UDP traffic / QUIC JA4 client fingerprint

q13i0307h9_55b375c5d22e_39d5f8cd0d4d

QUIC JA4 client fingerprint. 19 datagrams in the last 30 days, last seen 2026-10-12 08:37 UTC.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

QUIC

19 datagrams from 19 sources

Initial packets of HTTP/3 connections, decoded on the sensor.

QUIC 19

Latest QUIC datagram, to 8443/udp

QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co

Destination ports

443/udp QUIC10
8443/udp QUIC9

QUIC clients (JA4)

q13i0307h9_55b375c5d22e_39d5f8cd0d4d from 19 sources19

QUIC transport parameters

60647680e335 from 19 sources19

QUIC versions

Networks

AS211298 Driftnet Ltd from 19 sources19

Countries

GB United Kingdom19

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
185.247.137.127	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 00:39
185.247.137.146	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-07 09:03
185.247.137.166	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 01:12
185.247.137.240	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-11 10:23
87.236.176.60	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 08:20
195.96.139.242	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 11:43
185.247.137.162	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 09:55
185.247.137.238	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 10:20
185.247.137.38	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-12 08:37
185.247.137.174	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 06:00
195.96.139.35	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 06:39
87.236.176.56	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 17:14
87.236.176.156	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-11 17:28
195.96.139.231	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 04:42
185.247.137.196	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 01:01
87.236.176.107	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 18:25
195.96.139.43	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-07 01:52
195.96.139.233	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 05:56
87.236.176.222	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 18:34

Latest datagrams

2026-10-12 08:37:23185.247.137.38to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-11 17:28:0487.236.176.156to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-11 10:23:26185.247.137.240to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 18:25:4287.236.176.107to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 11:43:49195.96.139.242to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 06:00:57185.247.137.174to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-09 06:39:53195.96.139.35to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-09 05:56:18195.96.139.233to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-09 00:39:42185.247.137.127to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-08 18:34:4787.236.176.222to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-08 17:14:2587.236.176.56to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-08 04:42:21195.96.139.231to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-07 09:03:28185.247.137.146to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-07 01:52:03195.96.139.43to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-06 10:20:55185.247.137.238to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co

About this fingerprint

JA4 over QUIC fingerprints the TLS ClientHello carried inside a client's QUIC Initial packets, with a q prefix in place of t. Initial packets are encrypted with keys anyone can derive from the packet itself, which is how the sensor reads the ClientHello without answering. The same client library and version produce the same JA4.