JA4 TLS client fingerprint

t13i1311h2_f57a46bbacb6_ab7e3b40a677

Seen 2026-03-17 to 2026-09-17 across the retained window.

Open in lookup →

2.6K

Source IPs

25

Networks

18

Countries

2.3K

Ports hit

38.6K

Events

105

IPs / network

Top networks

AS45102 Alibaba (US) Technology Co., Ltd.2.6K IPs10.7K

AS37963 Hangzhou Alibaba Advertising Co.,Ltd.11 IPs35

AS212512 Detai Prosperous Technologies Limited10 IPs55

AS16276 OVH SAS7 IPs13

AS208137 Feo Prest SRL3 IPs11.8K

AS132203 Tencent Building, Kejizhongyi Avenue3 IPs6

AS26496 GoDaddy.com, LLC2 IPs4

Unattributed2 IPs4

AS151858 INTERDIGI JOINT STOCK COMPANY2 IPs4

AS51167 Contabo GmbH2 IPs4

AS204428 SS-Net1 IPs16.0K

AS12874 Fastweb1 IPs2

Countries

US 715JP 508DE 485SG 447MY 444CN 13FR 7TW 2VN 2IN 2

Ports targeted

443/tcp 14.7K 3000/tcp 12.2K 8000/tcp 1.0K 9443/tcp 125 8088/tcp 76 7080/tcp 73 5060/tcp 71 8002/tcp 69 8020/tcp 67 8443/tcp 67 9100/tcp 66 80/tcp 64

What it requests

GET/10.9K

GET/api/.env171

GET/.env171

GET/backend/.env171

GET/phpinfo/170

GET/admin/.env170

GET/phpinfo.php169

GET/core/.env169

GET/laravel/.env169

GET/?phpinfo=-1168

GET/test168

GET/app/.env167

User agents claimed

curl/7.74.02.6K IPs10.7K

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/4.0)1 IPs330

Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.133 Safari/534.161 IPs330

Mozilla/5.0 (X11; U; Linux i686; fr; rv:1.8.0.1) Gecko/20060124 Firefox/1.5.0.11 IPs330

Mozilla/5.0 (X11; U; Linux i686; de-DE; rv:1.7.13) Gecko/20060411 Firefox/1.0.8 SUSE/1.0.8-0.21 IPs330

Source IPCCNetwork Last seenEvents

80.94.95.211ROAS204428 SS-Net2026-09-1716.0K

213.209.159.175DEAS208137 Feo Prest SRL2026-09-178.1K

213.209.159.154DEAS208137 Feo Prest SRL2026-09-163.6K

45.131.155.110DEAS212512 Detai Prosperous Technologies Limited2026-09-0614

8.216.3.1JPAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0713

8.216.16.114JPAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0813

47.250.11.50MYAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0913

45.131.155.111DEAS212512 Detai Prosperous Technologies Limited2026-09-0412

8.209.97.27DEAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0812

47.250.92.255MYAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0812

8.209.70.233DEAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0612

47.250.146.92MYAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0911

47.245.130.209DEAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0811

47.250.131.218MYAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0711

47.250.135.69MYAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0711

8.211.47.177DEAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0811

47.251.175.17USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0711

47.251.166.223USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0811

47.251.82.43USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0211

47.251.250.76USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0710

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.