JA4 TLS client fingerprint

t12i130500_2d7513195f68_e51b7354d87f

Seen 2026-02-19 to 2026-07-28 across the retained window.

Open in lookup →

3.5K

Source IPs

31

Networks

24

Countries

1.8K

Ports hit

384.4K

Events

113

IPs / network

Top networks

AS8075 Microsoft Corporation1.5K IPs13.6K

AS6939 Hurricane Electric LLC983 IPs273.8K

AS16509 Amazon.com, Inc.375 IPs68.7K

AS14061 DigitalOcean, LLC349 IPs788

AS63949 Akamai Connected Cloud162 IPs6.2K

AS45204 GEMNET LLC27 IPs133

AS0 13 IPs293

AS47890 Unmanaged Ltd11 IPs11.2K

AS10439 CariNet, Inc.8 IPs156

AS36352 HostPapa7 IPs482

AS203003 Magna Capax Finland Oy7 IPs67

AS12876 Scaleway SAS7 IPs30

Countries

US 3.3KMN 27GB 19SG 16FR 15DE 13RO 11CA 10JP 8FI 8

Ports targeted

443/tcp 9.6K 9443/tcp 6.7K 8443/tcp 6.7K 80/tcp 6.7K 9090/tcp 6.6K 4443/tcp 6.6K 11443/tcp 6.6K 444/tcp 6.5K 4434/tcp 6.4K 13443/tcp 6.3K 12443/tcp 6.3K 14443/tcp 6.3K

Source IPCCNetworkEvents

16.58.56.214USAS16509 Amazon.com, Inc.11.0K

18.116.101.220USAS16509 Amazon.com, Inc.9.7K

18.218.118.203USAS16509 Amazon.com, Inc.9.2K

3.129.187.38USAS16509 Amazon.com, Inc.8.6K

3.130.168.2USAS16509 Amazon.com, Inc.7.5K

3.131.220.121USAS16509 Amazon.com, Inc.5.7K

65.49.20.68USAS6939 Hurricane Electric LLC4.7K

65.49.20.67USAS6939 Hurricane Electric LLC4.6K

65.49.20.66USAS6939 Hurricane Electric LLC4.5K

65.49.20.69USAS6939 Hurricane Electric LLC4.4K

3.132.26.232USAS16509 Amazon.com, Inc.4.0K

74.82.47.3USAS6939 Hurricane Electric LLC3.7K

93.123.109.26BGAS48090 Techoff Srv Limited3.6K

184.105.247.196USAS6939 Hurricane Electric LLC3.6K

184.105.247.252USAS6939 Hurricane Electric LLC3.5K

184.105.247.194USAS6939 Hurricane Electric LLC3.5K

184.105.247.195USAS6939 Hurricane Electric LLC3.5K

184.105.139.67USAS6939 Hurricane Electric LLC3.4K

184.105.247.254USAS6939 Hurricane Electric LLC3.4K

74.82.47.5USAS6939 Hurricane Electric LLC3.2K

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.