ja4x certificate template

JA4X a373a9f83c6b…

234 convicted hosts presented certificates built from one template: the same certificate fields, in the same order. A shared template points to shared tooling.

a373a9f83c6b_7022c563de38_2e3757343cb0

feed checked TLP:CLEAR
hosts 234 219 still listed
listings 240
networks 74
first seen 2026-08-24

Ports

:443196:20009:84439:74436:43214:51733:94432:54431

The 8 ports with the most hosts, of 18.

Detection packs

Rules for this hub's 219 still-listed hosts, across all 3 pages of the list, updated with the archive. Withdrawn hosts can stay in these files for up to five minutes. Each listener gets one Suricata rule on its address and port, with the same rule ID in every file: load one set, or let suricata-update merge them. A newer file replaces an older one. YARA rules match file hashes only.

Cohorts

Hosts on this template that also share an issuer name and a not-before day: one issuance step run for several hosts. Kinship, not attribution.

Showing the 8 largest of 11. Every cohort is in the cohort directory.

Hosts · page 2 of 3

Newest first by first seen, so later pages shift as hosts are added. Archived hosts are included and marked.

45.192.219.38Diaoyu KejiAS138995 · Antbox Networkslast confirmed 2026-09-15116.213.43.162Diaoyu KejiAS400619 · AROSSCLOUDlast confirmed 2026-10-30193.134.208.216Diaoyu KejiAS139659 · LUCIDACLOUDlast confirmed 2026-09-1343.98.165.114DarkSwordAS45102 · Alibaba (US) Technologylast confirmed 2026-10-3093.95.227.51MythicAS44925 · 1984 ehflast confirmed 2026-09-23archived207.56.28.225Flying EagleAS54801 · Zillion Networklast confirmed 2026-10-01archived45.192.167.143Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-125.231.106.237Flying EagleAS213495 · SERVITROlast confirmed 2026-10-1280.78.22.202AdaptixAS39287 · Materialismlast confirmed 2026-10-2120.220.105.236AdaptixAS8075 · Microsoftlast confirmed 2026-10-3040.67.146.12Cobalt StrikeAS8075 · Microsoftlast confirmed 2026-10-112.27.13.58OverlordAS198550 · NODE HOSTlast confirmed 2026-10-02113.31.118.180MythicAS4811 · China Telecom (Group)last confirmed 2026-10-3024.144.82.85MythicAS14061 · DigitalOceanlast confirmed 2026-10-29archived89.110.91.35AdaptixAS48282 · Hosting technologylast confirmed 2026-10-23165.227.87.199OverlordAS14061 · DigitalOceanlast confirmed 2026-09-152.26.124.191OverlordAS198550 · NODE HOSTlast confirmed 2026-10-0289.127.233.194MythicAS44925 · 1984 ehflast confirmed 2026-09-23archived45.92.158.150MythicAS8888 · xTomlast confirmed 2026-10-30104.234.172.64Flying EagleAS8796 · FASTNET DATAlast confirmed 2026-09-28103.112.99.63Flying EagleAS400619 · AROSSCLOUDlast confirmed 2026-10-23192.238.134.190Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-12108.187.7.167Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-29112.121.166.90Flying EagleAS45753 · Netseclast confirmed 2026-10-30108.187.43.157Flying EagleAS138995 · Antbox Networkslast confirmed 2026-09-2145.192.226.12Flying EagleAS138995 · Antbox Networkslast confirmed 2026-09-2745.192.214.41Flying EagleAS138995 · Antbox Networkslast confirmed 2026-09-27194.100.215.101PyramidAS16086 · DNA Oyjlast confirmed 2026-10-3052.4.177.142Cobalt StrikeAS14618 · Amazon.comlast confirmed 2026-09-103.222.180.89Cobalt StrikeAS14618 · Amazon.comlast confirmed 2026-10-2223.227.196.108Cobalt StrikeAS29802 · HIVELOCITYlast confirmed 2026-09-13114.67.181.248DeimosC2AS58466 · CHINANET Guangdong province networklast confirmed 2026-09-2187.251.75.231UnamAS213010 · Gening Nikita Dmitrievichlast confirmed 2026-09-0787.251.75.201UnamAS213010 · Gening Nikita Dmitrievichlast confirmed 2026-10-0980.66.76.203UnamAS213010 · Gening Nikita Dmitrievichlast confirmed 2026-10-30185.33.86.141AdaptixAS202015 · HZ Hostinglast confirmed 2026-10-04107.175.87.234AdaptixAS36352 · HostPapalast confirmed 2026-09-14138.197.84.20OverlordAS14061 · DigitalOceanlast confirmed 2026-09-0691.196.162.234OverlordAS203273 · NetCrafters OUlast confirmed 2026-09-2164.90.9.104OverlordAS979 · NetLab Globallast confirmed 2026-09-06archived45.61.176.17OverlordAS14956 · RouterHostinglast confirmed 2026-09-24207.56.138.140Flying EagleAS54801 · Zillion Networklast confirmed 2026-10-08207.56.119.200Flying