JA4 TLS client fingerprint

t13i1313h2_f57a46bbacb6_fb48f8b98a29

Seen 2026-05-28 to 2026-06-30 across the retained window.

Open in lookup →

1.6K

Source IPs

Networks

Countries

203

Ports hit

118.3K

Events

1614

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

AS396982 Google LLC1.6K IPs118.3K

Countries

US 315DE 162IN 142BE 85NL 82GB 79FI 76BR 72CA 69HK 67

Ports targeted

9600/tcp 17.9K 9443/tcp 17.5K 27017/tcp 17.3K 8240/tcp 16.4K 11434/tcp 13.5K 8140/tcp 12.3K 8282/tcp 4.4K 8300/tcp 3.5K 82/tcp 3.0K 4100/tcp 2.5K 1080/tcp 2.2K 8888/tcp 1.1K

Source IPCCNetworkEvents

34.159.76.65DEAS396982 Google LLC17.9K

34.18.217.21QAAS396982 Google LLC17.5K

35.240.178.56SGAS396982 Google LLC17.2K

34.32.98.232DEAS396982 Google LLC16.4K

34.21.152.217SGAS396982 Google LLC13.5K

34.16.231.217USAS396982 Google LLC12.2K

34.151.91.57AUAS396982 Google LLC4.4K

34.131.191.159INAS396982 Google LLC3.5K

34.131.119.251INAS396982 Google LLC3.0K

34.84.115.133JPAS396982 Google LLC2.5K

35.236.151.222TWAS396982 Google LLC2.2K

34.93.24.84INAS396982 Google LLC1.1K

34.21.154.212SGAS396982 Google LLC845

35.234.125.250DEAS396982 Google LLC842

34.145.99.73USAS396982 Google LLC817

35.244.23.180INAS396982 Google LLC607

34.21.208.191SGAS396982 Google LLC418

35.234.81.66DEAS396982 Google LLC342

34.40.152.103AUAS396982 Google LLC325

34.130.62.231CAAS396982 Google LLC151

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.