{
  "field": "endpoint",
  "label": "endpoint",
  "value": "149.28.30.98:80",
  "page": "https://publicmosaic.com/config/endpoint/MTQ5LjI4LjMwLjk4Ojgw",
  "generated": "2026-10-31T06:37:43.937Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "67d78be7f375932111f41c8cd3d91291509caeca8d575ae8df5b454989074316",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-05T21:03:15.807891+00:00",
      "served_by": [
        "149.28.30.98:80"
      ]
    },
    {
      "sha256": "fac79b66749adc89d2d07c2be3c01d77caf2bd20646eb4287d82005b60b8f3ff",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-05T21:03:14.122241+00:00",
      "served_by": [
        "149.28.30.98:80"
      ]
    },
    {
      "sha256": "a369b90c4d91c1eea891f0e54b3a585974469d954a6168e84aa4abbc5a816cab",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-05T21:03:13.224842+00:00",
      "served_by": [
        "149.28.30.98:80"
      ]
    },
    {
      "sha256": "6752b322327cbc39039f68f58001a375d721064e14602c7460072c07ea330051",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-05T21:03:10.953972+00:00",
      "served_by": [
        "149.28.30.98:80"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "149.28.30.98",
      "ports": [
        80
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-10-31T03:05:16.476Z"
    }
  ]
}