JA3 Fingerprints
You can find further information about the JA3 fingerprint 1aee0238942d453d679fc1e37a303387, including the corresponding malware samples as well as the associated botnet C&Cs.
Database Entry
| JA3 Fingerprint: | 1aee0238942d453d679fc1e37a303387 |
|---|---|
| First seen: | 2018-05-13 01:59:49 UTC |
| Last seen: | 2021-07-30 12:27:07 UTC |
| Status: | Blacklisted |
| Malware samples: | 750 |
| Destination IPs: | 207 |
| Malware: | Tofsee  |
| Listing date: | 2020-01-09 14:24:31 |
Malware Samples
The table below documents all malware samples associated with this JA3 Fingerprint.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Botnet C&C (IP:port) |
|---|---|---|---|
| 2025-08-31 20:30:38 | 3e7d3c9bb493b67b401c03cf429f71fd | n/a | 122.188.44.50:443 |
| 2025-08-16 07:19:24 | ae07ea700947df1802f32a32377a4289 | n/a | 51.158.129.110:443 |
| 2025-08-11 22:14:08 | bdb609bbd1ac3cc812c05f3f78d4f3b6 | n/a | 125.141.216.26:5500 |
| 2025-08-11 21:27:54 | b9008cf60f9070895189db5380544d52 | n/a | 51.158.227.48:443 |
| 2025-08-10 13:33:28 | bc839966ad2f8372d87a36121de19cd8 | n/a | 125.141.216.26:5500 |
| 2025-08-09 08:09:43 | cdc1419cc5abe7cdcf3e194c82f1d867 | n/a | 218.60.56.12:443 |
| 2025-08-05 13:35:30 | 720c8ada73b19af7d9b9db89e01ea4d3 | n/a | 125.141.216.26:5500 |
| 2025-08-03 16:29:46 | ac7738552b72041d7ea468c92e3e2dfe | n/a | 125.141.216.26:5500 |
| 2025-08-03 09:38:15 | 80c6ec582fc9840cbc44065ba1ff92e1 | n/a | 125.141.216.26:5500 |
| 2025-07-17 05:16:43 | 155cbf2e0ff6fd4e4b3909d90676bd76 | n/a | 123.57.251.46:443 |
| 2025-07-10 08:23:59 | b425200ea540a6f80f3bd1204e8408aa | n/a | 51.158.227.48:443 |
| 2025-07-09 12:30:57 | e6fbbd0dd519caf3fe0cd145045a0994 | n/a | 125.141.216.26:5500 |
| 2025-07-08 12:04:06 | 517f62513d8db3948d702abaa5f1a391 | n/a | 125.141.216.26:5500 |
| 2025-07-07 13:05:11 | 505da9af06cac388a8cf2166d9351ad1 | n/a | 125.141.216.26:5500 |
| 2025-07-05 11:21:48 | bbe32f888967b4aa464f7b9ad2cab37d | n/a | 3.126.133.39:443 |
| 2025-07-04 13:50:36 | 5391844215d337576c4f3a0222fef33b | n/a | 125.141.216.26:5500 |
| 2025-06-28 13:54:31 | a38d15b12f56f613b2cdf51339453e2c | n/a | 125.141.216.26:5500 |
| 2025-05-21 08:06:37 | 8c81484012664a62d7b5427c4d0f800a | n/a | 149.154.167.220:443 |
| 2025-05-21 08:06:36 | 8c81484012664a62d7b5427c4d0f800a | n/a | 172.66.40.4:443 |
| 2025-05-21 08:06:36 | 8c81484012664a62d7b5427c4d0f800a | n/a | 172.67.134.51:443 |
