{
  "field": "endpoint",
  "label": "endpoint",
  "value": "148.66.17.125:60003",
  "page": "https://publicmosaic.com/config/endpoint/MTQ4LjY2LjE3LjEyNTo2MDAwMw",
  "generated": "2026-10-31T04:07:43.582Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "ecdd0581b7e919cac624b95695582ee2dd18067eb1b53cd24e6a5a5abefb6cb2",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-02T09:09:59.983730+00:00",
      "served_by": [
        "148.66.17.125:60003"
      ]
    },
    {
      "sha256": "b78267d4c4a5a5795804d9db9cbc8caae0e5747429536e7323822df21247ad85",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-02T09:09:55.042838+00:00",
      "served_by": [
        "148.66.17.125:60003"
      ]
    },
    {
      "sha256": "e84bc49e4d378335b6608111c444b22314f1e7644925fc2868d5da93a9021224",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-02T09:09:47.195779+00:00",
      "served_by": [
        "148.66.17.125:60003"
      ]
    },
    {
      "sha256": "f2322672eef9745c18016597f8d3826403e9aaf06faf55b8544cb94b1ab7abb0",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-02T09:09:41.436602+00:00",
      "served_by": [
        "148.66.17.125:60003"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "148.66.17.125",
      "ports": [
        60003
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45753,
      "last_seen": "2026-10-15T00:11:57.612Z"
    }
  ]
}