ]
    },
    {
      "sha256": "c0dcf3dbcb041741dc581bed84a0cee3c22d357acacc74613fcebb9eff101476",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:31.382770+00:00",
      "served_by": [
        "108.165.176.124:443"
      ]
    },
    {
      "sha256": "ab87b9c5c511e03aad414c8669828ea66816f17b8e83e93e359fb9b30392dcd1",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:30.984111+00:00",
      "served_by": [
        "66.179.30.146:443"
      ]
    },
    {
      "sha256": "e177dab7d79f1fd9aee809c7419fea753edee673dc2f05ba28e1064227c7fc71",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:30.718748+00:00",
      "served_by": [
        "108.165.176.124:80"
      ]
    },
    {
      "sha256": "bddb918cd262dfab2e6e76734bad4ec6c26abb134efe51fecbcaa24fc26737e9",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:28.974767+00:00",
      "served_by": [
        "45.77.42.89:23566"
      ]
    },
    {
      "sha256": "ac0ae2e656c804b5dee892534a61365df0d5d2ef5c967b624a618f17a18cd09c",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:28.850905+00:00",
      "served_by": [
        "156.244.9.19:9094"
      ]
    },
    {
      "sha256": "b237d164cf6e23e98e2ed485f489480e5d49e0cc9742822fb44b5ada569763d0",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:28.151353+00:00",
      "served_by": [
        "8.218.4.6:60001"
      ]
    },
    {
      "sha256": "a8feedbbf086d258c6bde18329a8bd6fd94e9cc4a80936b45ed886f6f69ffd1b",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:27.823718+00:00",
      "served_by": [
        "176.97.117.157:443"
      ]
    },
    {
      "sha256": "b0631bdea415d98ac4d17928bb98166396a43f89e5c96850efb53520049657f5",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:27.819939+00:00",
      "served_by": [
        "198.46.159.243:8080"
      ]
    },
    {
      "sha256": "c799edd831df58197e0628a9a16c7544ab1c623dfaffd2208c2ce8aa838524de",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:24.508582+00:00",
      "served_by": [
        "134.122.154.92:2082"
      ]
    },
    {
      "sha256": "a3770fa3314db8995c0415585cd980157294aca161b8493447c8e96a03368d3a",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:24.068049+00:00",
      "served_by": [
        "38.45.125.101:8084"
      ]
    },
    {
      "sha256": "a2b8f5974d5ff75269e56e1252510b2e8dae6e60d7076baeef6f5c3f67b1bc62",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:24.067246+00:00",
      "served_by": [
        "151.245.90.134:80"
      ]
    },
    {
      "sha256": "adf90b483c614aec1ccf059339ec96ed3a0afe961993935eef24a8a418c36e9f",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:23.545135+00:00",
      "served_by": [
        "134.122.154.92:2086"
      ]
    },
    {
      "sha256": "f119e6010b92b01d5c026f10738548d8bd737ab84a98944530bb86ca20e5a00f",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:22.525101+00:00",
      "served_by": [
        "198.46.159.243:2086"
      ]
    },
    {
      "sha256": "b70e43904f4d38ad9ae595e82d9730ae2021e80902d49e2a18f3479225e7c547",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:22.311361+00:00",
      "served_by": [
        "194.213.18.117:8082"
      ]
    },
    {
      "sha256": "c17cce0702068722d8b42ae5af400953d2cd64c1014f8606fe9618fb00d197b0",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:22.129668+00:00",
      "served_by": [
        "89.125.244.117:80"
      ]
    },
    {
      "sha256": "d71e2ae5264980a076cf1417817072548cc85c75316c3e12327c9b34773510da",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:16.239985+00:00",
      "served_by": [
        "178.16.52.120:8787"
      ]
    },
    {
      "sha256": "9cf58ee29518594d164a1ba6659f4f091c051cc1aee05f8ba9bf3056e0200a76",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:15.371508+00:00",
      "served_by": [
        "89.125.244.117:22"
      ]
    },
    {
      "sha256": "963eaef3e6b423134a15579bad1d6990ce7aa8aa7310ee3ac372bd96b714907d",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:13.730615+00:00",
      "served_by": [
        "178.16.52.120:8767"
      ]
    },
    {
      "sha256": "97702ea2e86d61a1605659ef89465a88090aee07c3073f4a9f49226dd0319f64",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:13.212826+00:00",
      "served_by": [
        "149.28.135.144:8083"
      ]
    },
    {
      "sha256": "e052f329dc7a48f631c3ea44f8860d6ee127dbaff8ebe1ac10599943a4536620",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:12.479670+00:00",
      "served_by": [
