ja4x certificate template
JA4X a373a9f83c6b…
234 convicted hosts presented certificates built from one template: the same certificate fields, in the same order. A shared template points to shared tooling.
a373a9f83c6b_7022c563de38_2e3757343cb0
feed checked
TLP:CLEAR
hosts
234
218 still listed
listings
240
networks
74
first seen
2026-08-24
Ports
The 8 ports with the most hosts, of 18.
Detection packs
Rules for this hub's 218 still-listed hosts, across all 3 pages of the list, updated with the archive. Withdrawn hosts can stay in these files for up to five minutes. Each listener gets one Suricata rule on its address and port, with the same rule ID in every file: load one set, or let suricata-update merge them. A newer file replaces an older one. YARA rules match file hashes only.
Cohorts
Hosts on this template that also share an issuer name and a not-before day: one issuance step run for several hosts. Kinship, not attribution.
…2ba2d6b69ddf_62790305f81dissuer “YR2”not before 2026-08-157 hosts…e608e30f2f69_f48cfc10d1afissuer “YR1”not before 2026-08-047 hosts…2ba2d6b69ddf_7bc9976065dfissuer “YR2”not before 2026-08-245 hosts…2ba2d6b69ddf_e12f91207641issuer “YR2”not before 2026-09-015 hosts…d76335874724_56c7709c9d5dissuer “YE2”not before 2026-10-034 hosts…dab21666fd67_086531083080issuer “YE1”not before 2026-08-194 hosts…2ba2d6b69ddf_10aaa1ebeacbissuer “YR2”not before 2026-08-263 hosts…2ba2d6b69ddf_219eb08a4a47issuer “YR2”not before 2026-08-113 hosts
Showing the 8 largest of 11. Every cohort is in the cohort directory.
Hosts · page 1 of 3
Newest first by first seen, so later pages shift as hosts are added. Archived hosts are included and marked.
186.244.245.148DarkSwordAS400619 · AROSSCLOUDlast confirmed 2026-10-30150.241.69.22MythicAS202831 · Packet Losslast confirmed 2026-10-29archived85.137.62.249DarkSwordAS43641 · SOLLUTIUM EU Sp z.o.olast confirmed 2026-10-2785.137.62.225DarkSwordAS43641 · SOLLUTIUM EU Sp z.o.olast confirmed 2026-10-3085.137.62.224DarkSwordAS43641 · SOLLUTIUM EU Sp z.o.olast confirmed 2026-10-2785.137.62.160DarkSwordAS43641 · SOLLUTIUM EU Sp z.o.olast confirmed 2026-10-3043.229.112.251DarkSwordAS138415 · Yancylast confirmed 2026-10-26208.87.202.232DarkSwordAS133199 · SonderCloudlast confirmed 2026-10-30202.146.222.253DarkSwordAS152194 · CTG Serverlast confirmed 2026-10-30192.253.229.191DarkSwordAS152194 · CTG Serverlast confirmed 2026-10-30192.162.199.251UnamAS214351 · FEMO IT SOLUTIONSlast confirmed 2026-10-30181.215.18.87DarkSwordAS212238 · Datacamplast confirmed 2026-10-30154.18.187.174DarkSwordAS44259 · Ultahostlast confirmed 2026-10-30130.94.67.4DarkSwordAS154177 · LIGHT NODElast confirmed 2026-10-30101.33.76.147DarkSwordAS132203 · Tencent Building, Kejizhongyi Avenuelast confirmed 2026-10-3031.77.168.155MythicAS218731 · Andris Jakovlevslast confirmed 2026-10-29archived45.205.28.105MythicAS402506 · Zenixcloudlast confirmed 2026-10-24archived213.111.176.26AdaptixAS9009 · M247 Europelast confirmed 2026-10-3052.246.183.133HavocAS8075 · Microsoftlast confirmed 2026-10-1569.8.133.228AdaptixAS212336 · ByteVirtlast confirmed 2026-10-30108.187.40.58Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-19108.187.40.4Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-19108.187.43.82Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-30108.187.40.40Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-19108.187.7.10Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-2069.8.133.232AdaptixAS212336 · ByteVirtlast confirmed 2026-10-30143.92.56.96Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-18223.26.52.38Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-14216.40.79.38HavocAS63023 · GTHostlast confirmed 2026-10-23202.79.169.203Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-1427.124.34.100Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-14131.123.43.22NimPlantAS200019 · ALEXHOSTlast confirmed 2026-10-30100.57.32.60Cobalt StrikeAS14618 · Amazon.comlast confirmed 2026-10-14144.202.41.43AdaptixAS20473 · The Constant Companylast confirmed 2026-10-30202.79.171.9Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-14143.92.56.244Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-14223.26.52.42Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-14143.92.56.103Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-18202.79.171.3Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-14157.137.215.66HavocAS31898 · Oraclelast confirmed 