{
  "field": "endpoint",
  "label": "endpoint",
  "value": "203.91.76.75:20000",
  "page": "https://publicmosaic.com/config/endpoint/MjAzLjkxLjc2Ljc1OjIwMDAw",
  "generated": "2026-10-30T21:07:44.041Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "da9b0c3c1ed3a471d03cfaf69d981ab30f6e16ea01965e7bedbfd8b3ada0b9ac",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:09:40.957058+00:00",
      "served_by": [
        "203.91.76.75:20000"
      ]
    },
    {
      "sha256": "cc529edb3687bd54c90c9ecac4e771f9cafb776576bc8f8019b9b2b0a693d5b9",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:09:39.388915+00:00",
      "served_by": [
        "203.91.76.75:20000"
      ]
    },
    {
      "sha256": "64720cdc9efc811537202feb32f96c08cf1f23bc57faed38beabc93d3c617c28",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-06T00:09:37.745108+00:00",
      "served_by": [
        "203.91.76.75:20000"
      ]
    },
    {
      "sha256": "66b5994f7985cea15e290e547df7494d579bacf7b602bb796d8d91262eace731",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:36.036406+00:00",
      "served_by": [
        "203.91.76.75:20000"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "203.91.76.75",
      "ports": [
        20000
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 400619,
      "last_seen": "2026-10-30T00:20:34.104Z"
    }
  ]
}