shared issuance template

Cohort …60e4afe8b719_4c8172b9dba5

The feed listed 54 hosts on 20 networks whose certificates share one template, issuer name and not-before date. This archive holds 54 hosts whose certificates match that template.

2166164053c1_2166164053c1_30d204a01551_60e4afe8b719_4c8172b9dba5

TLP:CLEAR

Read this first

Kinship, not attribution. These certificates came from one issuance step: the same generator, run the same way, on the same day. That fits one operator running several servers, and equally several customers of one panel provider whose generator stamps every customer’s certificate alike. Investigate the hosts together; a cohort does not say who runs them.

Template

issuer nameMajor Cobalt Strike
issuer organisationcobaltstrike
not before2022-08-30
in the feed54 listed hosts on 20 networks, as last carried
in this archive54 hosts on 20 networks, 54 still listed
familiesCobalt Strike
first seen → last seen2026-08-23 → 2026-10-30
last carried2026-10-30 17:37 UTC

The names above are what the certificate claims, not proof that any host here owns them. Treat a familiar name as a likely impersonation.

Many unrelated deployments of one tool share a JA4X. A cohort adds the issuer name and not-before date, which points to one issuance step run for several hosts.

Members in this archive · 54

Hosts in this archive whose certificates match the template, issuer name and not-before date. Archived hosts are included and marked.

139.196.201.58Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30192.3.251.109Cobalt StrikeAS36352 · HostPapalast confirmed 2026-10-30192.253.229.133Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-30146.19.216.170Cobalt StrikeAS134677 · Dromatics Systems Ptelast confirmed 2026-10-28146.19.216.163Cobalt StrikeAS134677 · Dromatics Systems Ptelast confirmed 2026-10-28134.122.204.168Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-30124.223.22.132Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30185.184.70.41Cobalt StrikeAS49683 · MASSIVEGRIDlast confirmed 2026-10-30175.124.145.102Cobalt StrikeAS9318 · SK Broadband Colast confirmed 2026-10-26156.254.20.48Cobalt StrikeAS153706 · Stack Network Sdn. Bhdlast confirmed 2026-10-30156.254.20.47Cobalt StrikeAS153706 · Stack Network Sdn. Bhdlast confirmed 2026-10-30154.94.237.203Cobalt StrikeAS401701 · cognetcloudlast confirmed 2026-10-25106.12.61.28Cobalt StrikeAS38365 · Beijing Baidu Netcom Science and Tech…last confirmed 2026-10-30123.56.124.3Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30120.48.18.226Cobalt StrikeAS38365 · Beijing Baidu Netcom Science and Tech…last confirmed 2026-10-30154.219.101.56Cobalt StrikeAS401701 · cognetcloudlast confirmed 2026-10-0147.98.124.244Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30156.254.20.46Cobalt StrikeAS153706 · Stack Network Sdn. Bhdlast confirmed 2026-10-30111.228.5.127Cobalt StrikeAS141679 · China Telecom Beijing Tianjin Hebei B…last confirmed 2026-10-30111.230.37.219Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-0682.156.242.28Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-06114.215.190.105Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-3060.247.206.23Cobalt StrikeAS38283 · CHINANET SiChuan Telecom Internet Dat…last confirmed 2026-10-30121.40.37.49Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-2447.90.209.157Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-09-13180.184.46.116Cobalt StrikeAS137718 · Beijing Volcano Engine Technologylast confirmed 2026-09-1943.243.73.187Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-29134.122.203.247Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-168.148.201.210Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-2564.7.199.195Cobalt StrikeAS399629 · BL Networkslast confirmed 2026-10-17107.148.237.76Cobalt StrikeAS398478 · PEG TECHlast confirmed 2026-10-30103.12.148.37Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-2947.93.243.161Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-3043.136.19.18Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3047.95.192.147Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-22139.196.111.118Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-2939.97.57.155Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-21124.222.57.34Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-03150.158.102.111Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-10122.51.16.188Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-08-2847.94.224.229Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-08124.222.209.39Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-158.137.169.91Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30175.27.214.144Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-08-2895.182.114.29Cobalt StrikeAS56971 · CGI GLOBALlast confirmed 2026-10-1147.120.32.72Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-3042.194.241.92Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-06210.56.48.227Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-09-0220.187.120.42Cobalt StrikeAS8075 · Microsoftlast confirmed 2026-09-08180.76.141.175Cobalt StrikeAS38365 · Beijing Baidu Netcom Science and Tech…last confirmed 2026-09-15111.228.55.96Cobalt StrikeAS141679 · China Telecom Beijing Tianjin Hebei B…last confirmed 2026-09-02113.250.188.15Cobalt StrikeAS134420 · Chongqing Telecomlast confirmed 2026-10-30106.75.249.202Cobalt StrikeAS17621 · China Unicom Shanghai networklast confirmed 2026-09-021.15.76.39Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-06