| 2025-05-21 08:06:36 | 8c81484012664a62d7b5427c4d0f800a | n/a | 208.98.35.219:443 |
| 2025-05-21 08:06:36 | 8c81484012664a62d7b5427c4d0f800a | n/a | 206.47.176.220:443 |
| 2025-02-24 06:13:21 | a96ee0d1f426883e2d5687511dcda210 | n/a | 51.158.227.48:443 |
| 2024-12-14 08:26:21 | 337b581ce97ff46791c7fbdc638f034b | n/a | 51.158.129.110:443 |
| 2024-09-07 17:32:17 | 8266b6589e4fb71ecf49f3297a2d4fb0 | n/a | 51.158.227.48:443 |
| 2024-08-22 11:39:26 | 5e25a2523595f81cdfa897d932514430 | n/a | 58.72.96.202:7000 |
| 2024-08-03 06:17:04 | 12b0ed43e545c4257b6d7d863cc870d1 | n/a | 51.158.227.48:443 |
| 2024-07-05 15:29:07 | 297e0d47ae47dc7e8f4260414bb90edd | n/a | 51.158.129.110:443 |
| 2024-05-11 18:46:05 | 3f9fad1437e285e5fe6085420aa455bd | n/a | 101.226.28.238:443 |
| 2024-05-11 18:46:05 | 3f9fad1437e285e5fe6085420aa455bd | n/a | 163.181.157.113:443 |
| 2024-05-11 18:46:05 | 3f9fad1437e285e5fe6085420aa455bd | n/a | 221.231.83.113:443 |
| 2024-01-27 08:29:17 | c38ede7b0bd74e613f3204b016256c4d | n/a | 51.158.227.48:443 |
| 2023-11-27 23:13:09 | 0e1f88ff686d660b87eaa76d8facd092 |  7 / 63 (11.11%)
| 47.251.13.49:443 |
| 2023-09-21 16:39:32 | 72e8a867fd483b6c3350089e325cb59a | n/a | 51.158.210.229:443 |
| 2023-08-29 18:15:29 | 01b17b77c7b8563d263588360ad8870b | 37 / 66 (56.06%)
| 51.158.210.229:443 |
| 2023-08-26 09:18:02 | ff9360da52f38653848feb8bacd56d9d | n/a | 188.114.96.0:443 |
| 2023-08-19 06:22:07 | 34a1716dd8b1bc626537e1f8460138d6 | 3 / 71 (4.23%)
| 203.233.82.247:5500 |
| 2023-08-19 01:12:31 | 29064fc0ea55486fcca61c3782ba4417 | 3 / 68 (4.41%)
| 203.233.82.247:5500 |
| 2023-08-03 16:02:18 | 02d20a85128a14f7dcc78b5a12266487 | 51 / 69 (73.91%)
| 51.158.210.229:443 |
| 2023-08-01 13:17:46 | 4c7ef9bef2c0517fafa31133f9092554 | 46 / 70 (65.71%)
| 51.158.130.233:443 |
| 2023-07-30 00:54:07 | 3835a4d5be79f59c47eb76695fcc6c61 | 16 / 71 (22.54%)
| 203.248.116.142:5500 |
| 2023-07-29 19:36:52 | 3553bcebc02235ce4d6b646051e18a8d | 16 / 71 (22.54%)
| 203.248.116.142:5500 |
| 2023-04-28 09:05:16 | 38fcf0699070c926dc725e9216ab6e26 | n/a | 51.15.67.154:443 |
| 2023-03-23 00:52:58 | 24ae13f91ecb918bfefe72a73555cb25 | n/a | 51.15.67.154:443 |
| 2023-03-20 10:43:12 | 6f0a68b9e306f185d87dc5962c1f66ce | n/a | 51.15.67.154:443 |
| 2023-03-07 20:59:09 | 11f2e3b8bede77daf8941db6ec1b0996 | 51 / 67 (76.12%)
| 51.15.67.154:443 |
