JA4 TLS client fingerprint

t13i1113h2_5e2a75874763_89e9e4bb3419

Seen 2026-04-16 to 2026-07-27 across the retained window.

Open in lookup →

Source IPs

Networks

Countries

280

Ports hit

674

Events

IPs / network

Top networks

AS35042 Layer7 Networks GmbH10 IPs673

AS209132 Alviva Holding Limited1 IPs1

Countries

DE 10VU 1

Ports targeted

443/tcp 7 2031/tcp 6 1092/tcp 5 2002/tcp 4 2041/tcp 4 1066/tcp 4 1028/tcp 4 2039/tcp 4 2066/tcp 4 2006/tcp 4 1001/tcp 4 2079/tcp 4

Source IPCCNetworkEvents

88.214.25.134DEAS35042 Layer7 Networks GmbH88

88.214.25.130DEAS35042 Layer7 Networks GmbH87

88.214.25.137DEAS35042 Layer7 Networks GmbH82

88.214.25.138DEAS35042 Layer7 Networks GmbH76

88.214.25.135DEAS35042 Layer7 Networks GmbH73

88.214.25.131DEAS35042 Layer7 Networks GmbH72

88.214.25.136DEAS35042 Layer7 Networks GmbH66

88.214.25.132DEAS35042 Layer7 Networks GmbH64

88.214.25.133DEAS35042 Layer7 Networks GmbH59

88.214.25.59DEAS35042 Layer7 Networks GmbH6

147.45.112.222VUAS209132 Alviva Holding Limited1

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.