        "45.194.21.64:8443"
      ]
    },
    {
      "sha256": "83a6b9b38460e296fedab00c8e69612459eab10bcd4ed1b1543d7ee020f5cc22",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:04.229428+00:00",
      "served_by": [
        "39.109.126.185:12306"
      ]
    },
    {
      "sha256": "e9c76a0c3f5ceeaf41a81c1edbfa9c0968c16ca9f037efcbf073823e5c71b709",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:03.664106+00:00",
      "served_by": [
        "39.109.126.185:12307"
      ]
    },
    {
      "sha256": "93844d162c3865533b9c656dea6be6b511b9f7f1873dc0b9868fd55e4d1352f3",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:03.573559+00:00",
      "served_by": [
        "43.173.70.252:4455"
      ]
    },
    {
      "sha256": "933c3ba3b370fd91d3836a45ae1c251e342e80544042c35bd64346676637f11e",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:03.444127+00:00",
      "served_by": [
        "39.109.126.185:8084"
      ]
    },
    {
      "sha256": "7a8280a0f5d68f009a50a16dc9dc0b2d80c6aa02c06c3f25a5c374217264a46c",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:02.960092+00:00",
      "served_by": [
        "195.114.193.201:80"
      ]
    },
    {
      "sha256": "8bfd01e9d75f31a0fbd3d2e24a366aa44db8e07d2696cd6a172537815e3ffe25",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:02.949988+00:00",
      "served_by": [
        "8.219.211.139:8888"
      ]
    },
    {
      "sha256": "805174849433583214803ab5fff2adca991b94fb803d353239336c75142b83f7",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:02.923473+00:00",
      "served_by": [
        "38.45.125.98:8084"
      ]
    },
    {
      "sha256": "7f0d5617bcf7880a0486aac9beb4caab31a17ee81f5368dc5f8ca08e57fb804d",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:02.869010+00:00",
      "served_by": [
        "192.227.167.203:8080"
      ]
    },
    {
      "sha256": "a4f21c992c31a32fe15c5d0593e853172a77cd8ff69a33c4aba018b2b06a15b6",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:02.802798+00:00",
      "served_by": [
        "104.233.217.124:9090"
      ]
    },
    {
      "sha256": "7d4dbf8365ecae2ce22184ee812cae8e73027cc79cb3a5f5f001bc0c9064f4a0",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:02.759070+00:00",
      "served_by": [
        "104.233.217.124:10086"
      ]
    },
    {
      "sha256": "8c43df6e0be4707134c8651f86263d07a4dd42e3de96eab65b7fb70799f44f57",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:02.699786+00:00",
      "served_by": [
        "107.172.214.214:8084"
      ]
    },
    {
      "sha256": "93bedea18cde943ca2b6ef1c9196ef6b9e232856244200b8e13b56783be9e408",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:02.637564+00:00",
      "served_by": [
        "104.234.172.217:80"
      ]
    },
    {
      "sha256": "879d1851ed7cd5d8b92c65eddd9e7a12227d93b4ebc81731be94b2a7c8f0bcf5",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:02.636389+00:00",
      "served_by": [
        "23.224.69.107:3308"
      ]
    },
    {
      "sha256": "83253d2574e58bb4fef2078e684a23521fdcd93f9879e95eb413ccf99ba94666",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:00.281005+00:00",
      "served_by": [
        "139.95.24.51:8081"
      ]
    },
    {
      "sha256": "7db6b3a4f8ad70cca8a0cf5f93ad9fa7302ad0c2f9e58b1085e23a10301b090c",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:08:59.734086+00:00",
      "served_by": [
        "107.172.80.241:80"
      ]
    },
    {
      "sha256": "7442a0c6b62aef07ae47a5c16bc5ee96308563e22654a63d2e1be048e07e9428",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:08:57.446218+00:00",
      "served_by": [
        "103.208.87.59:8080"
      ]
    },
    {
      "sha256": "73ef93aabc1eb0cd3cfe9b5b398d3115ae0187a1dfe0d4c0585f87b7e04855fb",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:08:56.501676+00:00",
      "served_by": [
        "47.236.204.56:80"
      ]
    },
    {
      "sha256": "6eda61a9246963d93ea4a0975b28966605f1a7d438634b222e46dc23ae90a03f",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:08:54.904319+00:00",
      "served_by": [
        "23.224.69.108:3308"
      ]
    },
    {
      "sha256": "a705cfeb132ceb8a67f980e3f9990b87f7b5f52e6cba7ad2aebe96398bbd53bd",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:08:52.846216+00:00",
      "served_by": [
        "103.110.221.162:443"
      ]
    },
    {
      "sha256": "8d4948aedeccfba5d7f78bff21f5e4b5905341d74341bf95440b9b5cd487d11f",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:08:52.845787+00:00",
