ja4x certificate template
JA4X 2166164053c1…
421 convicted hosts presented certificates built from one template: the same certificate fields, in the same order. A shared template points to shared tooling.
2166164053c1_2166164053c1_30d204a01551
feed checked
TLP:CLEAR
hosts
421
418 still listed
listings
500
networks
123
first seen
2026-08-22
Ports
The 8 ports with the most hosts, of 145.
Detection packs
Rules for this hub's 418 still-listed hosts, across all 5 pages of the list, updated with the archive. Withdrawn hosts can stay in these files for up to five minutes. Each listener gets one Suricata rule on its address and port, with the same rule ID in every file: load one set, or let suricata-update merge them. A newer file replaces an older one. YARA rules match file hashes only.
Cohorts
Hosts on this template that also share an issuer name and a not-before day: one issuance step run for several hosts. Kinship, not attribution.
…60e4afe8b719_4c8172b9dba5issuer “Major Cobalt Strike”not before 2022-08-3054 hosts…1ea7576c1fb6_2696a0aafa22issuer “*.microsoft.com”not before 2023-07-0415 hosts…8e5342dd7e62_de0c1690809eissuer “www.infoworld.com”not before 2023-02-147 hosts…60e4afe8b719_6000307df700issuer “Major Cobalt Strike”not before 2026-09-025 hosts…60e4afe8b719_db3685ee8f85issuer “Major Cobalt Strike”not before 2019-06-145 hosts…5aacc2522268_06e45b4dfbddissuer “Pwn3rs Striked”not before 2026-10-223 hosts…5aacc2522268_1e61b62a8c0aissuer “Pwn3rs Striked”not before 2026-09-033 hosts…60e4afe8b719_2bacd6e5d1a9issuer “Major Cobalt Strike”not before 2026-07-203 hosts
Showing the 8 largest of 12. Every cohort is in the cohort directory.
Hosts · page 1 of 5
Newest first by first seen, so later pages shift as hosts are added. Archived hosts are included and marked.
49.232.42.116Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3064.118.154.116Cobalt StrikeAS138997 · Eons Data Communicationslast confirmed 2026-10-3092.222.50.154Cobalt StrikeAS16276 · OVHlast confirmed 2026-10-3023.155.44.134Cobalt StrikeAS395904 · Servurylast confirmed 2026-10-3020.206.160.57Cobalt StrikeAS8075 · Microsoftlast confirmed 2026-10-30168.222.97.10Cobalt StrikeAS399486 · 12651980 CANADAlast confirmed 2026-10-30139.196.201.58Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-3039.100.64.125Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-3020.109.163.207Cobalt StrikeAS8075 · Microsoftlast confirmed 2026-10-30175.178.126.48Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30117.72.220.70Cobalt StrikeAS141679 · China Telecom Beijing Tianjin Hebei B…last confirmed 2026-10-30116.62.174.16Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-3091.92.242.137Cobalt StrikeAS202412 · Omegatechlast confirmed 2026-10-2785.121.5.211Cobalt StrikeAS200019 · ALEXHOSTlast confirmed 2026-10-308.222.166.74Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-10-3054.164.24.73Cobalt StrikeAS14618 · Amazon.comlast confirmed 2026-10-3051.159.194.10Cobalt StrikeAS12876 · Scalewaylast confirmed 2026-10-3038.76.219.253Cobalt StrikeAS401701 · cognetcloudlast confirmed 2026-10-3038.76.199.183Cobalt StrikeAS401701 · cognetcloudlast confirmed 2026-10-2738.207.160.73Cobalt StrikeAS967 · VMISSlast confirmed 2026-10-30212.83.61.209Cobalt StrikeAS47447 · 23Mlast confirmed 2026-10-30193.26.115.35Cobalt StrikeAS210558 · 1337 Serviceslast confirmed 2026-10-30192.81.213.56Cobalt StrikeAS14061 · DigitalOceanlast confirmed 2026-10-30192.3.251.109Cobalt StrikeAS36352 · HostPapalast confirmed 2026-10-30192.253.229.133Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-30185.122.171.107Cobalt StrikeAS214927 · PSB HOSTINGlast confirmed 2026-10-2918.143.76.7Cobalt StrikeAS16509 · Amazon.comlast confirmed 2026-10-27178.16.53.86Cobalt StrikeAS202412 · Omegatechlast confirmed 2026-10-27177.4.8.125Cobalt StrikeAS140227 · Hong Kong Communications Internationa…last confirmed 2026-10-30157.254.167.105Cobalt StrikeAS17378 · TierPointlast confirmed 2026-10-30156.240.109.21Cobalt StrikeAS140227 · Hong Kong Communications Internationa…last confirmed 2026-10-30156.224.79.193Cobalt StrikeAS61112 · AKILElast confirmed 2026-10-30146.19.216.170Cobalt StrikeAS134677 · Dromatics Systems Ptelast confirmed 2026-10-28146.19.216.163Cobalt StrikeAS134677 · Dromatics Systems Ptelast confirmed 2026-10-28144.126.207.108Cobalt StrikeAS14061 · DigitalOceanlast confirmed 2026-10-30134.122.204.168Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-30116.206.93.36Cobalt StrikeAS51847 · Nearoutelast confirmed 2026-10-30110.42.225.241Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30106.52.184.157Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30104.234.26.31Cobalt StrikeAS134677 · Dromatics Systems