{
  "field": "endpoint",
  "label": "endpoint",
  "value": "38.181.44.109:8089",
  "page": "https://publicmosaic.com/config/endpoint/MzguMTgxLjQ0LjEwOTo4MDg5",
  "generated": "2026-10-31T00:37:43.593Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "055523a630030ce028fbf5c569230be76feebef1f6ccfa2e2ca895c4b02ab577",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-27T08:29:27.058836+00:00",
      "served_by": [
        "38.181.44.109:8089"
      ]
    },
    {
      "sha256": "88e35da3c687f1d0236aa6ddfe2fa71413a8515a27267d38dbb25771d672e28f",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-27T08:29:22.418982+00:00",
      "served_by": [
        "38.181.44.109:8089"
      ]
    },
    {
      "sha256": "fc2c533e24d747a8fb716eae793ab4feab00ad4aa71f4b24f762d0f678158866",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-27T08:29:16.348614+00:00",
      "served_by": [
        "38.181.44.109:8089"
      ]
    },
    {
      "sha256": "291a2ad63c0fa11fcdb34684c6f3e8073a94c1dd859c9919b484f288d617c3e3",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-09-27T08:29:10.513398+00:00",
      "served_by": [
        "38.181.44.109:8089"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "38.181.44.109",
      "ports": [
        8089
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 140227,
      "last_seen": "2026-10-15T00:11:02.940Z"
    }
  ]
}