{
  "field": "endpoint",
  "label": "endpoint",
  "value": "156.238.122.188:8801",
  "page": "https://publicmosaic.com/config/endpoint/MTU2LjIzOC4xMjIuMTg4Ojg4MDE",
  "generated": "2026-10-31T03:37:44.164Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "dee88e3cf7f0e43e5907bdc18fff0aff022689437ddf897c9922fa37a4576ba9",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-09T09:16:56.983833+00:00",
      "served_by": [
        "156.238.122.188:8801"
      ]
    },
    {
      "sha256": "7ee1b80f0664b49cd48817f018541c7035df455604b2661b869a1da6dfdb2dc8",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-09T09:16:56.481275+00:00",
      "served_by": [
        "156.238.122.188:8801"
      ]
    },
    {
      "sha256": "13e234bbfeae694c4cc5a7b70f54406acdf764af0ef063ad559a57b4492902ee",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-09T09:16:55.934765+00:00",
      "served_by": [
        "156.238.122.188:8801"
      ]
    },
    {
      "sha256": "dfd8c5372f53388221081182b29f7bdcd1ba423d7b3c03df721fef3c12938da7",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-09-09T09:16:55.122092+00:00",
      "served_by": [
        "156.238.122.188:8801"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "156.238.122.188",
      "ports": [
        8801
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 54801,
      "last_seen": "2026-09-09T09:16:50.910Z"
    }
  ]
}