Ptelast confirmed 2026-10-28103.253.42.205Cobalt StrikeAS133398 · Tele Asialast confirmed 2026-10-30103.204.174.195Cobalt StrikeAS134835 · Starry Networklast confirmed 2026-10-3045.227.253.132Cobalt StrikeAS209272 · Alviva Holdinglast confirmed 2026-10-3045.207.8.36Cobalt StrikeAS140227 · Hong Kong Communications Internationa…last confirmed 2026-10-30217.194.133.89Cobalt StrikeAS133199 · SonderCloudlast confirmed 2026-10-28124.223.22.132Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3046.19.140.50Cobalt StrikeAS51852 · Private Layerlast confirmed 2026-10-30192.255.248.153Cobalt StrikeAS36352 · HostPapalast confirmed 2026-10-29185.184.70.41Cobalt StrikeAS49683 · MASSIVEGRIDlast confirmed 2026-10-30156.254.20.48Cobalt StrikeAS153706 · Stack Network Sdn. Bhdlast confirmed 2026-10-30156.254.20.47Cobalt StrikeAS153706 · Stack Network Sdn. Bhdlast confirmed 2026-10-30153.80.242.105Cobalt StrikeAS215540 · GLOBAL CONNECTIVITY SOLUTIONS LLPlast confirmed 2026-10-27149.104.31.151Cobalt StrikeAS139659 · LUCIDACLOUDlast confirmed 2026-10-26118.126.95.117Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30154.94.237.203Cobalt StrikeAS401701 · cognetcloudlast confirmed 2026-10-2538.190.224.38Cobalt StrikeAS133199 · SonderCloudlast confirmed 2026-10-248.156.80.127Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-25154.12.86.154Cobalt StrikeAS401696 · cognetcloudlast confirmed 2026-10-30124.220.22.82Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3037.60.141.43Cobalt StrikeAS213438 · ColocaTellast confirmed 2026-10-301.94.100.198Cobalt StrikeAS55990 · Huawei Cloud Service data centerlast confirmed 2026-10-24119.45.236.76Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-24103.117.136.32Cobalt StrikeAS401696 · cognetcloudlast confirmed 2026-10-1947.109.103.59VShellAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-26140.143.193.143Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3045.130.147.87Cobalt StrikeAS49392 · LLC Baxetlast confirmed 2026-10-19106.12.61.28Cobalt StrikeAS38365 · Beijing Baidu Netcom Science and Tech…last confirmed 2026-10-3047.97.206.32Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-301.117.74.144Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3064.177.112.233Cobalt StrikeAS20473 · The Constant Companylast confirmed 2026-10-3047.122.111.172Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-14192.3.166.110Cobalt StrikeAS36352 · HostPapalast confirmed 2026-10-3082.165.128.60Cobalt StrikeAS8560 · IONOS SElast confirmed 2026-10-1352.205.177.11Cobalt StrikeAS14618 · Amazon.comlast confirmed 2026-10-14106.54.44.181Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-263.98.91.44Cobalt StrikeAS16509 · Amazon.comlast confirmed 2026-10-23198.46.143.15Cobalt StrikeAS36352 · HostPapalast confirmed 2026-10-11150.242.98.51Cobalt StrikeAS133774 · Fuzhoulast confirmed 2026-10-2418.220.4.102Cobalt StrikeAS16509 · Amazon.comlast confirmed 2026-10-30117.158.148.164Cobalt StrikeAS24445 · Henan Mobile Communicationslast confirmed 2026-10-308.148.241.203Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-11178.16.53.210Cobalt StrikeAS202412 · Omegatechlast confirmed 2026-10-1285.175.101.203Cobalt StrikeAS25490 · PJSC Rostelecomlast confirmed 2026-10-30123.56.124.3Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-3093.185.165.104Cobalt StrikeAS201670 · S.C. INFOTECH-GRUPlast confirmed 2026-10-2947.109.23.77Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30104.143.204.78Cobalt StrikeAS26383 · Baxet Grouplast confirmed 2026-10-15101.35.217.145Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30120.48.18.226Cobalt StrikeAS38365 · Beijing Baidu Netcom Science and Tech…last confirmed 2026-10-30106.52.8.22Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-0638.76.190.209Cobalt StrikeAS401701 · cognetcloudlast confirmed 2026-10-30123.57.146.34Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-20106.75.7.239Cobalt StrikeAS4808 · China Unicom Beijing Province Networklast confirmed 2026-10-3089.125.66.96Cobalt StrikeAS212477 · RoyaleHosting BVlast confirmed 2026-09-308.166.128.186Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-3064.176.62.60Cobalt StrikeAS20473 · The Constant Companylast confirmed 2026-10-2159.110.28.230Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-3049.235.158.141Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3047.98.124.244Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-3047.115.229.163Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30
Listed in error?
These pages are generated by automated scanning. If a listing is wrong, email support@publicmosaic.com or see abuse & takedown. To exclude a network range from scanning, see opt-out.