{
  "field": "beacon_type",
  "label": "beacon type",
  "value": "tcp",
  "page": "https://publicmosaic.com/config/beacon_type/dGNw",
  "generated": "2026-10-30T20:07:43.876Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 921,
  "hosts_total": 685,
  "samples": [
    {
      "sha256": "f87b18827cfdc22df51eab85c0d1a0cc1941ed7ff2a41c23637700646785ad2b",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:46.961721+00:00",
      "served_by": [
        "192.236.223.240:80"
      ]
    },
    {
      "sha256": "dbfb640fe8a650a1f93d72ef1216e63d410a9bbc178a443e8ae9dbed870ef18a",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:46.960517+00:00",
      "served_by": [
        "43.130.69.135:18083"
      ]
    },
    {
      "sha256": "db7e9f329b2281c14243c2f005cd50a08ff905c69e29fe9ef93e50e923f4447f",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:46.871887+00:00",
      "served_by": [
        "64.83.33.237:443"
      ]
    },
    {
      "sha256": "e6ec7a11cccf2e5c26f65690036093045b7f75d00f7f3db853d4022db7922970",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:46.871476+00:00",
      "served_by": [
        "102.209.117.153:8000"
      ]
    },
    {
      "sha256": "e8c485f648fb4b8ca501418e308e41c87f357f0f9e08cf81094a85a3c38f6215",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:46.718965+00:00",
      "served_by": [
        "122.10.52.27:8084"
      ]
    },
    {
      "sha256": "e87555f8bf9fc369cdde2bc56860fc97712fbb1dab8a596eee97990b0fba2c4a",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:46.383258+00:00",
      "served_by": [
        "137.220.251.124:443"
      ]
    },
    {
      "sha256": "e7e18d6549089cbfc9790bff06d7670170ab7d55f2849b55413f14695d0c08f5",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:46.146247+00:00",
      "served_by": [
        "103.230.15.51:18080"
      ]
    },
    {
      "sha256": "dd9a28020f33662464d5c9bf9e1496a65f61fbf104d52a5d3135bfffb1f9bf52",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:46.006522+00:00",
      "served_by": [
        "13.236.190.6:443"
      ]
    },
    {
      "sha256": "e9da6c0ed0eb11b719bb2909fb3e91cf15305250a695b4fd77ecb673308f0d2c",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:45.885422+00:00",
      "served_by": [
        "152.67.33.246:8084"
      ]
    },
    {
      "sha256": "e767dec2973eab5d61c6422e50d11c5e9a8e5cf01a81fe508e10cd4aec215be4",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:45.532449+00:00",
      "served_by": [
        "103.30.76.214:8779"
      ]
    },
    {
      "sha256": "f107e49ce1e8d18c3d80ab06c674924f0856353f6a75456a4b5b77a9d5891472",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:45.532633+00:00",
      "served_by": [
        "130.94.34.35:443"
      ]
    },
    {
      "sha256": "f8fba3240762908b34921c5dbaa5f3f34388f8959bba88adb14715d5493c6533",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:45.374961+00:00",
      "served_by": [
        "45.76.99.126:18080"
      ]
    },
    {
      "sha256": "e8a9addf5295ab5031da89b2bbdad0a006619a57d4fea687bedfe62fe636950b",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:45.105240+00:00",
      "served_by": [
        "23.254.174.175:8005"
      ]
    },
    {
      "sha256": "06c5b5de5dd9a80a83969c48b60e31f8e557372bfe77617d7340a1a42f06cac3",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:45.099992+00:00",
      "served_by": [
        "38.60.242.230:443"
      ]
    },
    {
      "sha256": "dd540eda0cd12c83d609af3f03d20f20758da1e560982a0b7182e3487035eca8",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:45.034760+00:00",
      "served_by": [
        "13.231.27.88:56767"
      ]
    },
    {
      "sha256": "dbf81cac43f0f6f3086391835e95df2ebc15f1c77e13326df658f11564c843c4",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:45.009173+00:00",
      "served_by": [
        "8.210.248.241:8088"
      ]
    },
    {
      "sha256": "e2b039afe76b58ed4277fd6b0111259f3aca252ea4b0119164446ce59687531a",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:44.980839+00:00",
      "served_by": [
        "45.150.64.117:443"
      ]
    },
    {
      "sha256": "ea56ca8eebf8b534c068a997ee26559c63d087ca45bcc24c85ccfcd3a672d70e",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:44.980611+00:00",
      "served_by": [
        "23.252.123.195:80"
      ]
    },
    {
      "sha256": "ea47ff68e92d9a608bec072cd0d4f0c83f8419bc0bb5096c5f98ed5374f9315e",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:44.912589+00:00",
      "served_by": [
        "206.206.127.221:443"
      ]
    },
    {
      "sha256": "f58ef2f93eecc820bce8800502f31e9b9ccc224503f897e4fd994cf97d5476f2",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:44.851896+00:00",
      "served_by": [
        "45.76.99.126:8888"
      ]
    },
    {
      "sha256": "e7eccb9af1e7197aeebfa9adc5e5fdce8bf71dc1b825ee1d3c1028c83d53abfa",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:44.848788+00:00",
