{
  "field": "endpoint",
  "label": "endpoint",
  "value": "104.168.94.108:38001",
  "page": "https://publicmosaic.com/config/endpoint/MTA0LjE2OC45NC4xMDg6MzgwMDE",
  "generated": "2026-10-31T13:07:44.034Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "090edf9c38dc3027da0057538d0e9e8dd0f5cd9ff49a0b565e0b4c9ab03f411c",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:05:57.303717+00:00",
      "served_by": [
        "104.168.94.108:38001"
      ]
    },
    {
      "sha256": "d0933b8f3d36ea0d0b5e3113ce982309042ee680b1b7d4332acd4cf5adf9bed8",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:05:57.134568+00:00",
      "served_by": [
        "104.168.94.108:38001"
      ]
    },
    {
      "sha256": "f1caf5e5df288b1c0231c47435895ef5beebbdfaff87c5f99ba7ffcfbadd7a02",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:05:56.981907+00:00",
      "served_by": [
        "104.168.94.108:38001"
      ]
    },
    {
      "sha256": "a855b24fe05fdb1444803dcaa3540696253530d34fe5a96de8b8785f5fa02175",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:56.823645+00:00",
      "served_by": [
        "104.168.94.108:38001"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "104.168.94.108",
      "ports": [
        38001
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-31T00:11:56.352Z"
    }
  ]
}