{
  "field": "endpoint",
  "label": "endpoint",
  "value": "148.66.17.123:60002",
  "page": "https://publicmosaic.com/config/endpoint/MTQ4LjY2LjE3LjEyMzo2MDAwMg",
  "generated": "2026-10-30T20:37:43.901Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "decb95e02b3ecc52f102bfd2039bfb41fcd40bce0ec7ffce47036d2aebc90207",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-02T09:16:08.133230+00:00",
      "served_by": [
        "148.66.17.123:60002"
      ]
    },
    {
      "sha256": "05c196346ae4085764d50fb5ec9831520939e2746cbc909bf6a183068f0ac217",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-02T09:16:05.956127+00:00",
      "served_by": [
        "148.66.17.123:60002"
      ]
    },
    {
      "sha256": "b7ab8989606509c22f3ae8720042ab908f003db1f794016f2df7cfc54f8e1d95",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-02T09:16:02.434905+00:00",
      "served_by": [
        "148.66.17.123:60002"
      ]
    },
    {
      "sha256": "1f14bad808659ecb29783fe02b4d5d54addd080bbc8a703f7ead0df4e71d1da6",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-02T09:15:56.528260+00:00",
      "served_by": [
        "148.66.17.123:60002"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "148.66.17.123",
      "ports": [
        60002
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45753,
      "last_seen": "2026-10-16T09:53:39.596Z"
    }
  ]
}