JA4 TLS client fingerprint
t13i131300_f57a46bbacb6_47d1ff9c9a84
Seen 2026-02-23 to 2026-06-10 across the retained window.
69
Source IPs
2
Networks
7
Countries
129
Ports hit
14.9K
Events
34
IPs / network
This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.
Top networks
Countries
DE 20US 18CA 9GB 7NL 7SG 6IN 2
Source IPCCNetworkEvents
About this fingerprint
JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.