      "served_by": [
        "103.110.221.162:8441"
      ]
    },
    {
      "sha256": "70f2378d0de3c92052e1b38fbf9f30947ad01825751c394c81270bb6c1b1cecc",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:08:50.709920+00:00",
      "served_by": [
        "107.172.201.125:59009"
      ]
    },
    {
      "sha256": "69c03782c7ff9a0101eb2a7cc09eeca78140fc71522df01eb37853e7d7e48bc1",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:08:49.231141+00:00",
      "served_by": [
        "23.95.242.55:1080"
      ]
    },
    {
      "sha256": "b73ff6beadee73f3bc4df7a66599a52bb8c58ed98ff711e3382640e4cc66d40d",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:08:49.117852+00:00",
      "served_by": [
        "23.95.242.55:443"
      ]
    },
    {
      "sha256": "fa7990b0c408fca18a65dfd389ed752e43d8c254aad0f53a4c67055248fe1d6e",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:08:15.190318+00:00",
      "served_by": [
        "160.25.134.148:8964"
      ]
    },
    {
      "sha256": "6d23f0559a264aae8f4efc3ab881f4b96a33038fbcecda3764b663b39621702b",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:08:10.148889+00:00",
      "served_by": [
        "103.159.206.136:2086"
      ]
    },
    {
      "sha256": "65ca4ccaad92310663a2d5a938a603bc57e1ecea22a1a0d06a13f931998e307d",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:07:34.115123+00:00",
      "served_by": [
        "160.25.134.148:559"
      ]
    },
    {
      "sha256": "52c93b0ad494b3112d492991d179afde511f705628abe440fad5570153e17b3b",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:23.325707+00:00",
      "served_by": [
        "45.77.242.92:443"
      ]
    },
    {
      "sha256": "58374be844e8096a7c7ff61f1bb7d4814079c249e2a30ac4c8d81b0e2160ea26",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:21.680901+00:00",
      "served_by": [
        "193.134.209.166:8080"
      ]
    },
    {
      "sha256": "563b09d8d4864cb78c42834ceee96f91904bf514743836ec7a758cc9d283f2f4",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:21.668677+00:00",
      "served_by": [
        "149.28.139.62:80"
      ]
    },
    {
      "sha256": "580d44239c07b8c750b85e3953b565043179a37cf20ea1f6e1169d3ebd9095f6",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:21.655156+00:00",
      "served_by": [
        "47.239.57.214:5566"
      ]
    },
    {
      "sha256": "c9f9930877afd7f20812c336be7eb97c3e72addc98fef8a6d44f5c1e937f2c3b",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:21.068570+00:00",
      "served_by": [
        "103.51.147.252:15312"
      ]
    },
    {
      "sha256": "4af5ad0b226a11c48d867db539f62799cf70f201934dec64a12742bdba5548b4",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:20.765413+00:00",
      "served_by": [
        "52.128.224.236:9090"
      ]
    },
    {
      "sha256": "5305be1689d5f64c157bec2f528e77337b6501f94c82f370de60d033805fdd80",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:20.622674+00:00",
      "served_by": [
        "103.51.147.252:8084"
      ]
    },
    {
      "sha256": "f02129c025bce56b751de7e4138396c44e7d5daf6c20609bc5d783e5aceb79af",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:18.761971+00:00",
      "served_by": [
        "64.111.93.243:80"
      ]
    },
    {
      "sha256": "6beb963ea931b4b7a8c2d1d32316a746920958f9180ab0c0e89f16f119e28424",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:18.723292+00:00",
      "served_by": [
        "192.129.141.183:18886"
      ]
    },
    {
      "sha256": "4debf7f68d140c7017bde901afa27dc95811b31df6e744454906cf9d9f513a4a",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:15.417086+00:00",
      "served_by": [
        "18.139.222.223:82"
      ]
    },
    {
      "sha256": "4fa183cc55f1916688d45c04250bf1b8e4fce29a72ba2464f3434a94d6aab788",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:03.887164+00:00",
      "served_by": [
        "173.242.114.162:443"
      ]
    },
    {
      "sha256": "4c7ab8d242e667727c463ae448ace60120fa66986f18053dcdb295a95ee401be",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:03.597122+00:00",
      "served_by": [
        "45.192.105.32:18084"
      ]
    },
    {
      "sha256": "c4f948c5a095c0359e169dcccf39c5dba83d07964ad5e704c42d86e0d4bafda6",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:03.167436+00:00",
      "served_by": [
        "107.148.78.97:9000"
      ]
    },
    {