2026-10-3079.72.11.237MythicAS31898 · Oraclelast confirmed 2026-10-29archived207.56.28.208Flying EagleAS18186 · Nebula Globallast confirmed 2026-10-30179.199.199.19Flying EagleAS400619 · AROSSCLOUDlast confirmed 2026-10-08183.90.187.164Flying EagleAS400619 · AROSSCLOUDlast confirmed 2026-10-10154.222.16.253Flying EagleAS401701 · cognetcloudlast confirmed 2026-10-15108.187.40.53Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-19108.187.7.62Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-16192.163.169.152Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-19108.187.40.55Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-1945.194.36.5Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-30152.70.24.49HookAS31898 · Oraclelast confirmed 2026-10-3045.83.182.68MythicAS62005 · BlueVPS OUlast confirmed 2026-10-28archived192.163.167.57Diaoyu KejiAS138995 · Antbox Networkslast confirmed 2026-10-23149.202.227.107MythicAS16276 · OVHlast confirmed 2026-10-14archived35.222.43.104Flying EagleAS396982 · Googlelast confirmed 2026-10-1289.34.227.72AdaptixAS212336 · ByteVirtlast confirmed 2026-10-3069.8.133.42AdaptixAS212336 · ByteVirtlast confirmed 2026-10-3046.19.140.50Cobalt StrikeAS51852 · Private Layerlast confirmed 2026-10-30212.43.144.82Cobalt StrikeAS211381 · Podaon SIAlast confirmed 2026-10-12112.213.110.214DarkSwordAS152194 · CTG Serverlast confirmed 2026-10-29160.250.5.251AdaptixAS150895 · EZ TECHNOLOGY COMPANYlast confirmed 2026-10-2389.127.235.142MythicAS44925 · 1984 ehflast confirmed 2026-10-30189.24.79.183Flying EagleAS1014 · NetLab Globallast confirmed 2026-10-2347.87.56.189Flying EagleAS45102 · Alibaba (US) Technologylast confirmed 2026-09-2491.92.47.99Cobalt StrikeAS197170 · TechTieslast confirmed 2026-10-05168.222.254.242OverlordAS198550 · NODE HOSTlast confirmed 2026-10-0981.90.21.86OverlordAS198550 · NODE HOSTlast confirmed 2026-10-0134.202.211.94Cobalt StrikeAS14618 · Amazon.comlast confirmed 2026-10-15216.167.81.141OverlordAS2914 · NTT Americalast confirmed 2026-10-30141.11.164.79OverlordAS212238 · Datacamplast confirmed 2026-09-28143.92.51.145Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-30217.60.77.60PureRATAS203861 · Miteflux Technologieslast confirmed 2026-10-06192.163.167.21Diaoyu KejiAS138995 · Antbox Networkslast confirmed 2026-10-10107.174.14.102QuasarAS36352 · HostPapalast confirmed 2026-09-23archived45.150.109.209MythicAS62005 · BlueVPS OUlast confirmed 2026-09-17archived3.70.251.33MythicAS16509 · Amazon.comlast confirmed 2026-10-18archived38.76.188.210Flying EagleAS401701 · cognetcloudlast confirmed 2026-10-23108.187.6.81Diaoyu KejiAS138995 · Antbox Networkslast confirmed 2026-09-15108.187.37.252Diaoyu KejiAS138995 · Antbox Networkslast confirmed 2026-10-16207.56.138.80Flying EagleAS54801 · Zillion Networklast confirmed 2026-10-08207.56.28.189Flying EagleAS54801 · Zillion Networklast confirmed 2026-10-04192.163.168.3Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-18189.24.78.208Flying EagleAS979 · NetLab Globallast confirmed 2026-10-03154.213.177.139Flying EagleAS54801 · Zillion Networklast confirmed 2026-09-3064.90.31.240Flying EagleAS1014 · NetLab Globallast confirmed 2026-10-1839.109.101.47Flying EagleAS42960 · VH Globallast confirmed 2026-09-2364.89.161.171OverlordAS403005 · Blatantlast confirmed 2026-10-3020.118.221.53AdaptixAS8075 · Microsoftlast confirmed 2026-10-30103.244.227.157AdaptixAS16276 · OVHlast confirmed 2026-09-15192.163.168.132Flying EagleAS138995 · Antbox Networkslast confirmed 2026-09-23207.56.119.183Flying EagleAS54801 · Zillion Networklast confirmed 2026-10-1838.95.74.22Flying EagleAS1014 · NetLab Globallast confirmed 2026-10-30103.43.71.150OverlordAS136209 · CyberForestlast confirmed 2026-10-30139.99.144.141MythicAS16276 · OVHlast confirmed 2026-10-29archived108.187.37.250Diaoyu KejiAS138995 · Antbox Networkslast confirmed 2026-10-16108.187.6.166Diaoyu KejiAS138995 · Antbox Networkslast confirmed 2026-09-1545.192.219.30Diaoyu KejiAS138995 · Antbox Networkslast confirmed 2026-09-15108.187.6.157Diaoyu KejiAS138995 · Antbox Networkslast confirmed 2026-09-15193.134.208.222Diaoyu KejiAS139659 · LUCIDACLOUDlast confirmed 2026-09-1345.136.14.224Diaoyu KejiAS139659 · LUCIDACLOUDlast confirmed 2026-10-24
Listed in error?
These pages are generated by automated scanning. If a listing is wrong, email support@publicmosaic.com or see abuse & takedown. To exclude a network range from scanning, see opt-out.