{
  "field": "endpoint",
  "label": "endpoint",
  "value": "107.172.190.252:65530",
  "page": "https://publicmosaic.com/config/endpoint/MTA3LjE3Mi4xOTAuMjUyOjY1NTMw",
  "generated": "2026-10-31T14:07:43.972Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "8de39b93ed90ee21ffef0ac78eedb74ff7b7e8f9160022088ae60f31df3ffc01",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-30T18:05:30.136923+00:00",
      "served_by": [
        "107.172.190.252:65530"
      ]
    },
    {
      "sha256": "cf17e6460567d281194ebcf82ac064d10b6d757aa06f31e1da415da90fce6c9e",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-30T18:05:29.786049+00:00",
      "served_by": [
        "107.172.190.252:65530"
      ]
    },
    {
      "sha256": "f4bb72bea2bbe55c2b33db77bfa49be0bf072023fb2da91645910c9123cae30d",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-30T18:05:26.486345+00:00",
      "served_by": [
        "107.172.190.252:65530"
      ]
    },
    {
      "sha256": "ffcc763fb16fe658ee1a48d6208593871f13c1d8b2cad1c45757c2acb9e07dc6",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-09-30T18:05:15.795893+00:00",
      "served_by": [
        "107.172.190.252:65530"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "107.172.190.252",
      "ports": [
        65530
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-09-30T18:05:11.857Z"
    }
  ]
}