      "sha256": "766a83bd426a194ef37b03e6669311ffbcf292a9e75eec7bdc37fe8135eb63cd",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:02.637070+00:00",
      "served_by": [
        "107.148.78.97:8899"
      ]
    },
    {
      "sha256": "451ce9957a1b0274e8c20c15ea1429639f370092036c2f67e33f194aa3081349",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:01.385339+00:00",
      "served_by": [
        "107.148.78.97:8443"
      ]
    },
    {
      "sha256": "8cbf0c5406f02eee49573761b410cd73dcfb6ad9ebc721b6ddf226f5ff8ad7ec",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:01.041185+00:00",
      "served_by": [
        "23.94.70.197:8085"
      ]
    },
    {
      "sha256": "4a88f5463269a2c6502fd92292c8a6b68e9e0721e7a88434838aa0c0937f3285",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:59.820130+00:00",
      "served_by": [
        "64.7.199.177:8443"
      ]
    },
    {
      "sha256": "70d2e2741786101e0602332c0f77f7c52b38922b97179431994718518180b849",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:59.586205+00:00",
      "served_by": [
        "107.148.78.97:8084"
      ]
    },
    {
      "sha256": "4a8655b7dd8aa80f3c0735d21c0a84b595234dec206f5fbd668f23a5621eaf33",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:59.464004+00:00",
      "served_by": [
        "143.246.202.156:8443"
      ]
    },
    {
      "sha256": "3cbb6e3207d29f9fa41c93e99e91301053c657b2b0bffb3232c030405fe13b63",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:59.313609+00:00",
      "served_by": [
        "8.213.149.0:443"
      ]
    },
    {
      "sha256": "595b6300636a8732218a17793618b355e35ddfd00b2507b28caa0b8d3b11a5ca",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:57.639986+00:00",
      "served_by": [
        "202.182.102.83:50299"
      ]
    },
    {
      "sha256": "40f6a626c2f302d8432dd9dbd41e037fbc6d9f8ac9b84e4ae32a5307ce51ee12",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:57.237498+00:00",
      "served_by": [
        "45.87.53.6:8084"
      ]
    },
    {
      "sha256": "60f68cb7657638445d446f3f386c0e543ea5eb967d2014cceb19d9c4f94aa276",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:57.106972+00:00",
      "served_by": [
        "38.54.95.51:8443"
      ]
    },
    {
      "sha256": "41c777a8aff45fea82386924f80379273ba4eff458a3a679cdd85416fa6fdf0c",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:56.131992+00:00",
      "served_by": [
        "202.182.102.83:80"
      ]
    },
    {
      "sha256": "638e4bb67ef8b9a8ddb8152edffb1b6f895c39401c6762336e17fa5a487c7a73",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:54.934257+00:00",
      "served_by": [
        "178.16.53.91:2052"
      ]
    },
    {
      "sha256": "c5a188c889cf3d1e80a518d9391bf302a28f47c09381cedb5b8e38936d226375",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:54.413607+00:00",
      "served_by": [
        "8.218.114.253:59000"
      ]
    },
    {
      "sha256": "3bc9b9bcb3b511e4dbcb929728c209a41f7d2218ce6b79724bc5b86ee7b02528",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:52.778524+00:00",
      "served_by": [
        "38.76.191.100:8084"
      ]
    },
    {
      "sha256": "fef07cdde484cbe6a75df42c41c5f5771f778b89d34de452d71774a0160a3e2f",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:52.717656+00:00",
      "served_by": [
        "151.243.137.78:443"
      ]
    },
    {
      "sha256": "6d66c3165653e78710ff7b33941a26fd70643a7105f1916b1838693dd4ea0a42",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:51.340202+00:00",
      "served_by": [
        "91.92.242.3:7001"
      ]
    },
    {
      "sha256": "3636837e81b2e69716f34a4b3753dd94d1f0704160e9a1de11d019c138086be9",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:51.138273+00:00",
      "served_by": [
        "47.86.82.95:8081"
      ]
    },
    {
      "sha256": "9c214200b1e61ba44e0996336e2771c38b556b7034671f14083624803a276a2a",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:48.977013+00:00",
      "served_by": [
        "91.92.242.3:2087"
      ]
    },
    {
      "sha256": "35d2a8f92ffde391195c38d7c7dbdd6b5eda71ba55fcbecfb4bf56e84312da8d",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:48.463542+00:00",
      "served_by": [
        "149.30.247.60:8080"
      ]
    },
    {
      "sha256": "3172962002ee71f7b870d2cdda08dc0f59a69cfc1c124840a0ccabf8c6c89ef1",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:47.015425+00:00",
      "served_by": [
        "154.36.163.65:63350"
      ]
    },
    {
