UDP traffic / QUIC JA4 client fingerprint
q13i0311dq_55b375c5d22e_c183556c78e2
QUIC JA4 client fingerprint. 12 datagrams in the last 30 days, last seen 2026-10-09 10:12 UTC.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
12
Datagrams
4
Source addresses
1
Networks
4
Countries
3
Destination ports
Traffic by type
QUIC
12 datagrams from 4 sourcesInitial packets of HTTP/3 connections, decoded on the sensor.
Latest QUIC datagram, to 853/udp
Destination ports
QUIC clients (JA4)
- q13i0311dq_55b375c5d22e_c183556c78e2 from 4 sources12
QUIC transport parameters
- cde977acba33 from 4 sources12
QUIC versions
- 112
Networks
- AS45102 Alibaba (US) Technology Co., Ltd. from 4 sources12
Countries
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 47.91.125.252 | AS45102 Alibaba (US) Technology Co., Ltd. | AE | QUIC | 3 | 2026-10-09 10:12 |
| 8.208.10.94 | AS45102 Alibaba (US) Technology Co., Ltd. | GB | QUIC | 3 | 2026-10-09 04:58 |
| 47.251.13.59 | AS45102 Alibaba (US) Technology Co., Ltd. | US | QUIC | 3 | 2026-10-09 01:10 |
| 47.245.117.221 | AS45102 Alibaba (US) Technology Co., Ltd. | SG | QUIC | 3 | 2026-10-09 01:03 |
Latest datagrams
About this fingerprint
JA4 over QUIC fingerprints the TLS ClientHello carried inside a client's QUIC Initial packets, with a q prefix in place of t. Initial packets are encrypted with keys anyone can derive from the packet itself, which is how the sensor reads the ClientHello without answering. The same client library and version produce the same JA4.