UDP traffic / QUIC JA4 client fingerprint

q13i0307h9_55b375c5d22e_39d5f8cd0d4d

QUIC JA4 client fingerprint. 20 datagrams in the last 30 days, last seen 2026-10-12 12:49 UTC.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

QUIC

20 datagrams from 20 sources

Initial packets of HTTP/3 connections, decoded on the sensor.

QUIC 20

Latest QUIC datagram, to 8443/udp

QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co

Destination ports

443/udp QUIC10
8443/udp QUIC10

QUIC clients (JA4)

q13i0307h9_55b375c5d22e_39d5f8cd0d4d from 20 sources20

QUIC transport parameters

60647680e335 from 20 sources20

QUIC versions

Networks

AS211298 Driftnet Ltd from 20 sources20

Countries

GB United Kingdom20

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
185.247.137.127	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 00:39
185.247.137.146	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-07 09:03
185.247.137.166	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 01:12
185.247.137.240	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-11 10:23
87.236.176.60	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 08:20
195.96.139.242	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 11:43
185.247.137.162	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 09:55
185.247.137.238	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 10:20
185.247.137.38	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-12 08:37
195.96.139.83	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-12 12:49
185.247.137.174	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 06:00
195.96.139.35	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 06:39
87.236.176.56	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 17:14
87.236.176.156	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-11 17:28
195.96.139.231	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 04:42
185.247.137.196	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 01:01
87.236.176.107	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 18:25
195.96.139.43	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-07 01:52
195.96.139.233	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 05:56
87.236.176.222	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 18:34

Latest datagrams

2026-10-12 12:49:52195.96.139.83to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-12 08:37:23185.247.137.38to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-11 17:28:0487.236.176.156to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-11 10:23:26185.247.137.240to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 18:25:4287.236.176.107to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 11:43:49195.96.139.242to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 06:00:57185.247.137.174to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-09 06:39:53195.96.139.35to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-09 05:56:18195.96.139.233to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-09 00:39:42185.247.137.127to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-08 18:34:4787.236.176.222to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-08 17:14:2587.236.176.56to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-08 04:42:21195.96.139.231to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-07 09:03:28185.247.137.146to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-07 01:52:03195.96.139.43to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co

About this fingerprint

JA4 over QUIC fingerprints the TLS ClientHello carried inside a client's QUIC Initial packets, with a q prefix in place of t. Initial packets are encrypted with keys anyone can derive from the packet itself, which is how the sensor reads the ClientHello without answering. The same client library and version produce the same JA4.