{
  "field": "endpoint",
  "label": "endpoint",
  "value": "103.123.18.29:32696",
  "page": "https://publicmosaic.com/config/endpoint/MTAzLjEyMy4xOC4yOTozMjY5Ng",
  "generated": "2026-10-31T05:37:43.768Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "37016e95e0fec7196204bd6911d90afcf17f33f3d5aafc3ffe262327c3a6ab7d",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-09T12:39:21.483243+00:00",
      "served_by": [
        "103.123.18.29:32696"
      ]
    },
    {
      "sha256": "68ab58707754b22dfc360e01b54016c4f830b73338399448e0a49b3baa13ca34",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-09T12:39:20.411663+00:00",
      "served_by": [
        "103.123.18.29:32696"
      ]
    },
    {
      "sha256": "74099e18550207337cf15e4ad52469e8bac232392d1d53761ce5ac3c028c4203",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-09T12:39:19.467875+00:00",
      "served_by": [
        "103.123.18.29:32696"
      ]
    },
    {
      "sha256": "1e31dc074a4ea7f400cb969ea80e8855b5e7486660aab415da17591bc284ac5b",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-09-09T12:39:18.729035+00:00",
      "served_by": [
        "103.123.18.29:32696"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "103.123.18.29",
      "ports": [
        32696
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 138069,
      "last_seen": "2026-09-09T12:39:12.811Z"
    }
  ]
}