EagleAS54801 · Zillion Networklast confirmed 2026-09-07207.56.119.96Flying EagleAS54801 · Zillion Networklast confirmed 2026-10-19207.56.119.123Flying EagleAS54801 · Zillion Networklast confirmed 2026-09-15207.56.119.48Flying EagleAS18186 · Nebula Globallast confirmed 2026-10-30207.56.138.49Flying EagleAS54801 · Zillion Networklast confirmed 2026-09-10207.56.119.194Flying EagleAS54801 · Zillion Networklast confirmed 2026-10-18207.56.138.97Flying EagleAS54801 · Zillion Networklast confirmed 2026-09-10207.56.119.139Flying EagleAS18186 · Nebula Globallast confirmed 2026-10-30207.56.119.80Flying EagleAS54801 · Zillion Networklast confirmed 2026-09-07207.56.119.92Flying EagleAS54801 · Zillion Networklast confirmed 2026-09-12207.56.119.82Flying EagleAS54801 · Zillion Networklast confirmed 2026-09-07207.56.30.219Flying EagleAS54801 · Zillion Networklast confirmed 2026-10-01archived207.56.119.21Flying EagleAS54801 · Zillion Networklast confirmed 2026-09-15207.56.30.198Flying EagleAS54801 · Zillion Networklast confirmed 2026-10-15207.56.119.35Flying EagleAS54801 · Zillion Networklast confirmed 2026-09-07207.56.28.84Flying EagleAS54801 · Zillion Networklast confirmed 2026-10-03207.56.28.76Flying EagleAS54801 · Zillion Networklast confirmed 2026-10-03192.238.134.187Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-12156.225.26.254Flying EagleAS401701 · cognetcloudlast confirmed 2026-10-30128.14.14.188Flying EagleAS21859 · Zenlayerlast confirmed 2026-09-05112.121.166.92Flying EagleAS45753 · Netseclast confirmed 2026-10-30107.173.63.224Flying EagleAS20278 · Nexeon Technologieslast confirmed 2026-09-13103.249.105.43Flying EagleAS21859 · Zenlayerlast confirmed 2026-09-09103.171.34.111Flying EagleAS932 · XNNETlast confirmed 2026-09-2845.194.36.21Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-3027.124.43.145Flying EagleAS152194 · CTG Serverlast confirmed 2026-09-04202.95.22.205BTMOBAS152194 · CTG Serverlast confirmed 2026-09-21179.43.175.26BTMOBAS51852 · Private Layerlast confirmed 2026-10-30108.187.37.185Diaoyu KejiAS138995 · Antbox Networkslast confirmed 2026-08-3174.52.15.253Diaoyu KejiAS22160 · INIsmart Technologylast confirmed 2026-09-22144.31.106.168Chaos RATAS210457 · Kyonix Networkslast confirmed 2026-09-15192.229.116.34Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-30202.181.26.220Flying EagleAS55933 · Cloudielast confirmed 2026-09-17192.252.178.206Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-02192.238.162.10Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-30192.238.162.8Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-30192.229.116.19Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-30192.163.168.135Flying EagleAS138995 · Antbox Networkslast confirmed 2026-09-24192.163.168.6Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-18156.225.18.58Flying EagleAS401696 · cognetcloudlast confirmed 2026-09-11154.213.177.154Flying EagleAS54801 · Zillion Networklast confirmed 2026-09-30143.92.36.171Flying EagleAS152194 · CTG Serverlast confirmed 2026-09-12149.88.73.101Flying EagleAS401696 · cognetcloudlast confirmed 2026-10-08143.92.36.176Flying EagleAS152194 · CTG Serverlast confirmed 2026-09-12143.92.32.198Flying EagleAS152194 · CTG Serverlast confirmed 2026-09-02108.187.43.87Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-14108.187.1.190Flying EagleAS138995 · Antbox Networkslast confirmed 2026-10-08108.165.255.26Flying EagleAS149440 · Evoxt Sdn. Bhdlast confirmed 2026-10-03108.165.147.100Flying EagleAS149440 · Evoxt Sdn. Bhdlast confirmed 2026-09-07103.249.105.107Flying EagleAS21859 · Zenlayerlast confirmed 2026-09-05103.40.113.254Flying EagleAS132839 · POWER LINE DATACENTERlast confirmed 2026-09-11103.249.105.106Flying EagleAS21859 · Zenlayerlast confirmed 2026-09-05103.40.113.253Flying EagleAS132839 · POWER LINE DATACENTERlast confirmed 2026-09-11103.40.113.251Flying EagleAS132839 · POWER LINE DATACENTERlast confirmed 2026-09-11103.52.152.203Flying EagleAS401701 · cognetcloudlast confirmed 2026-10-30103.40.113.250Flying EagleAS132839 · POWER LINE DATACENTERlast confirmed 2026-09-1196.126.179.22Flying EagleAS149440 · Evoxt Sdn. Bhdlast confirmed 2026-09-2489.169.52.109Flying EagleAS210644 · AEZA GROUPlast confirmed 2026-09-21