UDP traffic / QUIC JA4 client fingerprint
q13i0311h3_55b375c5d22e_c183556c78e2
QUIC JA4 client fingerprint. 8 datagrams in the last 30 days, last seen 2026-10-08 08:29 UTC.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
8
Datagrams
4
Source addresses
1
Networks
4
Countries
1
Destination ports
Traffic by type
QUIC
8 datagrams from 4 sourcesInitial packets of HTTP/3 connections, decoded on the sensor.
Latest QUIC datagram, to 443/udp
Destination ports
- 443/udp QUIC8
QUIC clients (JA4)
- q13i0311h3_55b375c5d22e_c183556c78e2 from 4 sources8
QUIC transport parameters
- 12d07494ae7c from 4 sources8
QUIC versions
- 18
Networks
- AS45102 Alibaba (US) Technology Co., Ltd. from 4 sources8
Countries
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 47.91.125.252 | AS45102 Alibaba (US) Technology Co., Ltd. | AE | QUIC | 2 | 2026-10-08 08:29 |
| 47.89.154.16 | AS45102 Alibaba (US) Technology Co., Ltd. | US | QUIC | 2 | 2026-10-08 06:03 |
| 8.208.10.94 | AS45102 Alibaba (US) Technology Co., Ltd. | GB | QUIC | 2 | 2026-10-08 01:37 |
| 47.245.117.221 | AS45102 Alibaba (US) Technology Co., Ltd. | SG | QUIC | 2 | 2026-10-08 01:24 |
Latest datagrams
About this fingerprint
JA4 over QUIC fingerprints the TLS ClientHello carried inside a client's QUIC Initial packets, with a q prefix in place of t. Initial packets are encrypted with keys anyone can derive from the packet itself, which is how the sensor reads the ClientHello without answering. The same client library and version produce the same JA4.