      "served_by": [
        "45.77.38.40:80"
      ]
    },
    {
      "sha256": "479a45d8dd29dfe37761ca0abe27702bb7732fa6c10d9aaa7a6a85d51c9bcfd9",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:44.057979+00:00",
      "served_by": [
        "45.136.14.91:8088"
      ]
    },
    {
      "sha256": "d650400971c1a7a335ae657fe64fab7192c05ffb5a1ebb12303c6d3354b02e79",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:43.817940+00:00",
      "served_by": [
        "103.118.247.231:50841"
      ]
    },
    {
      "sha256": "d65cddbdda4284ee9585156779256627606757d29665b6339cd9083c64973c5f",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:43.816173+00:00",
      "served_by": [
        "101.33.45.136:8084"
      ]
    },
    {
      "sha256": "180ee4b8ce712564c0bde5ba1f028ef18bb317839538bbc3728c8792b2aefa0f",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:43.703369+00:00",
      "served_by": [
        "38.60.242.230:80"
      ]
    },
    {
      "sha256": "ac01e55957b213fb101c60688d1d8bb67e6b9d16925874803d0d349293ddcebb",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:43.415049+00:00",
      "served_by": [
        "102.220.88.241:8084"
      ]
    },
    {
      "sha256": "fad578295239508fb7a17e7f59a18f93bb847231e95859fb1aef680db9068d5c",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:43.281969+00:00",
      "served_by": [
        "45.136.14.91:1433"
      ]
    },
    {
      "sha256": "3e79a5cf42d6d9c60d753a4fbd1032a13c99bcb5495adc94a958921cf03e837d",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:43.167573+00:00",
      "served_by": [
        "178.16.53.91:8443"
      ]
    },
    {
      "sha256": "d5a898887899920a5bdd4aba8bcb6ec81b5117c5ae19b9772b1a24d39f6afd0b",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:43.128946+00:00",
      "served_by": [
        "91.213.186.177:8084"
      ]
    },
    {
      "sha256": "648d5a261a0aeeb5fcfa06f2e16f9399a13c2ef9827d2dec0ad3a60556443e50",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:42.342253+00:00",
      "served_by": [
        "178.16.53.91:8081"
      ]
    },
    {
      "sha256": "fab0848f7ec4285c89d125205bc842eebf8d38c4550babcf71012ee4e602f465",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:42.110640+00:00",
      "served_by": [
        "139.180.222.237:8321"
      ]
    },
    {
      "sha256": "75255b7eeb19afb3203621803b80692588d755031bbbd1fa80a53f1787eea3f3",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:41.928107+00:00",
      "served_by": [
        "102.220.88.241:4444"
      ]
    },
    {
      "sha256": "d91604d0f1cf0dfe09338788c6259f7adf6e0c5c4f45db63f28acd96087f7346",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:41.498078+00:00",
      "served_by": [
        "186.244.216.113:10000"
      ]
    },
    {
      "sha256": "d1ea1af120561b33989d1ef26457e913c0a6223abc1a5b5b9b1129cb03dd45ca",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:41.053181+00:00",
      "served_by": [
        "172.235.208.42:443"
      ]
    },
    {
      "sha256": "d56a0a4bd0d00e7b896770bd792e01093f3575821672a717d4c1ca693f267bba",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:40.882644+00:00",
      "served_by": [
        "107.173.10.187:58082"
      ]
    },
    {
      "sha256": "cd3ca14751f8589912cad970e4b68c025f9a818a4abb5e6649663f225074c4e8",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:40.746826+00:00",
      "served_by": [
        "43.128.121.11:50001"
      ]
    },
    {
      "sha256": "ce0fc5425d0bb15a49c02c546255902a35162b7532a90aa961183cf1e595c2bf",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:40.515127+00:00",
      "served_by": [
        "38.55.200.183:443"
      ]
    },
    {
      "sha256": "ce8ddb4e417b01d383b99242966f29d78e0b1423e4273211c0a9ca620c5b3833",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:40.330654+00:00",
      "served_by": [
        "147.79.20.132:443"
      ]
    },
    {
      "sha256": "d271c105df11ac942cd97c19fb3666ac011d384f6abb13d25760632d982091f4",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:39.830186+00:00",
      "served_by": [
        "192.236.151.33:65530"
      ]
    },
    {
      "sha256": "48ed5f51d795bbe5e2de27ae95516218ab40de11281874a4b1ec81febd0bee29",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:39.743442+00:00",
      "served_by": [
        "206.188.196.221:8081"
      ]
    },
    {
      "sha256": "62b17e4420ae40f27f865e8f2e591f471db94e89e1756df39e36dc7e50067752",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:39.651141+00:00",
      "served_by": [
        "149.28.30.98:8090"
      ]
    },
    {
      "sha256": "cb222ddda8174f161e4f6e1c6f9d5673e168970b2bb8ec7a14423e3c3bd16258",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:39.607622+00:00",
      "served_by": [
        "85.121.245.52:443"
      ]
    },
    {
      "sha256": "ccdb34215f78c9b02b0a576b78376958717e49878c41b79107b164d1133a8334",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:39.605592+00:00",
