UDP traffic / QUIC JA4 client fingerprint

q13i0310h3_55b375c5d22e_3db21c8b774f

QUIC JA4 client fingerprint. 36 datagrams in the last 30 days, last seen 2026-10-11 17:26 UTC.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

QUIC

36 datagrams from 34 sources

Initial packets of HTTP/3 connections, decoded on the sensor.

QUIC 36

Latest QUIC datagram, to 443/udp

QUIC v1 Initial alpn=h3,h3-29

Destination ports

443/udp QUIC20
8443/udp QUIC16

QUIC clients (JA4)

q13i0310h3_55b375c5d22e_3db21c8b774f from 34 sources36

QUIC transport parameters

1f7a23748abd from 34 sources36

QUIC versions

Networks

AS211298 Driftnet Ltd from 34 sources36

Countries

GB United Kingdom36

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
195.96.139.236	AS211298 Driftnet Ltd	GB	QUIC	2	2026-10-11 10:22
185.247.137.178	AS211298 Driftnet Ltd	GB	QUIC	2	2026-10-10 05:59
87.236.176.78	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 18:24
195.96.139.182	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 00:59
87.236.176.109	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 18:23
195.96.139.14	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 06:37
195.96.139.247	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 05:55
87.236.176.232	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 10:18
185.247.137.251	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 04:41
185.247.137.52	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 08:19
87.236.176.252	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 11:42
87.236.176.2	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 06:38
185.247.137.237	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 18:33
87.236.176.57	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 17:11
195.96.139.155	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 01:09
195.96.139.50	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 08:17
185.247.137.113	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 00:37
87.236.176.147	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-07 09:00
195.96.139.176	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-11 17:26
195.96.139.49	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-07 01:50

Latest datagrams

2026-10-11 17:26:48195.96.139.176to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-11 17:25:3287.236.176.157to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-11 10:22:10195.96.139.236to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-11 10:20:54195.96.139.240to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 18:24:2587.236.176.78to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 18:23:0987.236.176.109to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 11:42:3387.236.176.252to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 11:41:17185.247.137.235to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 05:59:41185.247.137.178to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 05:58:25185.247.137.163to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-09 06:38:3687.236.176.2to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-09 06:37:19195.96.139.14to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-09 05:55:02195.96.139.247to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-09 05:53:46195.96.139.228to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-09 00:38:26195.96.139.124to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29

About this fingerprint

JA4 over QUIC fingerprints the TLS ClientHello carried inside a client's QUIC Initial packets, with a q prefix in place of t. Initial packets are encrypted with keys anyone can derive from the packet itself, which is how the sensor reads the ClientHello without answering. The same client library and version produce the same JA4.