| 2023-03-04 10:20:34 | 8e509cc05139803e926059fbffa347f9 | n/a | 51.15.67.154:443 |
| 2023-02-28 12:13:53 | b05a07fc2ab3404157e00d502179932a | n/a | 51.15.67.154:443 |
| 2023-02-27 13:15:39 | 404cfee03f60ca3d005d277816c215a2 | n/a | 51.15.67.154:443 |
| 2023-02-25 06:31:20 | c1ff5eae6b700b1561962152f4460b3d | n/a | 120.77.166.17:443 |
| 2023-02-06 00:19:15 | c2bcaa3466f06667912582bf3426a109 | n/a | 51.158.184.220:443 |
| 2023-01-30 21:26:45 | 3307bca749f278d27f2c348941e8a839 | 58 / 70 (82.86%)
| 51.158.184.220:443 |
| 2022-12-27 18:46:00 | cda04e7ae58827efdbb9ebb7f237f23a | n/a | 51.158.184.220:443 |
| 2022-12-15 04:10:33 | ba837d6d3844e4bbb895a6c4b34ad08d | n/a | 51.158.184.220:443 |
| 2022-12-10 18:25:49 | 599155008293f6761f4984bb3cefce8c | n/a | 51.158.184.220:443 |
| 2022-12-10 13:49:31 | 3174e2eeeee0a24dd799d76740e91edd | n/a | 51.158.184.220:443 |
| 2022-12-08 16:11:36 | 8140d9debca76a79633326f0762e8c10 | 33 / 69 (47.83%)
| 51.158.184.220:443 |
| 2022-11-20 19:15:55 | 620223a6ff6dfe230b8537ffe53f81e7 | 28 / 69 (40.58%)
| 51.158.184.220:443 |
| 2022-11-20 09:17:59 | 2fc6a0eb81d01a0128c65b63ecdb0bb9 | n/a | 51.158.184.220:443 |
| 2022-11-20 08:24:05 | 1e81aae74839e319b08001a7dc326025 | 65 / 71 (91.55%)
| 51.158.184.220:443 |
| 2022-11-19 22:58:09 | 34f10bec2411f127f5ecc03a31c04786 | 38 / 71 (53.52%)
| 51.158.184.220:443 |
| 2022-11-16 15:46:59 | 1830ec3144cef370b1f83a35cf791c16 | 36 / 69 (52.17%)
| 51.158.184.220:443 |
| 2022-11-09 04:34:43 | c87d1903331106a54b5f02121b62fb13 | n/a | 51.158.184.220:443 |
| 2022-11-05 23:27:07 | 21d42558123559f3ce2f2291494676d9 | n/a | 172.67.128.121:443 |
| 2022-11-05 23:27:07 | 21d42558123559f3ce2f2291494676d9 | n/a | 8.8.4.4:443 |
| 2022-11-05 07:25:44 | 11156893032281d714de05fd53593de8 | n/a | 51.158.184.220:443 |
| 2022-11-04 21:03:24 | 7979f6224115221910ebd119a47a8c2c | n/a | 51.158.184.220:443 |
| 2022-11-04 20:31:01 | 77db8f8bff78829fe3a6c39020d90b71 | n/a | 51.158.184.220:443 |
| 2022-11-04 20:09:07 | 75fc6e6d064968bd7d4df0246a1bc5f4 | n/a | 51.158.184.220:443 |
| 2022-11-04 19:46:36 | 75484fdb418d452c75b2e739fe421e97 | n/a | 51.158.184.220:443 |
| 2022-11-04 18:23:20 | 73c238e77544d76a0dcd0616c5bc3b0e | n/a | 51.158.184.220:443 |
| 2022-11-04 14:25:12 | 6c3c9734d5b6192f3159b66aacc15a0d | n/a | 51.158.184.220:443 |
| 2022-11-04 00:28:56 | 48ec586f14ecef47763b87a79c34424b | n/a | 51.158.184.220:443 |