      "sha256": "32927843ac3889b8ce00a7f531c130765aded6530122e8f3b83e59acd3c08d23",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:46.971273+00:00",
      "served_by": [
        "165.154.205.34:443"
      ]
    },
    {
      "sha256": "feb6368a3883566084280d153f5851dd6a787b36e53fe91634e0b8764e7497b8",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:46.602556+00:00",
      "served_by": [
        "52.128.224.237:9090"
      ]
    },
    {
      "sha256": "43128642e8fa538760a2a1965f8067f3f7b7c8cdab2fd71ea5748509fae91943",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:46.583715+00:00",
      "served_by": [
        "154.36.163.65:53389"
      ]
    },
    {
      "sha256": "b2ed52ffe0f35178622a2865a4f499001d4f6a79770abcf02401584c1f5e9ba6",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:46.187852+00:00",
      "served_by": [
        "31.7.62.178:12581"
      ]
    },
    {
      "sha256": "590d457e160357001d53e9a7547617bcbd0941b7c41157520f12c13c8a50f50b",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:45.930145+00:00",
      "served_by": [
        "165.154.205.34:80"
      ]
    },
    {
      "sha256": "a4480cb339ca17a01f9b9ceccd98f2828b894c99fd8c83414868caba083d2de7",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:45.548107+00:00",
      "served_by": [
        "50.114.184.76:80"
      ]
    },
    {
      "sha256": "dbddfdbb913d937804786f5de9b8a963d6acb87462443dced15c7d4196868f91",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:45.519547+00:00",
      "served_by": [
        "47.79.123.84:8080"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "151.245.90.134",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 134677,
      "last_seen": "2026-10-30T09:07:12.325Z"
    },
    {
      "ip": "103.51.147.252",
      "ports": [
        8084,
        15312
      ],
      "still_listed": true,
      "family": "sliver",
      "asn": 133731,
      "last_seen": "2026-10-30T06:36:51.979Z"
    },
    {
      "ip": "69.48.228.156",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 399629,
      "last_seen": "2026-10-30T06:26:37.029Z"
    },
    {
      "ip": "156.244.9.19",
      "ports": [
        9094
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 154177,
      "last_seen": "2026-10-30T03:10:19.647Z"
    },
    {
      "ip": "103.242.12.143",
      "ports": [
        1234
      ],
      "still_listed": true,
      "family": "sliver",
      "asn": 401696,
      "last_seen": "2026-10-30T03:06:21.854Z"
    },
    {
      "ip": "18.139.222.223",
      "ports": [
        82
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 16509,
      "last_seen": "2026-10-30T03:03:28.771Z"
    },
    {
      "ip": "38.45.125.100",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 22427,
      "last_seen": "2026-10-30T00:19:25.584Z"
    },
    {
      "ip": "103.208.87.59",
      "ports": [
        8080
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 138995,
      "last_seen": "2026-10-30T00:19:12.558Z"
    },
    {
      "ip": "193.134.209.166",
      "ports": [
        8080
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 139659,
      "last_seen": "2026-10-30T00:18:59.350Z"
    },
    {
      "ip": "38.45.125.99",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 22427,
      "last_seen": "2026-10-30T00:18:46.101Z"
    },
    {
      "ip": "107.172.214.214",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-30T00:18:43.557Z"
    },
    {
      "ip": "47.76.245.121",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-30T00:18:42.253Z"
    },
    {
      "ip": "204.194.51.97",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 140869,
      "last_seen": "2026-10-30T00:18:42.128Z"
    },
    {
      "ip": "45.77.42.89",
      "ports": [
        23566
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-10-30T00:18:41.045Z"
    },
    {
      "ip": "107.172.201.125",
      "ports": [
        59009
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-30T00:18:37.773Z"
    },
    {
      "ip": "103.110.221.162",
      "ports": [
        443,
        8441
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 137535,
      "last_seen": "2026-10-30T00:18:35.508Z"
    },
    {
      "ip": "195.114.193.201",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 212238,
      "last_seen": "2026-10-30T00:18:10.440Z"
    },
    {
      "ip": "38.45.125.102",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 22427,
      "last_seen": "2026-10-30T00:18:00.161Z"
    },
    {
      "ip": "102.129.165.178",
      "ports": [
