Public Mosaic C2 indicators

ja4x certificate template

JA4X 2166164053c1…

421 convicted hosts presented certificates built from one template: the same certificate fields, in the same order. A shared template points to shared tooling.

2166164053c1_2166164053c1_30d204a01551

feed checked 2026-10-30 18:37 UTC TLP:CLEAR

hosts 421 418 still listed

listings 500

networks 123

first seen 2026-08-22

Ports

:50050185:44398:844326:1844314:88884:370014:3003:44433

The 8 ports with the most hosts, of 145.

Detection packs

Rules for this hub's 418 still-listed hosts, across all 5 pages of the list, updated with the archive. Withdrawn hosts can stay in these files for up to five minutes. Each listener gets one Suricata rule on its address and port, with the same rule ID in every file: load one set, or let suricata-update merge them. A newer file replaces an older one. YARA rules match file hashes only.

Suricata rules JA4X allowlist (JSON) View in the live feed

Cohorts

Hosts on this template that also share an issuer name and a not-before day: one issuance step run for several hosts. Kinship, not attribution.

…60e4afe8b719_4c8172b9dba5issuer “Major Cobalt Strike”not before 2022-08-3054 hosts …1ea7576c1fb6_2696a0aafa22issuer “*.microsoft.com”not before 2023-07-0415 hosts …8e5342dd7e62_de0c1690809eissuer “www.infoworld.com”not before 2023-02-147 hosts …60e4afe8b719_6000307df700issuer “Major Cobalt Strike”not before 2026-09-025 hosts …60e4afe8b719_db3685ee8f85issuer “Major Cobalt Strike”not before 2019-06-145 hosts …5aacc2522268_06e45b4dfbddissuer “Pwn3rs Striked”not before 2026-10-223 hosts …5aacc2522268_1e61b62a8c0aissuer “Pwn3rs Striked”not before 2026-09-033 hosts …60e4afe8b719_2bacd6e5d1a9issuer “Major Cobalt Strike”not before 2026-07-203 hosts

Showing the 8 largest of 12. Every cohort is in the cohort directory.

Hosts · page 2 of 5

Newest first by first seen, so later pages shift as hosts are added. Archived hosts are included and marked.

