JA3 Fingerprints

You can find further information about the JA3 fingerprint 20dd18bdd3209ea718989030a6f93364, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:20dd18bdd3209ea718989030a6f93364
First seen:2017-07-18 10:22:58 UTC
Last seen:2019-03-13 14:23:08 UTC
Status:Blacklisted
Malware samples:10'807
Destination IPs:2'222
Malware:Adware
Listing date:2018-11-14 12:47:37

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2019-03-13 14:23:084ddf7bc8dc483239a65c602d5cd9acc0Virustotal results 38/64 (59.38%) 216.58.201.238:443
2019-03-13 14:23:084ddf7bc8dc483239a65c602d5cd9acc0Virustotal results 38/64 (59.38%) 172.217.18.205:443
2019-03-13 14:23:084ddf7bc8dc483239a65c602d5cd9acc0Virustotal results 38/64 (59.38%) 138.68.113.179:443
2019-03-13 14:23:084ddf7bc8dc483239a65c602d5cd9acc0Virustotal results 38/64 (59.38%) 216.58.206.238:443
2019-03-13 14:23:084ddf7bc8dc483239a65c602d5cd9acc0Virustotal results 38/64 (59.38%) 172.217.19.227:443
2019-03-13 14:23:084ddf7bc8dc483239a65c602d5cd9acc0Virustotal results 38/64 (59.38%) 172.217.22.142:443
2019-03-13 02:40:08a51e2db0126ec38d384159d40fd6f871n/a172.217.168.13:443
2019-03-13 02:40:08a51e2db0126ec38d384159d40fd6f871n/a172.217.168.78:443
2019-03-13 02:40:08a51e2db0126ec38d384159d40fd6f871n/a172.217.168.46:443
2019-03-13 02:40:08a51e2db0126ec38d384159d40fd6f871n/a172.217.168.14:443
2019-03-13 02:40:08a51e2db0126ec38d384159d40fd6f871n/a172.217.168.67:443
2019-03-13 02:40:08a51e2db0126ec38d384159d40fd6f871n/a34.198.22.254:443
2019-03-11 12:49:14aa18e00be4f45185e7c05fbba32427c9Virustotal results 30/71 (42.25%) 64.58.127.69:443
2019-03-11 12:49:14aa18e00be4f45185e7c05fbba32427c9Virustotal results 30/71 (42.25%) 216.58.210.14:443
2019-03-11 12:49:14aa18e00be4f45185e7c05fbba32427c9Virustotal results 30/71 (42.25%) 92.223.124.254:443
2019-03-11 12:49:14aa18e00be4f45185e7c05fbba32427c9Virustotal results 30/71 (42.25%) 172.217.16.142:443
2019-03-11 12:49:14aa18e00be4f45185e7c05fbba32427c9Virustotal results 30/71 (42.25%) 216.58.207.46:443
2019-03-11 12:49:14aa18e00be4f45185e7c05fbba32427c9Virustotal results 30/71 (42.25%) 172.217.22.45:443
2019-03-11 12:49:14aa18e00be4f45185e7c05fbba32427c9Virustotal results 30/71 (42.25%) 138.68.113.179:443
2019-03-11 12:49:14aa18e00be4f45185e7c05fbba32427c9Virustotal results 30/71 (42.25%) 172.217.16.131:443
2019-03-10 22:15:20050df58e34f530b716159bac88e6eefeVirustotal results 38/64 (59.38%) 216.58.205.174:443
2019-03-10 22:15:20050df58e34f530b716159bac88e6eefeVirustotal results 38/64 (59.38%) 172.217.168.238:443
2019-03-10 22:15:20050df58e34f530b716159bac88e6eefeVirustotal results 38/64 (59.38%) 138.68.113.179:443
2019-03-10 22:15:20050df58e34f530b716159bac88e6eefeVirustotal results 38/64 (59.38%) 172.217.20.67:443
2019-03-10 18:18:4141695961f908c38773c2dc1653521e57Virustotal results 35/71 (49.30%) 172.217.17.110:443
2019-03-10 18:18:4141695961f908c38773c2dc1653521e57Virustotal results 35/71 (49.30%) 172.217.17.131:443
2019-03-10 18:18:4141695961f908c38773c2dc1653521e57Virustotal results 35/71 (49.30%) 172.217.19.205:443
2019-03-10 18:18:4141695961f908c38773c2dc1653521e57Virustotal results 35/71 (49.30%) 119.110.118.245:443
2019-03-10 18:18:4141695961f908c38773c2dc1653521e57Virustotal results 35/71 (49.30%) 138.68.113.179:443
