JA4 TLS client fingerprint

t12i330500_5172cef6ed69_021165082e1c

Seen 2026-02-19 to 2026-06-30 across the retained window.

Open in lookup →

427

Source IPs

Networks

Countries

263

Ports hit

12.3K

Events

142

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

AS211680 Sistemas Informaticos, S.A.228 IPs6.5K

AS21859 Zenlayer Inc183 IPs5.8K

AS0 16 IPs88

Countries

PT 427

Ports targeted

443/tcp 1.1K 8443/tcp 927 4443/tcp 328 9443/tcp 205 53/tcp 180 444/tcp 178 10443/tcp 123 5001/tcp 111 6443/tcp 91 5577/tcp 85 7443/tcp 77 4433/tcp 73

Source IPCCNetworkEvents

109.105.210.74PTAS21859 Zenlayer Inc73

185.226.197.30PTAS21859 Zenlayer Inc68

45.156.128.99PTAS211680 Sistemas Informaticos, S.A.67

45.156.128.59PTAS211680 Sistemas Informaticos, S.A.65

45.156.128.58PTAS211680 Sistemas Informaticos, S.A.62

45.156.128.72PTAS211680 Sistemas Informaticos, S.A.62

185.226.196.14PTAS21859 Zenlayer Inc61

45.156.129.67PTAS211680 Sistemas Informaticos, S.A.61

45.156.129.125PTAS211680 Sistemas Informaticos, S.A.60

109.105.210.68PTAS21859 Zenlayer Inc59

45.156.129.70PTAS211680 Sistemas Informaticos, S.A.59

185.226.196.12PTAS21859 Zenlayer Inc59

45.156.128.96PTAS211680 Sistemas Informaticos, S.A.58

109.105.209.10PTAS21859 Zenlayer Inc58

185.226.197.27PTAS21859 Zenlayer Inc58

109.105.210.60PTAS21859 Zenlayer Inc58

45.156.128.69PTAS211680 Sistemas Informaticos, S.A.58

185.226.197.29PTAS21859 Zenlayer Inc57

185.226.197.7PTAS21859 Zenlayer Inc57

45.156.129.62PTAS211680 Sistemas Informaticos, S.A.57

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.