        8443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 329184,
      "last_seen": "2026-10-30T00:17:53.370Z"
    },
    {
      "ip": "45.192.105.32",
      "ports": [
        18084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 401701,
      "last_seen": "2026-10-30T00:17:47.965Z"
    },
    {
      "ip": "38.76.191.100",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 401701,
      "last_seen": "2026-10-30T00:17:34.912Z"
    },
    {
      "ip": "172.245.168.240",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-30T00:17:30.563Z"
    },
    {
      "ip": "206.206.76.110",
      "ports": [
        2082,
        2086,
        2095
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 215311,
      "last_seen": "2026-10-30T00:17:22.638Z"
    },
    {
      "ip": "202.182.102.83",
      "ports": [
        80,
        50299
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-10-30T00:17:11.074Z"
    },
    {
      "ip": "173.249.220.138",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 11878,
      "last_seen": "2026-10-30T00:17:09.100Z"
    },
    {
      "ip": "47.239.57.214",
      "ports": [
        5566
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-30T00:17:05.869Z"
    },
    {
      "ip": "23.95.242.55",
      "ports": [
        443,
        1080
      ],
      "still_listed": true,
      "family": "reversessh",
      "asn": 36352,
      "last_seen": "2026-10-30T00:17:01.977Z"
    },
    {
      "ip": "47.236.204.56",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-30T00:16:43.216Z"
    },
    {
      "ip": "8.219.211.139",
      "ports": [
        8888
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-30T00:16:41.988Z"
    },
    {
      "ip": "39.109.126.185",
      "ports": [
        8084,
        12306,
        12307
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 142403,
      "last_seen": "2026-10-30T00:16:40.788Z"
    },
    {
      "ip": "38.45.125.98",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 22427,
      "last_seen": "2026-10-30T00:16:20.072Z"
    },
    {
      "ip": "192.227.167.203",
      "ports": [
        8080
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-30T00:16:11.693Z"
    },
    {
      "ip": "77.111.101.118",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 396356,
      "last_seen": "2026-10-30T00:16:02.932Z"
    },
    {
      "ip": "93.177.77.228",
      "ports": [
        8080
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 138968,
      "last_seen": "2026-10-30T00:16:00.172Z"
    },
    {
      "ip": "18.139.85.136",
      "ports": [
        2086
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 16509,
      "last_seen": "2026-10-30T00:15:49.192Z"
    },
    {
      "ip": "8.218.114.253",
      "ports": [
        59000
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-30T00:15:46.205Z"
    },
    {
      "ip": "103.159.206.136",
      "ports": [
        2086
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 31972,
      "last_seen": "2026-10-30T00:15:44.632Z"
    },
    {
      "ip": "151.243.137.78",
      "ports": [
        80,
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 212238,
      "last_seen": "2026-10-30T00:15:24.011Z"
    },
    {
      "ip": "8.220.246.195",
      "ports": [
        8443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-30T00:15:23.606Z"
    },
    {
      "ip": "149.30.247.60",
      "ports": [
        8080
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 133199,
      "last_seen": "2026-10-30T00:15:22.877Z"
    },
    {
      "ip": "205.186.112.213",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 140869,
      "last_seen": "2026-10-30T00:15:09.130Z"
    },
    {
      "ip": "154.36.163.65",
      "ports": [
        53389,
        63350
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 1014,
      "last_seen": "2026-10-30T00:15:08.111Z"
    },
    {
      "ip": "173.211.46.220",
      "ports": [
        53306
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 212238,
      "last_seen": "2026-10-30T00:15:03.172Z"
    },
    {
      "ip": "206.188.196.221",
      "ports": [
        8001
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 399629,
      "last_seen": "2026-10-30T00:15:00.170Z"
    },
    {
      "ip": "52.128.224.234",
      "ports": [
        9090
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45753,
      "last_seen": "2026-10-30T00:14:59.949Z"
    },
    {
