{
  "field": "salt",
  "label": "salt",
  "value": "T9x8PKsTSLF4",
  "page": "https://publicmosaic.com/config/salt/VDl4OFBLc1RTTEY0",
  "generated": "2026-10-30T20:07:43.876Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 9,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "4bba03fd32a55a20753267212654e961828bb4c48fdc39895650f6db2562a8c3",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:09:21.536907+00:00",
      "served_by": [
        "8.218.114.253:35000"
      ]
    },
    {
      "sha256": "39f5f032c892800bb18a0c265cf1f19a228c52b8c5accb2a66146ae297498638",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:06:01.981774+00:00",
      "served_by": [
        "8.218.114.253:443"
      ]
    },
    {
      "sha256": "605a8087590eac49c421a7c0914869fad93a9cea8eeb976315a9ab0d262b97ef",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:56.023752+00:00",
      "served_by": [
        "8.218.114.253:45000"
      ]
    },
    {
      "sha256": "c5a188c889cf3d1e80a518d9391bf302a28f47c09381cedb5b8e38936d226375",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:54.413607+00:00",
      "served_by": [
        "8.218.114.253:59000"
      ]
    },
    {
      "sha256": "3d4292531ceef9cdbbea299e4ee94fc6f9ef94b84e0c3d250ba49ae627935f01",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:46.726039+00:00",
      "served_by": [
        "8.218.114.253:5900"
      ]
    },
    {
      "sha256": "a1b5215a02db5a069ca37b3fdf1552a23b866767c6867eebf7f58b734f6fcbb7",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:45.929908+00:00",
      "served_by": [
        "8.218.114.253:39000"
      ]
    },
    {
      "sha256": "b1b81824654c8efd24c7d7439b2eab84f427e21fb280812e02ba29ff3cfa9165",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:44.372644+00:00",
      "served_by": [
        "8.218.114.253:8443"
      ]
    },
    {
      "sha256": "2bdae0c8481c84dff1a618ac3db32f67f899314596658e88a19929d8dde0597f",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:43.508224+00:00",
      "served_by": [
        "8.218.114.253:53000"
      ]
    },
    {
      "sha256": "a03524664deb4e8d09e0da8265ea6afdd6c963fafc2bc80d0166304d08b2421b",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-06T00:05:42.652655+00:00",
      "served_by": [
        "8.218.114.253:80"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "8.218.114.253",
      "ports": [
        80,
        443,
        5900,
        8443,
        35000,
        39000,
        45000,
        53000,
        59000
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 45102,
      "last_seen": "2026-10-30T00:15:46.205Z"
    }
  ]
}