{
  "field": "endpoint",
  "label": "endpoint",
  "value": "149.28.132.51:8089",
  "page": "https://publicmosaic.com/config/endpoint/MTQ5LjI4LjEzMi41MTo4MDg5",
  "generated": "2026-10-31T07:07:44.160Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "dcf9ca4762d2a8927ae0cb57efcd86e879feea0d0102aae1bf7344f4c000e3df",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-08T02:33:45.064364+00:00",
      "served_by": [
        "149.28.132.51:8089"
      ]
    },
    {
      "sha256": "85f34cfb7a03417bd06e4c6fa79baac73fc90a3ccc8ff02b9721e1390b0dd255",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-08T02:33:44.530676+00:00",
      "served_by": [
        "149.28.132.51:8089"
      ]
    },
    {
      "sha256": "d2b1f5b8fec41934a92fc05641456862ca011edc2f7b08de1fbcce0936d74a74",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-08T02:33:43.698470+00:00",
      "served_by": [
        "149.28.132.51:8089"
      ]
    },
    {
      "sha256": "10e290ad2f754b30c05310e3c6e156d59238bfab7cdf8533542806bf4de957a7",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-09-08T02:33:42.990606+00:00",
      "served_by": [
        "149.28.132.51:8089"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "149.28.132.51",
      "ports": [
        8089
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-09-08T02:33:36.162Z"
    }
  ]
}