{
  "field": "endpoint",
  "label": "endpoint",
  "value": "103.159.206.136:60024",
  "page": "https://publicmosaic.com/config/endpoint/MTAzLjE1OS4yMDYuMTM2OjYwMDI0",
  "generated": "2026-10-31T05:37:43.768Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "c9c064cf0a7d4c3ee7a034c5af290e7bc26d109b356dc626ea1d05cedc348a78",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:08:57.617098+00:00",
      "served_by": [
        "103.159.206.136:60024"
      ]
    },
    {
      "sha256": "ef120287c1389743a7165a8bbd0716831affe8fed8f2f6c25e1eeda5c1f868dd",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:08:55.182445+00:00",
      "served_by": [
        "103.159.206.136:60024"
      ]
    },
    {
      "sha256": "330bff4e8034325a33d3c54fc995c4c904cafc589d813c9dd57c97abb3c86ef7",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:08:52.026570+00:00",
      "served_by": [
        "103.159.206.136:60024"
      ]
    },
    {
      "sha256": "65db35d2108a9b19514708ac89ad3f883771dc5a04b291ee7b31e3cadb7543d0",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:08:49.163413+00:00",
      "served_by": [
        "103.159.206.136:60024"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "103.159.206.136",
      "ports": [
        60024
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 31972,
      "last_seen": "2026-10-31T00:13:34.952Z"
    }
  ]
}