      "ip": "38.45.125.101",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 22427,
      "last_seen": "2026-10-30T00:14:53.564Z"
    },
    {
      "ip": "45.87.53.6",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "cobalt_strike",
      "asn": 142637,
      "last_seen": "2026-10-30T00:14:50.685Z"
    },
    {
      "ip": "134.122.154.92",
      "ports": [
        2082,
        2086
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 152194,
      "last_seen": "2026-10-30T00:14:37.700Z"
    },
    {
      "ip": "198.46.159.243",
      "ports": [
        2086,
        8080
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-30T00:14:33.481Z"
    },
    {
      "ip": "52.128.224.235",
      "ports": [
        9090
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45753,
      "last_seen": "2026-10-30T00:14:13.082Z"
    },
    {
      "ip": "52.128.224.238",
      "ports": [
        9090
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45753,
      "last_seen": "2026-10-30T00:14:08.770Z"
    },
    {
      "ip": "47.236.130.154",
      "ports": [
        2095,
        8080
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-30T00:14:06.154Z"
    },
    {
      "ip": "23.94.70.197",
      "ports": [
        8085
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-30T00:13:59.643Z"
    },
    {
      "ip": "52.128.224.237",
      "ports": [
        9090
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45753,
      "last_seen": "2026-10-30T00:13:58.063Z"
    },
    {
      "ip": "45.136.14.91",
      "ports": [
        110,
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 139659,
      "last_seen": "2026-10-30T00:13:56.355Z"
    },
    {
      "ip": "139.180.216.149",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-10-30T00:13:52.979Z"
    },
    {
      "ip": "102.129.165.177",
      "ports": [
        8083
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 329184,
      "last_seen": "2026-10-30T00:13:52.102Z"
    },
    {
      "ip": "103.211.32.112",
      "ports": [
        2082
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 133380,
      "last_seen": "2026-10-30T00:13:38.954Z"
    },
    {
      "ip": "45.77.242.92",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-10-30T00:13:38.276Z"
    },
    {
      "ip": "165.154.205.34",
      "ports": [
        80,
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 142002,
      "last_seen": "2026-10-30T00:13:37.117Z"
    },
    {
      "ip": "52.128.224.236",
      "ports": [
        9090
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45753,
      "last_seen": "2026-10-30T00:13:31.414Z"
    },
    {
      "ip": "64.81.30.24",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 979,
      "last_seen": "2026-10-30T00:13:29.136Z"
    },
    {
      "ip": "155.94.144.168",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-30T00:13:29.046Z"
    },
    {
      "ip": "45.221.115.76",
      "ports": [
        8843
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 967,
      "last_seen": "2026-10-30T00:13:27.252Z"
    },
    {
      "ip": "102.204.223.106",
      "ports": [
        47351
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 139923,
      "last_seen": "2026-10-30T00:13:27.040Z"
    },
    {
      "ip": "43.173.70.252",
      "ports": [
        4455
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 132203,
      "last_seen": "2026-10-30T00:03:24.876Z"
    },
    {
      "ip": "176.97.117.157",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 43180,
      "last_seen": "2026-10-29T03:04:54.482Z"
    },
    {
      "ip": "8.218.4.6",
      "ports": [
        60001
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-28T00:17:49.457Z"
    },
    {
      "ip": "178.16.52.120",
      "ports": [
        8767,
        8787
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 202412,
      "last_seen": "2026-10-27T00:10:33.317Z"
    },
    {
      "ip": "45.194.21.64",
      "ports": [
        8443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 140227,
      "last_seen": "2026-10-26T00:14:46.580Z"
    },
    {
      "ip": "64.111.93.243",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 399629,
      "last_seen": "2026-10-23T06:22:20.372Z"
    },
    {
      "ip": "149.28.139.62",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-10-23T00:15:54.348Z"
    },
    {
      "ip": "145.79.143.166",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 205548,
      "last_seen": "2026-10-23T00:12:52.719Z"
    },
    {
