{
  "field": "endpoint",
  "label": "endpoint",
  "value": "154.31.216.202:29000",
  "page": "https://publicmosaic.com/config/endpoint/MTU0LjMxLjIxNi4yMDI6MjkwMDA",
  "generated": "2026-10-31T08:07:44.029Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "4634ae1618515deda3f4fc0613c65a4fe6f64ea2e2ef8d56f8cc05dc22042f5a",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-10T03:00:47.934905+00:00",
      "served_by": [
        "154.31.216.202:29000"
      ]
    },
    {
      "sha256": "5cf4ed3b82faaa4f8363151d37260b2ca06d867a21767fa23afef1b34546b7d5",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-10T03:00:47.480713+00:00",
      "served_by": [
        "154.31.216.202:29000"
      ]
    },
    {
      "sha256": "cbc70676b13b20c7531caac7eeea0b068b2f88959b6eda21f4439f40be46f747",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-10T03:00:47.031957+00:00",
      "served_by": [
        "154.31.216.202:29000"
      ]
    },
    {
      "sha256": "a9df107047ecfedcb3a4947b8ab63fc9f3cd4db307bb2f3c7ae562995f7403b4",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-09-10T03:00:46.576991+00:00",
      "served_by": [
        "154.31.216.202:29000"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "154.31.216.202",
      "ports": [
        29000
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 18186,
      "last_seen": "2026-09-10T03:00:18.471Z"
    }
  ]
}