2019-03-10 18:18:4141695961f908c38773c2dc1653521e57Virustotal results 35/71 (49.30%) 64.233.177.93:443
2019-03-10 14:57:56f945e075c8851e805d587d4cffa058fdVirustotal results 34/65 (52.31%) 216.58.198.46:443
2019-03-10 14:57:56f945e075c8851e805d587d4cffa058fdVirustotal results 34/65 (52.31%) 172.217.168.206:443
2019-03-10 14:57:56f945e075c8851e805d587d4cffa058fdVirustotal results 34/65 (52.31%) 138.68.113.179:443
2019-03-10 14:57:56f945e075c8851e805d587d4cffa058fdVirustotal results 34/65 (52.31%) 172.217.17.131:443
2019-03-09 21:43:45a2454982248b92ca8d9f72abc84b4bbbn/a173.194.203.93:443
2019-03-09 21:43:45a2454982248b92ca8d9f72abc84b4bbbn/a138.68.113.179:443
2019-03-09 21:43:45a2454982248b92ca8d9f72abc84b4bbbn/a172.217.168.206:443
2019-03-09 21:43:45a2454982248b92ca8d9f72abc84b4bbbn/a172.217.17.131:443
2019-03-09 19:02:18d4aa6b10e6b3ea4d0087872e2aa4290aVirustotal results 24/65 (36.92%) 172.217.17.67:443
2019-03-09 19:02:18d4aa6b10e6b3ea4d0087872e2aa4290aVirustotal results 24/65 (36.92%) 172.217.168.238:443
2019-03-09 19:02:18d4aa6b10e6b3ea4d0087872e2aa4290aVirustotal results 24/65 (36.92%) 192.99.33.165:443
2019-03-09 19:02:18d4aa6b10e6b3ea4d0087872e2aa4290aVirustotal results 24/65 (36.92%) 172.217.17.99:443
2019-03-09 19:02:18d4aa6b10e6b3ea4d0087872e2aa4290aVirustotal results 24/65 (36.92%) 172.217.17.131:443
2019-03-09 19:02:18d4aa6b10e6b3ea4d0087872e2aa4290aVirustotal results 24/65 (36.92%) 216.58.205.206:443
2019-03-09 19:02:18d4aa6b10e6b3ea4d0087872e2aa4290aVirustotal results 24/65 (36.92%) 104.24.119.223:443
2019-03-09 09:32:37150c4d861ed7ba06fefbcaeb29606a5an/a172.217.17.131:443
2019-03-09 09:32:37150c4d861ed7ba06fefbcaeb29606a5an/a74.125.200.93:443
2019-03-09 09:32:37150c4d861ed7ba06fefbcaeb29606a5an/a172.217.168.238:443
2019-03-09 09:32:37150c4d861ed7ba06fefbcaeb29606a5an/a138.68.113.179:443
2019-03-08 18:52:02a2ba57feaaefee73494c78f393df68f8Virustotal results 44/62 (70.97%) 172.217.17.131:443
2019-03-08 18:52:02a2ba57feaaefee73494c78f393df68f8Virustotal results 44/62 (70.97%) 172.217.168.238:443
2019-03-08 18:52:02a2ba57feaaefee73494c78f393df68f8Virustotal results 44/62 (70.97%) 216.58.205.110:443
2019-03-08 18:52:02a2ba57feaaefee73494c78f393df68f8Virustotal results 44/62 (70.97%) 34.198.22.254:443
2019-03-08 10:52:34a30cc4a2e8c8d85ef03751d765f6acc0Virustotal results 46/67 (68.66%) 172.217.168.67:443
2019-03-08 10:52:34a30cc4a2e8c8d85ef03751d765f6acc0Virustotal results 46/67 (68.66%) 54.88.34.203:443
2019-03-08 10:52:34a30cc4a2e8c8d85ef03751d765f6acc0Virustotal results 46/67 (68.66%) 216.58.215.238:443
2019-03-08 10:52:33a30cc4a2e8c8d85ef03751d765f6acc0Virustotal results 46/67 (68.66%) 172.217.168.13:443
2019-03-08 10:52:33a30cc4a2e8c8d85ef03751d765f6acc0Virustotal results 46/67 (68.66%) 172.217.168.14:443
2019-03-08 10:52:33a30cc4a2e8c8d85ef03751d765f6acc0Virustotal results 46/67 (68.66%) 172.217.168.46:443
2019-03-08 03:48:1837b8ce48f7f0693abcef53798e430375Virustotal results 26/71 (36.62%) 172.217.17.46:443
2019-03-08 03:48:1837b8ce48f7f0693abcef53798e430375Virustotal results 26/71 (36.62%) 216.58.205.206:443
2019-03-08 03:48:1837b8ce48f7f0693abcef53798e430375Virustotal results 26/71 (36.62%) 216.58.211.99:443
2019-03-08 03:48:1837b8ce48f7f0693abcef53798e430375Virustotal results 26/71 (36.62%) 138.68.113.179:443