      "served_by": [
        "54.180.100.54:443"
      ]
    },
    {
      "sha256": "42546a75a9da95fb0f34e26f5e69905bfeb89aed0842fd1bb330a1e80aaffde2",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:38.989320+00:00",
      "served_by": [
        "206.188.196.221:443"
      ]
    },
    {
      "sha256": "cf99b2e17538576fcdbf7f2bdd128a87dd92fb819c5f1668ad63cbb989ae3502",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:38.984401+00:00",
      "served_by": [
        "146.235.216.7:54321"
      ]
    },
    {
      "sha256": "7f58318f679d988656f92e5b8b02784c32cce67190f84659be5dcfd47d175652",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:38.790665+00:00",
      "served_by": [
        "149.28.30.98:8088"
      ]
    },
    {
      "sha256": "52e9d67c486abcb35703565b2c662a6644e23d3a42780f2ecffa024c71e5efa4",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:38.337838+00:00",
      "served_by": [
        "139.180.222.237:443"
      ]
    },
    {
      "sha256": "ee1482e71d7b097f2eb5b46d9565d5a25e6e15c638cdcfd7e1236f5ecad84e3e",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:37.386192+00:00",
      "served_by": [
        "149.28.30.98:8084"
      ]
    },
    {
      "sha256": "8ef66e6664ee27c65d7ba18ea9821535e0abbe575491d21ee2384cd30ca43f88",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:37.240043+00:00",
      "served_by": [
        "206.188.196.221:80"
      ]
    },
    {
      "sha256": "92753e4a57818f65e4faabbfdaa9d392aad3cf5c8b85fba23452fd8b6a3bebec",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:36.840494+00:00",
      "served_by": [
        "145.79.143.166:8000"
      ]
    },
    {
      "sha256": "cb15c770fce1d1cefd7d09d9db1f91fb37483ef171bb14fecdaabd8c9d22e75e",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:36.497183+00:00",
      "served_by": [
        "104.234.172.95:443"
      ]
    },
    {
      "sha256": "66b5994f7985cea15e290e547df7494d579bacf7b602bb796d8d91262eace731",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:36.036406+00:00",
      "served_by": [
        "203.91.76.75:20000"
      ]
    },
    {
      "sha256": "c2f27746263692bdc935d1d2933253112c3275239f4aa2181e860b8cd6c287e0",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:35.937933+00:00",
      "served_by": [
        "38.147.164.81:13389"
      ]
    },
    {
      "sha256": "eac63f805cdee3cac3b9c190a2d61e542184194dd02e1a36ffbcb77e2b80eca0",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:34.866178+00:00",
      "served_by": [
        "203.91.76.75:10002"
      ]
    },
    {
      "sha256": "ac2b7b3fd4716cd773369148d081e3405bd29d3f01223bf042c76ead5d5f50f6",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:34.855852+00:00",
      "served_by": [
        "45.76.145.171:6667"
      ]
    },
    {
      "sha256": "b5425c28fc2648b74b73e480a34325a81fe69fd7922fe876c9ace5568de13af2",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:34.047804+00:00",
      "served_by": [
        "154.91.58.123:8074"
      ]
    },
    {
      "sha256": "c866ba282b65e256185b64b4846a96506184f5d53ba65efc35594c866ddb85ec",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:33.605343+00:00",
      "served_by": [
        "65.49.233.42:3306"
      ]
    },
    {
      "sha256": "ca292ec07b3a1238af2bbc9fe9295a1599c6ef599696061e2e6b37796d14318a",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:33.604918+00:00",
      "served_by": [
        "45.152.64.65:41022"
      ]
    },
    {
      "sha256": "82031ac4302ba2b9d8103399d8d36ea30ac1cf23d5ef3fcfcbd458db7e32c997",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:33.561147+00:00",
      "served_by": [
        "45.76.145.171:443"
      ]
    },
    {
      "sha256": "c640dfc1ef1200d60ce69c31f4d843b3f504d5c201e14d114e412132928fb58c",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:33.368246+00:00",
      "served_by": [
        "23.27.47.158:80"
      ]
    },
    {
      "sha256": "6023ac7cb90df36468349f655404dfcc4d0b67dd06b0a6c8a50c50fa05721fec",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:33.079636+00:00",
      "served_by": [
        "23.95.48.221:8080"
      ]
    },
    {
      "sha256": "bc960e893fe0271a3ebdb5cb9e80e20dc28470cf52ec794fe9d7c5d4088973e0",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:31.992758+00:00",
      "served_by": [
        "103.106.230.240:443"
      ]
    },
    {
      "sha256": "16026112de2809605d4cbc26ca4c31f8ff465c4405482fbb1af3bfd27c510217",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:31.641016+00:00",
      "served_by": [
        "23.95.48.221:81"
      ]
    },
    {
      "sha256": "e131cdfccd600677655356a8f17524e6e6b5cacb6964e73d6bb39b6f1d3efa8c",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:31.515120+00:00",
      "served_by": [
        "154.91.59.98:8074"
      ]
    },
    {
