JA4 TLS client fingerprint

t13i1310h1_f57a46bbacb6_e7c285222651

Seen 2026-03-30 to 2026-09-23 across the retained window.

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS137409 sends an email when it next hits a sensor.

Source IPs

Networks

Countries

Ports hit

164

Events

IPs / network

Top networks

AS137409 GSL Networks Pty LTD15 IPs18

AS9009 M247 Europe SRL5 IPs8

AS215540 Global Connectivity Solutions Llp4 IPs21

AS212238 Datacamp Limited4 IPs5

AS399629 BL Networks3 IPs13

AS201002 PebbleHost Ltd2 IPs14

AS199058 Serva One Ltd2 IPs9

AS206092 F.n.s. Holdings Limited2 IPs2

AS203861 Miteflux Technologies Ltd1 IPs22

AS20473 The Constant Company, LLC1 IPs8

AS43641 SOLLUTIUM EU Sp z.o.o.1 IPs6

AS49981 WorldStream B.V.1 IPs5

Countries

US 21FR 5GB 3NL 3CH 3RU 2UY 2EC 2DE 2AE 1

Ports targeted

9100/tcp 8 32400/tcp 8 10250/tcp 8 7000/tcp 7 2053/tcp 6 7001/tcp 6 5222/tcp 6 3000/tcp 5 5601/tcp 4 444/tcp 4 8444/tcp 4 8091/tcp 4

What it requests

GET/164

User agents claimed

Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.028 IPs128

WanScannerBot/1.030 IPs36

Source IPCCNetwork Last seenEvents

217.60.77.23AS0 Miteflux Technologies Ltd2026-09-1322

64.49.11.225AS0 PebbleHost Ltd2026-09-1510

147.45.60.142AS0 Global Connectivity Solutions Llp2026-09-1310

217.69.2.169AS0 The Constant Company, LLC2026-09-108

162.33.178.231AS0 BL Networks2026-09-158

139.28.240.53AS0 Global Connectivity Solutions Llp2026-09-107

85.137.56.197AS0 SOLLUTIUM EU Sp z.o.o.2026-09-146

45.158.127.112AS0 Serva One Ltd2026-09-136

82.41.131.81AS0 WorldStream B.V.2026-09-145

64.49.11.184AS0 PebbleHost Ltd2026-09-134

95.182.94.63AS0 Cloud Software - FZCO2026-09-024

96.44.174.248AS0 HostPapa2026-09-024

45.151.91.48AS0 IP Vendetta Inc.2026-09-144

162.252.199.70AS0 BL Networks2026-09-103

179.43.146.27AS0 Private Layer INC2026-09-143

45.85.93.127AS0 Serva One Ltd2026-09-103

89.36.231.62AS0 Rockhoster Private Limited2026-09-083

95.181.232.51AS0 M247 Europe SRL2026-09-233

158.173.241.9AS0 Datacamp Limited2026-09-222

151.240.55.28AS0 GSL Networks Pty LTD2026-09-232

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.