{
  "field": "endpoint",
  "label": "endpoint",
  "value": "107.172.63.153:8885",
  "page": "https://publicmosaic.com/config/endpoint/MTA3LjE3Mi42My4xNTM6ODg4NQ",
  "generated": "2026-10-31T14:07:43.972Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "6b6ba258b36bfaa5d2ccbafe137b4efece2468e87eacf7f534dd17d5be1cc177",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:09:20.140712+00:00",
      "served_by": [
        "107.172.63.153:8885"
      ]
    },
    {
      "sha256": "7b86deb20845ccfea646ec2c9cef92b09783281cdd73b57b743c70d2f4667130",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:09:18.456418+00:00",
      "served_by": [
        "107.172.63.153:8885"
      ]
    },
    {
      "sha256": "02a13fc47efe788b3387d078c2a65e67dadb200e2eab252e15159174563d88c5",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:09:17.214721+00:00",
      "served_by": [
        "107.172.63.153:8885"
      ]
    },
    {
      "sha256": "3399acef6fd37440c10eef7945d3bd9fd257ab8af1c2faeb5377f914d06d7d95",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:15.623985+00:00",
      "served_by": [
        "107.172.63.153:8885"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "107.172.63.153",
      "ports": [
        8885
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-10-31T03:05:30.819Z"
    }
  ]
}