| 2022-11-03 21:42:10 | 3ada7b148eefaf57d471e702ca922619 | n/a | 51.158.184.220:443 |
| 2022-11-03 20:39:54 | 360bfef00e28570c3bec7243f37c12b6 | n/a | 51.158.184.220:443 |
| 2022-11-03 17:56:06 | 2acfde2af2206874cebd45372f76f456 | n/a | 51.158.184.220:443 |
| 2022-11-03 15:19:10 | 16f6c5b20928f9d26f9ed50a25ad6cd2 | 44 / 70 (62.86%)
| 51.158.184.220:443 |
| 2022-11-03 13:11:33 | 16795e7febb2d4705fbf17ef621dc106 | 37 / 71 (52.11%)
| 51.158.184.220:443 |
| 2022-11-03 12:42:56 | 1e329da6c54e5b8bdaacdb2d81fd18ba | n/a | 51.158.184.220:443 |
| 2022-11-03 11:50:25 | 108440fd542b58433e29d41588b17d00 | 59 / 71 (83.10%)
| 51.158.184.220:443 |
| 2022-11-03 04:54:41 | 5c9a18dd6b43c2123df6466e737e3854 | n/a | 51.158.184.220:443 |
| 2022-11-03 04:52:14 | 5c75610483efc4ea7e7c4af724715678 | n/a | 51.158.184.220:443 |
| 2022-11-03 03:25:10 | 553c56ffff82711adef429043c66f5b3 | n/a | 51.158.184.220:443 |
| 2022-11-03 01:21:12 | 4a957afd01d625944b5c1f42db151a8d | n/a | 51.158.184.220:443 |
| 2022-11-01 19:46:00 | 09340f9dbecace175797febfc61bdf55 | 33 / 65 (50.77%)
| 51.158.184.220:443 |
| 2022-11-01 13:41:32 | a116732b4797ef8b208c4c3be357f76a | n/a | 51.158.184.220:443 |
| 2022-11-01 03:45:42 | 69ddbd325edd773436bd7fc5d46bd35c | n/a | 51.158.184.220:443 |
| 2022-10-31 13:45:37 | 14155879eadbda6c9fbd587717396435 | n/a | 51.158.184.220:443 |
| 2022-10-31 12:57:45 | 1cb380880b8d3f73bb7e258f5f6aec21 | n/a | 51.158.184.220:443 |
| 2022-10-30 06:54:44 | 9446a183654d06aa18ee8015917da212 | n/a | 51.158.184.220:443 |
| 2022-10-30 02:25:49 | 781433750ddaa9406ed1cbfd5143b2ab | n/a | 51.158.184.220:443 |
| 2022-10-29 19:28:10 | 54c1f7bf831d4b1b04a7df8aa01ef805 | n/a | 51.158.184.220:443 |
| 2022-10-29 15:44:33 | 12830341cd8aaa5becb744e8e962fc3f | n/a | 51.158.184.220:443 |
| 2022-10-28 23:47:17 | 2b90f248f95aff554e399e9bd9b3f51c | 34 / 69 (49.28%)
| 51.158.184.220:443 |
| 2022-10-28 18:54:06 | 6b5f53670fa75ac308d3f16e7cfbf539 | n/a | 51.158.184.220:443 |
| 2022-10-28 10:23:21 | 49795a248d0747507b59938f0fe07c7b | n/a | 51.158.184.220:443 |
| 2022-10-28 03:29:53 | 37af5db5f139283d89bd54a85c39eb88 | n/a | 51.158.184.220:443 |
| 2022-10-28 00:41:18 | 31b732ded54478393e335d2adc966877 | n/a | 51.158.184.220:443 |
| 2022-10-26 22:47:00 | 469d9a29512092cf960e7a3b2438974b | n/a | 51.158.184.220:443 |
| 2022-10-26 20:13:51 | 38438adafb8ef8b8b1f9bee8175e4475 | n/a | 51.158.184.220:443 |
# of entries: 100 (max: 100)