{
  "field": "endpoint",
  "label": "endpoint",
  "value": "156.238.224.156:5522",
  "page": "https://publicmosaic.com/config/endpoint/MTU2LjIzOC4yMjQuMTU2OjU1MjI",
  "generated": "2026-10-31T08:37:43.588Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "6a710c6fe605a55f33569a9ced89da1c7c0d4bc84504883efaedc2756d556dd3",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:05:47.186983+00:00",
      "served_by": [
        "156.238.224.156:5522"
      ]
    },
    {
      "sha256": "6856c87db16b376d6780c289ff09eb882c2e9311d1e290bca4556060d06af13e",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:05:46.988318+00:00",
      "served_by": [
        "156.238.224.156:5522"
      ]
    },
    {
      "sha256": "9711fdcf2db8d1a8f3d3559d22ae81400a7efaf8a9fd93867c8f4e2baea730f4",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:05:46.783702+00:00",
      "served_by": [
        "156.238.224.156:5522"
      ]
    },
    {
      "sha256": "a190c747026571871b33c2d69db2e8524982ce291cc3b023f12fc670431f5647",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:46.622332+00:00",
      "served_by": [
        "156.238.224.156:5522"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "156.238.224.156",
      "ports": [
        5522
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 402506,
      "last_seen": "2026-10-31T00:15:30.809Z"
    }
  ]
}