      "ip": "45.207.35.31",
      "ports": [
        8087
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 61112,
      "last_seen": "2026-10-22T03:09:49.977Z"
    },
    {
      "ip": "134.122.153.121",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "reversessh",
      "asn": 152194,
      "last_seen": "2026-10-22T03:05:54.338Z"
    },
    {
      "ip": "160.25.134.148",
      "ports": [
        559,
        8964
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 18526,
      "last_seen": "2026-10-22T00:13:43.590Z"
    },
    {
      "ip": "43.110.42.102",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-21T09:33:43.505Z"
    },
    {
      "ip": "192.255.128.122",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-21T08:05:02.209Z"
    },
    {
      "ip": "45.221.112.127",
      "ports": [
        443,
        4419,
        4443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 967,
      "last_seen": "2026-10-21T06:28:33.419Z"
    },
    {
      "ip": "8.210.222.251",
      "ports": [
        56789
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-21T00:12:04.629Z"
    },
    {
      "ip": "43.156.179.8",
      "ports": [
        4433
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 132203,
      "last_seen": "2026-10-20T09:17:41.147Z"
    },
    {
      "ip": "47.86.82.95",
      "ports": [
        8081
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-20T00:14:35.412Z"
    },
    {
      "ip": "159.100.9.55",
      "ports": [
        18081
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 214036,
      "last_seen": "2026-10-20T00:14:00.018Z"
    },
    {
      "ip": "139.95.24.51",
      "ports": [
        8081
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-20T00:13:41.478Z"
    },
    {
      "ip": "143.246.202.156",
      "ports": [
        8443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 200019,
      "last_seen": "2026-10-19T00:09:48.690Z"
    },
    {
      "ip": "178.16.53.91",
      "ports": [
        2052
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 202412,
      "last_seen": "2026-10-17T03:04:56.845Z"
    },
    {
      "ip": "104.233.217.124",
      "ports": [
        9090,
        10086
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 54600,
      "last_seen": "2026-10-16T03:05:17.351Z"
    },
    {
      "ip": "170.62.130.154",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 140869,
      "last_seen": "2026-10-16T00:19:02.790Z"
    },
    {
      "ip": "8.217.34.108",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "cobalt_strike",
      "asn": 45102,
      "last_seen": "2026-10-15T03:08:38.879Z"
    },
    {
      "ip": "45.86.229.111",
      "ports": [
        8080
      ],
      "still_listed": true,
      "family": "havoc",
      "asn": 62005,
      "last_seen": "2026-10-15T00:12:33.142Z"
    },
    {
      "ip": "50.114.184.76",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 140869,
      "last_seen": "2026-10-15T00:12:11.579Z"
    },
    {
      "ip": "206.119.178.109",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 133199,
      "last_seen": "2026-10-15T00:11:58.273Z"
    },
    {
      "ip": "38.181.44.109",
      "ports": [
        8089,
        9999
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 140227,
      "last_seen": "2026-10-15T00:11:02.940Z"
    },
    {
      "ip": "208.167.245.124",
      "ports": [
        18889
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-10-15T00:10:57.883Z"
    },
    {
      "ip": "107.148.78.97",
      "ports": [
        8084,
        8443,
        8899,
        9000
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 394432,
      "last_seen": "2026-10-14T00:08:11.834Z"
    },
    {
      "ip": "38.54.95.51",
      "ports": [
        8443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 154177,
      "last_seen": "2026-10-12T09:11:13.584Z"
    },
    {
      "ip": "154.91.180.246",
      "ports": [
        18080,
        18081
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-11T18:05:51.195Z"
    },
    {
      "ip": "66.179.30.146",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 399629,
      "last_seen": "2026-10-11T09:00:26.784Z"
    },
    {
      "ip": "149.28.135.144",
      "ports": [
        8083
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-10-11T06:09:17.432Z"
    },
    {
      "ip": "104.234.172.217",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 8796,
      "last_seen": "2026-10-10T09:56:38.258Z"
    }
  ]
}