      "sha256": "069d92c3b0025a77f810c2de6fe50b6107077d6e043456801d11ce51c150414c",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:31.512744+00:00",
      "served_by": [
        "23.94.68.155:8443"
      ]
    },
    {
      "sha256": "bae5662d1efe590a045343851d4cb67e1d6fe93996c0c5400de8bb72eb51f586",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:31.071229+00:00",
      "served_by": [
        "43.246.210.160:443"
      ]
    },
    {
      "sha256": "bd7f65cbbfb27ecfa3566eaf9d6714f275367a01c3d03451117c432b59710778",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:30.020899+00:00",
      "served_by": [
        "8.211.194.92:443"
      ]
    },
    {
      "sha256": "bc30f0947a73eadf249240f813c5b811c6dbf34a11e83104ed8f4dbe06b6f051",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:29.130499+00:00",
      "served_by": [
        "154.91.58.116:8074"
      ]
    },
    {
      "sha256": "19a4a1e4454d30ec663194301d85d72c3e491cfea1829bbacbd085fcdf7467f4",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:28.978060+00:00",
      "served_by": [
        "38.54.63.84:9988"
      ]
    },
    {
      "sha256": "b0f958dca2da60a471a6e76f94ad9d83ec2e0d5b1458fc1acdc9ffadf5dd387a",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:28.579847+00:00",
      "served_by": [
        "198.44.116.140:8084"
      ]
    },
    {
      "sha256": "5790628319c1fefcbe1c5b69796073d33be649a3b1783a8e4ba0268ac680c2e9",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:28.306793+00:00",
      "served_by": [
        "43.165.168.164:4455"
      ]
    },
    {
      "sha256": "b00e5b79692442a7f5af58fd0d905e4a7c6c020029f45665e8587354380cad2e",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:28.011874+00:00",
      "served_by": [
        "103.212.186.92:65533"
      ]
    },
    {
      "sha256": "3c66478dd72c8763566843f21f8ef09e4eabb192e532d71b0a139f0f96094a40",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:27.569680+00:00",
      "served_by": [
        "203.91.77.226:8689"
      ]
    },
    {
      "sha256": "a2f2411d74b0432c9acc609f1dca5fd949f07462b7109163bc8073c841f860d6",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:27.483542+00:00",
      "served_by": [
        "167.17.47.58:8081"
      ]
    },
    {
      "sha256": "b0fa32337a72f885217c47a61fe5bac129d2a87940e801fe6f67b28a789521bb",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:27.075954+00:00",
      "served_by": [
        "104.223.59.151:9004"
      ]
    },
    {
      "sha256": "b84a4c7a4030e58e0625e58d7e240f05c6ae5d5db8cdc2c3b16dbe9cc821fd6e",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:26.857839+00:00",
      "served_by": [
        "34.243.36.28:443"
      ]
    },
    {
      "sha256": "ac06451987fb724a5740fbe5edc68b621d2fd06151d80bb6b156d26bbf7344d5",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:26.484283+00:00",
      "served_by": [
        "18.162.147.217:443"
      ]
    },
    {
      "sha256": "d196bdbb2c39c7fd67c395ad065ada065f873460073631083b40ca03e6517e5c",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:26.483775+00:00",
      "served_by": [
        "156.244.9.19:9090"
      ]
    },
    {
      "sha256": "fe1f756cec29271010f45b020b472ed67b658c0cb5c5152abd717e8613af9c81",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:26.400839+00:00",
      "served_by": [
        "142.4.58.48:1223"
      ]
    },
    {
      "sha256": "6cd1ddcd2590d0a67be2a62e627967dcfaf4a6817901e5c44cc6d4a64ee077d9",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:25.934988+00:00",
      "served_by": [
        "47.236.204.56:3695"
      ]
    },
    {
      "sha256": "db0b1dbf62a61861edc0034cfe7c702981335cec96d6da77087e4ada47b96f41",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:25.696825+00:00",
      "served_by": [
        "193.42.24.215:8085"
      ]
    },
    {
      "sha256": "b284dd2a6825b5c6aaf9ca9e4493d475764d02b76ee3f627041bf9ccd5c309fb",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:25.410067+00:00",
      "served_by": [
        "94.125.101.85:8443"
      ]
    },
    {
      "sha256": "b9c64e0856c48c7a487666a641fd5be22a3db13e4b3c11386a8cf6129cc21094",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:25.404794+00:00",
      "served_by": [
        "5.161.188.204:8084"
      ]
    },
    {
      "sha256": "0dd8a3b48cb092fe144ada2656177e6302afd9de2a11607b5c9c1a4903d0489c",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:25.331631+00:00",
      "served_by": [
        "107.173.13.251:8083"
      ]
    },
    {
      "sha256": "1b110cf99c276646a2777284d8addeea35c88e9d4f43ecac0874555fb2c263b8",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:25.259915+00:00",
      "served_by": [
        "206.119.178.109:2080"
      ]
    },
    {
      "sha256": "8f92aa02bff7ea126da15630490b05c00cc2493df3070d6a6edc6d29afd9c587",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:24.948429+00:00",
      "served_by": [
        "154.91.60.104:8074"
      ]
    },
    {
