{
  "field": "endpoint",
  "label": "endpoint",
  "value": "113.20.0.225:2096",
  "page": "https://publicmosaic.com/config/endpoint/MTEzLjIwLjAuMjI1OjIwOTY",
  "generated": "2026-10-30T21:07:44.041Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "0d7cae4f824ad86dac6875a157af0bf78be5de602fa8c77be3f09ee7b5bd39d9",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:06:22.180627+00:00",
      "served_by": [
        "113.20.0.225:2096"
      ]
    },
    {
      "sha256": "36f7a4d9c62dcebe512e668629c670be0cb6e9cfda6f074b927a10303e7657e1",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:06:21.947234+00:00",
      "served_by": [
        "113.20.0.225:2096"
      ]
    },
    {
      "sha256": "0308a5fee56175c6d87d33665e13d19b7721b37afff5e9a304fb42f7a341ee9a",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:06:21.815687+00:00",
      "served_by": [
        "113.20.0.225:2096"
      ]
    },
    {
      "sha256": "602d8cb16643c6cc3dbe620759c82d58a70218d213f46b00274f13f46265a915",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:21.676281+00:00",
      "served_by": [
        "113.20.0.225:2096"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "113.20.0.225",
      "ports": [
        2096
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 35916,
      "last_seen": "2026-10-29T00:10:36.620Z"
    }
  ]
}