2019-03-04 11:12:04813cd2d309d030cdbeb655ab09d0a8d6Virustotal results 25/68 (36.76%) 172.217.168.227:443
2019-03-04 11:12:04813cd2d309d030cdbeb655ab09d0a8d6Virustotal results 25/68 (36.76%) 172.217.17.142:443
2019-03-04 11:12:03813cd2d309d030cdbeb655ab09d0a8d6Virustotal results 25/68 (36.76%) 172.217.19.206:443
2019-03-04 11:12:03813cd2d309d030cdbeb655ab09d0a8d6Virustotal results 25/68 (36.76%) 172.217.20.110:443
2019-03-04 11:12:03813cd2d309d030cdbeb655ab09d0a8d6Virustotal results 25/68 (36.76%) 138.68.113.179:443
2019-03-03 19:43:580f8406d489f175f0b87b502efd43b425Virustotal results 26/68 (38.24%) 138.68.113.179:443
2019-03-03 19:43:580f8406d489f175f0b87b502efd43b425Virustotal results 26/68 (38.24%) 216.58.213.163:443
2019-03-02 14:25:51d089fdb739fa90f67246c2a565eeb395Virustotal results 29/64 (45.31%) 92.223.97.97:443
2019-03-02 14:25:51d089fdb739fa90f67246c2a565eeb395Virustotal results 29/64 (45.31%) 172.217.168.46:443
2019-03-02 14:25:51d089fdb739fa90f67246c2a565eeb395Virustotal results 29/64 (45.31%) 216.58.215.238:443
2019-03-02 14:25:51d089fdb739fa90f67246c2a565eeb395Virustotal results 29/64 (45.31%) 64.58.127.68:443
2019-03-02 14:25:51d089fdb739fa90f67246c2a565eeb395Virustotal results 29/64 (45.31%) 172.217.168.67:443
2019-03-02 14:25:51d089fdb739fa90f67246c2a565eeb395Virustotal results 29/64 (45.31%) 172.217.168.13:443
2019-03-02 14:25:51d089fdb739fa90f67246c2a565eeb395Virustotal results 29/64 (45.31%) 138.68.113.179:443
2019-03-02 14:25:51d089fdb739fa90f67246c2a565eeb395Virustotal results 29/64 (45.31%) 172.217.168.14:443
2019-03-02 13:58:095e733be5f8e4d7ce96d5330e0a6289f4n/a172.217.20.110:443
2019-03-02 13:58:095e733be5f8e4d7ce96d5330e0a6289f4n/a172.217.168.227:443
2019-03-02 13:58:095e733be5f8e4d7ce96d5330e0a6289f4n/a138.68.113.179:443
2019-03-02 13:58:095e733be5f8e4d7ce96d5330e0a6289f4n/a172.217.23.110:443
2019-02-28 14:08:04c565833a723871c8b054a2038ff24861Virustotal results 42/64 (65.62%) 172.217.11.174:443
2019-02-28 14:08:04c565833a723871c8b054a2038ff24861Virustotal results 42/64 (65.62%) 138.68.113.179:443
2019-02-28 14:08:04c565833a723871c8b054a2038ff24861Virustotal results 42/64 (65.62%) 172.217.168.3:443
2019-02-28 14:08:04c565833a723871c8b054a2038ff24861Virustotal results 42/64 (65.62%) 216.58.213.206:443
2019-02-24 08:32:195061b16ad2fba331baa960e20cb7ad0an/a172.217.168.238:443
2019-02-24 08:32:195061b16ad2fba331baa960e20cb7ad0an/a172.217.20.67:443
2019-02-24 08:32:185061b16ad2fba331baa960e20cb7ad0an/a216.58.198.14:443
2019-02-24 08:32:185061b16ad2fba331baa960e20cb7ad0an/a138.68.113.179:443
2019-02-22 09:24:06a065501ba501ce9a11207433f008c7e0n/a172.217.168.206:443
2019-02-22 09:24:06a065501ba501ce9a11207433f008c7e0n/a52.4.107.197:443
2019-02-22 09:24:06a065501ba501ce9a11207433f008c7e0n/a216.58.205.46:443
2019-02-22 09:24:06a065501ba501ce9a11207433f008c7e0n/a172.217.20.67:443
2019-02-22 09:22:31a00a6dbb21191187779134ed4ee50adbn/a172.217.17.35:443
2019-02-22 09:22:31a00a6dbb21191187779134ed4ee50adbn/a172.217.20.206:443
2019-02-22 09:22:31a00a6dbb21191187779134ed4ee50adbn/a52.4.107.197:443
2019-02-22 09:22:31a00a6dbb21191187779134ed4ee50adbn/a172.217.168.238:443
2019-02-22 09:22:31a00a6dbb21191187779134ed4ee50adbn/a172.217.20.109:443
2019-02-22 09:22:31a00a6dbb21191187779134ed4ee50adbn/a185.119.13.22:443

# of entries: 100 (max: 100)