      "sha256": "f5b87b722527cc275ec59b977f2e504c5e9d56c0987c51d91f5a8061c3adc98e",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:24.841073+00:00",
      "served_by": [
        "206.238.68.19:8085"
      ]
    },
    {
      "sha256": "abda80b0c3214f9ea4a79a5110f7ecfb87383903bcec4eea554a4395cef763f2",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:24.500366+00:00",
      "served_by": [
        "202.61.138.81:443"
      ]
    },
    {
      "sha256": "ac1ddeabc9f9c5e902315d14adce4188a788b6335a8f9d0624cab3a61880e986",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:24.307434+00:00",
      "served_by": [
        "188.119.65.98:8004"
      ]
    },
    {
      "sha256": "ae7d9cb09a0930bb4c86c05acb57110c75d759c75206482c7c880ee58285ca45",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:24.129723+00:00",
      "served_by": [
        "142.4.58.48:1224"
      ]
    },
    {
      "sha256": "a3a625e423b4999ecf777bf834f2635587cca800e9c06f8453a7a72766d9ac47",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:24.062119+00:00",
      "served_by": [
        "13.210.13.81:443"
      ]
    },
    {
      "sha256": "a9b2b3e0859a954d605a694e24436e4b37e678e7c19ab7cf9fb731732fe2cade",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:23.993467+00:00",
      "served_by": [
        "18.179.119.184:80"
      ]
    },
    {
      "sha256": "6e6b8f68270c4787ac64f9717a1785f0522f385323b56ad5e575f6e4baeee486",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:23.825470+00:00",
      "served_by": [
        "52.128.224.236:8089"
      ]
    },
    {
      "sha256": "fbee819d2e65ed773f128164f34e8d31597e68b9758a11f6e4eb222051c1f41b",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:23.332722+00:00",
      "served_by": [
        "45.90.58.202:443"
      ]
    },
    {
      "sha256": "aaf5181b0acf94c9d544f3c75f93903b38950823f7d9b5d116b27fb7acf1e0bc",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:23.206901+00:00",
      "served_by": [
        "49.51.230.17:9898"
      ]
    },
    {
      "sha256": "08b74f68b0cf43eb1efe95036d8f91bc51d78f346b835fb649c8e4aefded75f4",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:23.028766+00:00",
      "served_by": [
        "38.54.42.246:80"
      ]
    },
    {
      "sha256": "6f4b1b12c737ba41b3e8d1429ddd3eb6860941fcb8f3a6e92482261019b60bd6",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:22.869841+00:00",
      "served_by": [
        "64.81.30.24:8812"
      ]
    },
    {
      "sha256": "aa31f2a2201f54227ae6c2775c98728b3a755f6cddb9667b6bf4f131284a0096",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:22.639489+00:00",
      "served_by": [
        "204.194.54.209:443"
      ]
    },
    {
      "sha256": "a36a0c345d6f5cab541b9425f8b30fc3c5fc20ede12b507a65401eb3ca178f27",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:22.458386+00:00",
      "served_by": [
        "18.178.31.87:65514"
      ]
    },
    {
      "sha256": "9852ea04fc02bf0283aa87f7bc6f301bf0ab4f8be5020437cc11b3ff2ea4abcb",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:22.411679+00:00",
      "served_by": [
        "23.254.219.25:8011"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "107.173.13.251",
      "ports": [
        8083
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-30T09:12:36.458Z"
    },
    {
      "ip": "139.180.128.42",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-10-30T09:11:46.175Z"
    },
    {
      "ip": "43.245.199.155",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 55799,
      "last_seen": "2026-10-30T09:11:35.311Z"
    },
    {
      "ip": "199.187.25.100",
      "ports": [
        51001,
        52660
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 55933,
      "last_seen": "2026-10-30T09:08:52.180Z"
    },
    {
      "ip": "154.36.183.100",
      "ports": [
        18089
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 979,
      "last_seen": "2026-10-30T09:06:52.095Z"
    },
    {
      "ip": "8.211.194.92",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "sliver",
      "asn": 45102,
      "last_seen": "2026-10-30T06:16:08.276Z"
    },
    {
      "ip": "91.213.186.177",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 967,
      "last_seen": "2026-10-30T06:02:35.853Z"
    },
    {
      "ip": "45.63.120.124",
      "ports": [
        443,
        8080
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-10-30T03:12:18.930Z"
    },
    {
      "ip": "94.125.101.85",
      "ports": [
        8443
      ],
      "still_listed": true,
      "family": "adaptix",
      "asn": 41745,
      "last_seen": "2026-10-30T03:10:32.806Z"
    },
    {
      "ip": "207.148.74.81",
      "ports": [
        62161
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-10-30T03:10:31.997Z"
    },
    {
      "ip": "206.119.189.208",
      "ports": [
        6969,
        7979,
        8787,
        8989
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 133199,
