{
  "field": "endpoint",
  "label": "endpoint",
  "value": "178.104.160.172:9001",
  "page": "https://publicmosaic.com/config/endpoint/MTc4LjEwNC4xNjAuMTcyOjkwMDE",
  "generated": "2026-10-31T08:37:43.588Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "93b635e954359f1c1d8f3414a57d4089826b0c6d7bcb9d826304a111deb43bfd",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-30T15:06:29.996914+00:00",
      "served_by": [
        "178.104.160.172:9001"
      ]
    },
    {
      "sha256": "674e552d424e6307ceb5cc7d2ee074a8487b7e59b227a2b57ae20a6c9e28a2f4",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-30T15:06:28.150233+00:00",
      "served_by": [
        "178.104.160.172:9001"
      ]
    },
    {
      "sha256": "76c61b3da78fe90ba43138668a95c0e530bc4993907c86c5d69c15cca7973ee4",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-30T15:06:26.583167+00:00",
      "served_by": [
        "178.104.160.172:9001"
      ]
    },
    {
      "sha256": "3e14f153e4ed016aa716b3cf144fe4c966e072aac80fd4be5c1bfe8b28d86ad5",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-09-30T15:06:24.571351+00:00",
      "served_by": [
        "178.104.160.172:9001"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "178.104.160.172",
      "ports": [
        9001
      ],
      "still_listed": true,
      "family": "ligolo",
      "asn": 24940,
      "last_seen": "2026-09-30T15:06:09.072Z"
    }
  ]
}