UDP traffic / QUIC JA4 client fingerprint

q13i0307h9_55b375c5d22e_2f871f65fa7d

QUIC JA4 client fingerprint. 16 datagrams in the last 30 days, last seen 2026-10-10 18:26 UTC.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

QUIC

16 datagrams from 16 sources

Initial packets of HTTP/3 connections, decoded on the sensor.

QUIC 16

Latest QUIC datagram, to 443/udp

QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co

Destination ports

443/udp QUIC8
8443/udp QUIC8

QUIC clients (JA4)

q13i0307h9_55b375c5d22e_2f871f65fa7d from 16 sources16

QUIC transport parameters

60647680e335 from 16 sources16

QUIC versions

Networks

AS211298 Driftnet Ltd from 16 sources16

Countries

GB United Kingdom16

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
195.96.139.189	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 01:02
195.96.139.131	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 00:40
87.236.176.181	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 01:12
185.247.137.167	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 06:01
87.236.176.169	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-07 09:04
185.247.137.240	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 18:35
185.247.137.106	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 18:26
185.247.137.34	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 06:40
87.236.176.221	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 04:42
195.96.139.236	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 11:44
195.96.139.63	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 17:15
87.236.176.47	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-07 01:52
185.247.137.232	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 05:56
185.247.137.174	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 09:56
87.236.176.44	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 08:20
87.236.176.243	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 10:21

Latest datagrams

2026-10-10 18:26:20185.247.137.106to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 11:44:27195.96.139.236to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 06:01:35185.247.137.167to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-09 06:40:30185.247.137.34to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-09 05:56:56185.247.137.232to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-09 00:40:20195.96.139.131to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-08 18:35:25185.247.137.240to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-08 17:15:03195.96.139.63to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-08 04:42:5987.236.176.221to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-07 09:04:0787.236.176.169to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-07 01:52:4187.236.176.47to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-06 10:21:3387.236.176.243to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-06 09:56:18185.247.137.174to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-06 08:20:5487.236.176.44to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-06 01:12:4887.236.176.181to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co

About this fingerprint

JA4 over QUIC fingerprints the TLS ClientHello carried inside a client's QUIC Initial packets, with a q prefix in place of t. Initial packets are encrypted with keys anyone can derive from the packet itself, which is how the sensor reads the ClientHello without answering. The same client library and version produce the same JA4.