{
  "field": "endpoint",
  "label": "endpoint",
  "value": "173.249.220.138:443",
  "page": "https://publicmosaic.com/config/endpoint/MTczLjI0OS4yMjAuMTM4OjQ0Mw",
  "generated": "2026-10-30T21:37:43.654Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "dccfb87854ccd14a705b0bf1726b71790e8df01165583f6f41ef10fcb265650e",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:05:42.000806+00:00",
      "served_by": [
        "173.249.220.138:443"
      ]
    },
    {
      "sha256": "2ae74c8f116853d1d06a90607a17a61f354039875307ad1f8626df9ad6a0d81b",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:05:41.937131+00:00",
      "served_by": [
        "173.249.220.138:443"
      ]
    },
    {
      "sha256": "47e5b783b5fd2ea10b942c5761eaa621c082273e988b6abc5541ba81f0e78138",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:05:41.807333+00:00",
      "served_by": [
        "173.249.220.138:443"
      ]
    },
    {
      "sha256": "2f18729a8f0e0d1e1798171485edc776b135ca73e19a476a637a2b65b38245b3",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:41.706165+00:00",
      "served_by": [
        "173.249.220.138:443"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "173.249.220.138",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 11878,
      "last_seen": "2026-10-30T00:17:09.100Z"
    }
  ]
}