{
  "field": "endpoint",
  "label": "endpoint",
  "value": "23.238.28.180:58443",
  "page": "https://publicmosaic.com/config/endpoint/MjMuMjM4LjI4LjE4MDo1ODQ0Mw",
  "generated": "2026-10-30T21:07:44.041Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "d9c2b6e3d3c80948c9e62327526c713613d0d4f6c037dfe00a4224a50261c5a7",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-30T18:05:42.418354+00:00",
      "served_by": [
        "23.238.28.180:58443"
      ]
    },
    {
      "sha256": "9821fb843b640cf4e9e06673b318ad5309756dad63fcd0627f75954aced1756a",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-30T18:05:42.175736+00:00",
      "served_by": [
        "23.238.28.180:58443"
      ]
    },
    {
      "sha256": "e252d1f7c6e635cec0f93a4820e590540dd3942760759320a26ad5c783a85dbc",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-30T18:05:41.877481+00:00",
      "served_by": [
        "23.238.28.180:58443"
      ]
    },
    {
      "sha256": "4b7a44d5eeacac7701458fbf9805b9311fc24f07b126aec8fbf7139c6401c96e",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-09-30T18:05:41.575691+00:00",
      "served_by": [
        "23.238.28.180:58443"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "23.238.28.180",
      "ports": [
        58443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 36352,
      "last_seen": "2026-09-30T18:05:37.021Z"
    }
  ]
}