47.104.219.81Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-09 43.136.92.170Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-07 43.108.84.25Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-10-30 156.254.20.46Cobalt StrikeAS153706 · Stack Network Sdn. Bhdlast confirmed 2026-10-30 156.239.224.131Cobalt StrikeAS154321 · CORENET CLOUD SDN. BHDlast confirmed 2026-10-11 120.53.19.157Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-06 114.66.27.110Cobalt StrikeAS136188 · NINGBO, ZHEJIANG Province, P.R.Chinalast confirmed 2026-10-01 54.162.178.249Cobalt StrikeAS14618 · Amazon.comlast confirmed 2026-09-27 42.51.44.173Cobalt StrikeAS56005 · Zhengzhou Fastidc Technologylast confirmed 2026-10-05 23.238.82.42Cobalt StrikeAS36352 · HostPapalast confirmed 2026-10-30 49.233.181.236Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-23 209.38.82.85Cobalt StrikeAS14061 · DigitalOceanlast confirmed 2026-10-13 101.34.208.175Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-06 129.204.11.247Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-02 82.156.224.184Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-25 82.156.186.185Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 141.255.162.236Cobalt StrikeAS51852 · Private Layerlast confirmed 2026-09-26 123.207.214.140Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 85.11.182.104Cobalt StrikeAS209101 · IP Vendettalast confirmed 2026-10-30 175.124.145.102Cobalt StrikeAS9318 · SK Broadband Colast confirmed 2026-10-26 203.98.68.25Cobalt StrikeAS215117 · HosterDaddy Privatelast confirmed 2026-10-30 106.13.189.138Cobalt StrikeAS38365 · Beijing Baidu Netcom Science and Tech…last confirmed 2026-10-30 203.98.68.24Cobalt StrikeAS215117 · HosterDaddy Privatelast confirmed 2026-10-30 111.230.37.219Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-06 82.156.242.28Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-06 130.94.12.21Cobalt StrikeAS154177 · LIGHT NODElast confirmed 2026-09-24 123.207.246.48Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23 176.123.5.4Cobalt StrikeAS200019 · ALEXHOSTlast confirmed 2026-10-30 64.118.153.107Cobalt StrikeAS138997 · Eons Data Communicationslast confirmed 2026-10-16 93.188.163.199QuasarAS47583 · Hostinger Internationallast confirmed 2026-09-23archived 157.254.167.61Cobalt StrikeAS17378 · TierPointlast confirmed 2026-10-27 124.221.46.243Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-23 178.62.229.37Cobalt StrikeAS14061 · DigitalOceanlast confirmed 2026-09-28 45.33.67.128Cobalt StrikeAS63949 · Akamai Connected Cloudlast confirmed 2026-09-22 47.251.166.153Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-09-22 114.215.190.105Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30 47.254.68.68Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-09-22 45.203.213.168Cobalt StrikeAS140869 · Turing Grouplast confirmed 2026-10-02 154.219.101.56Cobalt StrikeAS401701 · cognetcloudlast confirmed 2026-10-01 149.30.232.29Cobalt StrikeAS133199 · SonderCloudlast confirmed 2026-09-21 106.14.36.132Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-18 36.255.97.162Cobalt StrikeAS403005 · Blatantlast confirmed 2026-10-15 20.231.59.220Cobalt StrikeAS8075 · Microsoftlast confirmed 2026-10-12 106.53.168.218Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-06 45.192.248.45Cobalt StrikeAS61112 · AKILElast confirmed 2026-10-30 59.110.153.133Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-13 114.215.188.153Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-18 121.40.37.49Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-24 35.212.136.13Cobalt StrikeAS15169 · Googlelast confirmed 2026-09-22 111.228.5.127Cobalt StrikeAS141679 · China Telecom Beijing Tianjin Hebei B…last confirmed 2026-10-30 65.49.233.218Cobalt StrikeAS25820 · IT7 Networkslast confirmed 2026-09-10 38.76.183.197Cobalt StrikeAS401701 · cognetcloudlast confirmed 2026-10-30 8.163.59.20Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30 38.147.185.54Cobalt StrikeAS42960 · VH Globallast confirmed 2026-09-17 8.146.228.220Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-10 83.229.123.249Cobalt StrikeAS139659 · LUCIDACLOUDlast confirmed 2026-09-15 8.145.61.81Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-11 149.50.116.109Cobalt StrikeAS201814 · MEVSPACE sp. z o.olast confirmed 2026-10-05 192.36.39.61Cobalt StrikeAS9009 · M247 Europelast confirmed 2026-09-28 64.118.152.195Cobalt StrikeAS138997 · Eons Data Communicationslast confirmed 2026-09-11 39.96.125.59Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-11 42.193.123.90Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-10 193.37.69.43Cobalt StrikeAS213194 · Nechaev Dmitry Sergeevichlast confirmed 2026-10-28 178.32.16.167Cobalt StrikeAS16276 · OVHlast confirmed 2026-09-15 59.110.228.141Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30 47.94.56.71Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30 47.90.209.157Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-09-13 180.184.46.116Cobalt StrikeAS137718 · Beijing Volcano Engine Technologylast confirmed 2026-09-19 118.25.100.71Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-11 120.77.254.122Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-08 165.99.43.101Cobalt StrikeAS401701 · cognetcloudlast confirmed 2026-09-17 114.132.216.210Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-16 106.55.47.62Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-21 106.55.46.152Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-29 39.96.201.230Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30 81.71.7.250Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 103.204.174.212Cobalt StrikeAS134835 · Starry Networklast confirmed 2026-09-09 47.236.56.15Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-10-01 103.119.47.222Cobalt StrikeAS135330 · ADCDATA.COMlast confirmed 2026-09-29 47.100.63.132Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-15 109.236.50.145Cobalt StrikeAS60781 · LeaseWeb Netherlandslast confirmed 2026-09-27 64.118.154.25Cobalt StrikeAS138997 · Eons Data Communicationslast confirmed 2026-09-12 158.101.136.18Cobalt StrikeAS31898 · Oraclelast confirmed 2026-10-30 47.251.177.187Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-10-30 124.223.188.23Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 155.94.154.152Cobalt StrikeAS36352 · HostPapalast confirmed 2026-09-30 120.55.93.58Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30 39.106.205.6Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-15 8.141.94.69Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30 185.28.119.238Cobalt StrikeAS62005 · BlueVPS OUlast confirmed 2026-10-30 161.97.185.123Cobalt StrikeAS51167 · Contabolast confirmed 2026-10-30 151.245.195.160Cobalt StrikeAS212238 · Datacamplast confirmed 2026-10-30 43.138.225.166Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 116.204.119.99Cobalt StrikeAS55990 · Huawei Cloud Service data centerlast confirmed 2026-10-30 45.87.53.6Cobalt StrikeAS142637 · STAR FAX GROUP PTElast confirmed 2026-10-26 182.255.91.197Cobalt StrikeAS35916 · MULTACOMlast confirmed 2026-09-15 156.225.18.45Cobalt StrikeAS401696 · cognetcloudlast confirmed 2026-09-11 183.60.226.2Cobalt StrikeAS134763 · CHINANET Guangdong province networklast confirmed 2026-10-30 167.160.189.206Cobalt StrikeAS36352 · HostPapalast confirmed 2026-10-30 157.230.253.244Cobalt StrikeAS14061 · DigitalOceanlast confirmed 2026-10-30

Listed in error?

These pages are generated by automated scanning. If a listing is wrong, email support@publicmosaic.com or see abuse & takedown. To exclude a network range from scanning, see opt-out.