      "last_seen": "2026-10-30T03:10:22.977Z"
    },
    {
      "ip": "82.23.246.186",
      "ports": [
        8023
      ],
      "still_listed": true,
      "family": "reversessh",
      "asn": 138643,
      "last_seen": "2026-10-30T03:10:22.781Z"
    },
    {
      "ip": "110.173.53.99",
      "ports": [
        8080
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45753,
      "last_seen": "2026-10-30T03:10:20.571Z"
    },
    {
      "ip": "134.209.214.178",
      "ports": [
        8088,
        10911
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 14061,
      "last_seen": "2026-10-30T03:10:20.441Z"
    },
    {
      "ip": "156.244.9.19",
      "ports": [
        9090
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 154177,
      "last_seen": "2026-10-30T03:10:19.647Z"
    },
    {
      "ip": "146.19.213.28",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 200019,
      "last_seen": "2026-10-30T03:10:17.823Z"
    },
    {
      "ip": "23.254.208.236",
      "ports": [
        8084,
        9895
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-30T03:10:17.800Z"
    },
    {
      "ip": "82.23.246.97",
      "ports": [
        8023
      ],
      "still_listed": true,
      "family": "reversessh",
      "asn": 138643,
      "last_seen": "2026-10-30T03:10:17.697Z"
    },
    {
      "ip": "154.91.60.120",
      "ports": [
        8074,
        8094
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T03:10:16.358Z"
    },
    {
      "ip": "43.130.69.135",
      "ports": [
        18083
      ],
      "still_listed": true,
      "family": "sliver",
      "asn": 132203,
      "last_seen": "2026-10-30T03:09:17.280Z"
    },
    {
      "ip": "147.79.20.132",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "sliver",
      "asn": 212336,
      "last_seen": "2026-10-30T03:08:55.351Z"
    },
    {
      "ip": "49.51.230.17",
      "ports": [
        9001,
        9898
      ],
      "still_listed": true,
      "family": "cobalt_strike",
      "asn": 132203,
      "last_seen": "2026-10-30T03:08:41.062Z"
    },
    {
      "ip": "45.77.28.40",
      "ports": [
        80,
        443,
        8443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-10-30T03:08:03.172Z"
    },
    {
      "ip": "165.154.6.188",
      "ports": [
        1389
      ],
      "still_listed": true,
      "family": "sliver",
      "asn": 135377,
      "last_seen": "2026-10-30T03:06:57.007Z"
    },
    {
      "ip": "154.219.115.123",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "adaptix",
      "asn": 401701,
      "last_seen": "2026-10-30T03:06:34.979Z"
    },
    {
      "ip": "38.47.213.14",
      "ports": [
        4433
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 140227,
      "last_seen": "2026-10-30T03:05:42.925Z"
    },
    {
      "ip": "154.93.103.232",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "sliver",
      "asn": 138915,
      "last_seen": "2026-10-30T03:05:35.104Z"
    },
    {
      "ip": "143.92.51.145",
      "ports": [
        8084,
        18082,
        18083
      ],
      "still_listed": true,
      "family": "cobalt_strike",
      "asn": 152194,
      "last_seen": "2026-10-30T03:05:07.764Z"
    },
    {
      "ip": "43.247.135.106",
      "ports": [
        8080,
        8081
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 42960,
      "last_seen": "2026-10-30T03:05:05.874Z"
    },
    {
      "ip": "185.243.41.216",
      "ports": [
        8886,
        8887
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 61414,
      "last_seen": "2026-10-30T03:05:05.344Z"
    },
    {
      "ip": "149.28.30.98",
      "ports": [
        80,
        443,
        8080,
        8084,
        8086,
        8088,
        8090
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-10-30T03:04:44.507Z"
    },
    {
      "ip": "38.46.15.206",
      "ports": [
        4141
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 22427,
      "last_seen": "2026-10-30T03:04:19.237Z"
    },
    {
      "ip": "107.172.73.26",
      "ports": [
        8082,
        8083
      ],
      "still_listed": true,
      "family": "sliver",
      "asn": 36352,
      "last_seen": "2026-10-30T03:04:13.852Z"
    },
    {
      "ip": "45.192.213.11",
      "ports": [
        80,
        8084,
        8085
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 138995,
      "last_seen": "2026-10-30T03:04:13.147Z"
    },
    {
      "ip": "38.46.15.202",
      "ports": [
        4141
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 22427,
      "last_seen": "2026-10-30T03:04:06.586Z"
    },
    {
      "ip": "45.192.213.15",
      "ports": [
        80,
        8084,
        8085
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 138995,
      "last_seen": "2026-10-30T03:03:58.827Z"
    },
    {
      "ip": "38.46.15.204",
      "ports": [
        4141
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 22427,
