{
  "field": "endpoint",
  "label": "endpoint",
  "value": "154.217.234.104:8991",
  "page": "https://publicmosaic.com/config/endpoint/MTU0LjIxNy4yMzQuMTA0Ojg5OTE",
  "generated": "2026-10-31T08:37:43.588Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "37598135d26beff37903ff6288f9a7986a91fb5301aba89a9d8e3f2309441eae",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-14T04:38:52.587820+00:00",
      "served_by": [
        "154.217.234.104:8991"
      ]
    },
    {
      "sha256": "b306ff1b103501c20e34b0cb7349ce386223c8979b3079964ab5ef1894fdf69f",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-14T04:38:49.113785+00:00",
      "served_by": [
        "154.217.234.104:8991"
      ]
    },
    {
      "sha256": "6a1245ca1866b28e4237a34399e6cea689f9cb2e173adbbf57aa88ab3e0af1fa",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-14T04:38:46.105926+00:00",
      "served_by": [
        "154.217.234.104:8991"
      ]
    },
    {
      "sha256": "156327919bfe26de2a826f9184d82a7a955c517ee68f21d6eb5811ef5fcbe917",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-09-14T04:38:42.586758+00:00",
      "served_by": [
        "154.217.234.104:8991"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "154.217.234.104",
      "ports": [
        8991
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 402169,
      "last_seen": "2026-09-14T04:38:09.706Z"
    }
  ]
}