{
  "field": "endpoint",
  "label": "endpoint",
  "value": "104.168.94.108:38006",
  "page": "https://publicmosaic.com/config/endpoint/MTA0LjE2OC45NC4xMDg6MzgwMDY",
  "generated": "2026-10-31T13:07:44.034Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "ba4cb668527ef5b478ca374e91a87a53bf5c50f6943fb7015b340315e707bfef",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:05:52.232042+00:00",
      "served_by": [
        "104.168.94.108:38006"
      ]
    },
    {
      "sha256": "ec847092fb2d940bff426cc1a43bbd3c52bce6faf794603efd040e94faede47d",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:05:51.373595+00:00",
      "served_by": [
        "104.168.94.108:38006"
      ]
    },
    {
      "sha256": "3967ffdc7ec1a5a852bf9c4f10b7e7bc7f390b84c717f0482064ee184c1659b6",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:05:51.152781+00:00",
      "served_by": [
        "104.168.94.108:38006"
      ]
    },
    {
      "sha256": "397a6e8b568af7868ae4483504a9fde99f697fe198b484598de6f2f058fa20e8",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:50.884886+00:00",
      "served_by": [
        "104.168.94.108:38006"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "104.168.94.108",
      "ports": [
        38006
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-31T00:11:56.352Z"
    }
  ]
}