      "last_seen": "2026-10-30T03:03:50.931Z"
    },
    {
      "ip": "38.46.15.205",
      "ports": [
        4141
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 22427,
      "last_seen": "2026-10-30T03:03:34.048Z"
    },
    {
      "ip": "18.139.222.223",
      "ports": [
        81
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 16509,
      "last_seen": "2026-10-30T03:03:28.771Z"
    },
    {
      "ip": "38.14.248.161",
      "ports": [
        8080,
        9889,
        9988
      ],
      "still_listed": true,
      "family": "adaptix",
      "asn": 400619,
      "last_seen": "2026-10-30T03:03:27.364Z"
    },
    {
      "ip": "50.114.184.157",
      "ports": [
        443,
        8080,
        9091
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 140869,
      "last_seen": "2026-10-30T03:01:51.646Z"
    },
    {
      "ip": "38.46.15.203",
      "ports": [
        4141
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 22427,
      "last_seen": "2026-10-30T03:00:37.183Z"
    },
    {
      "ip": "132.226.72.148",
      "ports": [
        10000
      ],
      "still_listed": true,
      "family": "adaptix",
      "asn": 31898,
      "last_seen": "2026-10-30T03:00:37.055Z"
    },
    {
      "ip": "198.44.46.122",
      "ports": [
        6666
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-30T03:00:37.021Z"
    },
    {
      "ip": "154.91.58.99",
      "ports": [
        8094
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:21:03.699Z"
    },
    {
      "ip": "154.91.58.126",
      "ports": [
        8094
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:20:54.305Z"
    },
    {
      "ip": "154.91.58.116",
      "ports": [
        8074,
        8094
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:20:44.265Z"
    },
    {
      "ip": "203.91.76.75",
      "ports": [
        10000,
        10002,
        20000
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:20:34.104Z"
    },
    {
      "ip": "154.91.58.123",
      "ports": [
        8074,
        8094
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:20:32.096Z"
    },
    {
      "ip": "103.118.247.231",
      "ports": [
        50841
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 55933,
      "last_seen": "2026-10-30T00:19:55.132Z"
    },
    {
      "ip": "122.10.52.27",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 134548,
      "last_seen": "2026-10-30T00:19:54.741Z"
    },
    {
      "ip": "8.210.131.228",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-30T00:19:50.546Z"
    },
    {
      "ip": "23.27.47.158",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 149440,
      "last_seen": "2026-10-30T00:19:46.867Z"
    },
    {
      "ip": "154.91.58.120",
      "ports": [
        8074,
        8094
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:19:40.487Z"
    },
    {
      "ip": "154.91.57.122",
      "ports": [
        8094
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:19:39.486Z"
    },
    {
      "ip": "38.55.200.183",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:19:34.476Z"
    },
    {
      "ip": "154.91.57.101",
      "ports": [
        8074
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:19:33.472Z"
    },
    {
      "ip": "154.91.57.111",
      "ports": [
        8094
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:19:32.471Z"
    },
    {
      "ip": "154.91.60.121",
      "ports": [
        8074
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:19:26.459Z"
    },
    {
      "ip": "18.178.31.87",
      "ports": [
        65514
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 16509,
      "last_seen": "2026-10-30T00:19:25.507Z"
    },
    {
      "ip": "154.219.101.148",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 401701,
      "last_seen": "2026-10-30T00:19:22.362Z"
    },
    {
      "ip": "107.174.92.241",
      "ports": [
        15672,
        61083
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-30T00:19:17.517Z"
    },
    {
      "ip": "154.91.58.100",
      "ports": [
        8074,
        8094
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:19:17.442Z"
    },
    {
      "ip": "43.242.128.150",
      "ports": [
        8083
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 133199,
      "last_seen": "2026-10-30T00:19:09.552Z"
    },
    {
      "ip": "103.149.93.150",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 401696,
      "last_seen": "2026-10-30T00:19:09.108Z"
    },
    {
      "ip": "152.67.33.246",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 31898,
      "last_seen": "2026-10-30T00:19:07.562Z"
    },
    {
      "ip": "66.42.63.189",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-10-30T00:19:06.622Z"
    },
    {
      "ip": "85.121.245.52",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 9009,
      "last_seen": "2026-10-30T00:19:06.376Z"
    },
    {
      "ip": "170.205.31.53",
      "ports": [
        8083
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 206216,
      "last_seen": "2026-10-30T00:19:06.141Z"
    },
    {
      "ip": "154.91.58.111",
      "ports": [
        8094
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:19:04.417Z"
    },
    {
      "ip": "43.246.210.160",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 132883,
      "last_seen": "2026-10-30T00:19:00.620Z"
    },
    {
      "ip": "155.117.46.184",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 32097,
      "last_seen": "2026-10-30T00:18:59.552Z"
    },
    {
      "ip": "172.235.208.42",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 63949,
      "last_seen": "2026-10-30T00:18:58.350Z"
    },
    {
      "ip": "152.32.210.65",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 135377,
      "last_seen": "2026-10-30T00:18:56.413Z"
    },
    {
      "ip": "205.186.112.15",
      "ports": [
        443,
        8089
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 140869,
      "last_seen": "2026-10-30T00:18:55.728Z"
    },
    {
      "ip": "13.212.206.34",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 16509,
      "last_seen": "2026-10-30T00:18:52.333Z"
    },
    {
      "ip": "45.207.194.79",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 401701,
      "last_seen": "2026-10-30T00:18:50.724Z"
    },
    {
      "ip": "8.218.82.170",
      "ports": [
        18090
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-30T00:18:46.230Z"
    },
    {
      "ip": "160.124.88.200",
      "ports": [
        30004
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 132839,
      "last_seen": "2026-10-30T00:18:45.915Z"
    },
    {
      "ip": "64.83.33.237",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 979,
      "last_seen": "2026-10-30T00:18:36.375Z"
    },
    {
      "ip": "23.94.23.151",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-30T00:18:35.574Z"
    },
    {
      "ip": "103.110.221.162",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 137535,
      "last_seen": "2026-10-30T00:18:35.508Z"
    },
    {
      "ip": "107.173.144.112",
      "ports": [
        8086
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-30T00:18:28.202Z"
    },
    {
      "ip": "192.210.193.156",
      "ports": [
        8090
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-30T00:18:20.921Z"
    },
    {
      "ip": "38.55.194.135",
      "ports": [
        9980
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 139659,
      "last_seen": "2026-10-30T00:18:17.550Z"
    },
    {
      "ip": "165.154.45.137",
      "ports": [
        65533
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 135377,
      "last_seen": "2026-10-30T00:18:17.003Z"
    },
    {
      "ip": "202.61.138.81",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 152194,
      "last_seen": "2026-10-30T00:18:15.494Z"
    },
    {
      "ip": "43.247.135.185",
      "ports": [
        443,
        8080
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 42960,
      "last_seen": "2026-10-30T00:18:13.530Z"
    },
    {
      "ip": "154.91.57.119",
      "ports": [
        8094
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:18:12.683Z"
    },
    {
      "ip": "103.230.15.51",
      "ports": [
        18080
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 55953,
      "last_seen": "2026-10-30T00:18:11.160Z"
    },
    {
      "ip": "154.91.61.98",
      "ports": [
        8094
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:18:10.350Z"
    },
    {
      "ip": "167.160.191.220",
      "ports": [
        10008
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-30T00:18:09.932Z"
    },
    {
      "ip": "47.86.171.139",
      "ports": [
        6789
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-30T00:17:59.597Z"
    },
    {
      "ip": "101.36.127.214",
      "ports": [
        8443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 135377,
      "last_seen": "2026-10-30T00:17:53.377Z"
    },
    {
      "ip": "47.74.43.122",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "cobalt_strike",
      "asn": 45102,
      "last_seen": "2026-10-30T00:17:53.102Z"
    },
    {
      "ip": "154.91.59.118",
      "ports": [
        8094
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:17:51.680Z"
    },
    {
      "ip": "156.238.224.156",
      "ports": [
        5522,
        5533
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 402506,
      "last_seen": "2026-10-30T00:17:50.354Z"
    },
    {
      "ip": "154.91.58.115",
      "ports": [
        8094
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:17:43.366Z"
    },
    {
      "ip": "8.210.253.7",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-30T00:17:42.808Z"
    },
    {
      "ip": "207.56.11.49",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 18186,
      "last_seen": "2026-10-30T00:17:42.121Z"
    }
  ]
}