JA4 TLS client fingerprint

t13i1515h2_8daaf6152771_d8a2da3f94cd

Seen 2026-02-22 to 2026-07-27 across the retained window.

Open in lookup →

177

Source IPs

38

Networks

14

Countries

617

Ports hit

5.7K

Events

5

IPs / network

Top networks

AS25369 Hydra Communications Ltd46 IPs62

AS14061 DigitalOcean, LLC20 IPs3.6K

AS63949 Akamai Connected Cloud18 IPs18

AS207043 Dedik Services Limited10 IPs181

AS200373 3xK Tech GmbH8 IPs202

AS212238 Datacamp Limited8 IPs44

AS211590 Bucklog SARL6 IPs12

AS216472 High Speed For Internet Services L.L.C6 IPs6

AS2856 British Telecommunications Limited4 IPs4

AS3320 Deutsche Telekom AG4 IPs4

AS5089 Virgin Media4 IPs4

AS7922 Comcast Cable Communications, LLC4 IPs4

Countries

US 54DE 47GB 39FR 7NL 7RU 6PL 6JM 2AM 2IQ 2

Ports targeted

4001/tcp 189 7443/tcp 172 443/tcp 150 8443/tcp 61 19200/tcp 54 4444/tcp 39 4443/tcp 39 1194/tcp 38 9030/tcp 34 65505/tcp 34 4433/tcp 32 8501/tcp 29

Source IPCCNetworkEvents

165.227.213.98USAS14061 DigitalOcean, LLC3.5K

185.181.229.69MDAS60602 Inovare-Prim SRL353

95.215.0.144RUAS34665 Petersburg Internet Network ltd.259

5.101.64.6RUAS34665 Petersburg Internet Network ltd.259

46.161.50.108RUAS34665 Petersburg Internet Network ltd.241

45.91.64.8RUAS214664 JSC Buduschee172

45.91.64.7RUAS214664 JSC Buduschee149

45.91.64.6RUAS214664 JSC Buduschee136

104.167.25.34USAS200373 3xK Tech GmbH98

209.50.170.4USAS200373 3xK Tech GmbH43

91.92.33.34DEAS207043 Dedik Services Limited34

216.26.239.16BRAS200373 3xK Tech GmbH28

93.152.224.157DEAS207043 Dedik Services Limited27

91.92.33.66DEAS207043 Dedik Services Limited27

91.92.33.65DEAS207043 Dedik Services Limited21

91.92.43.130DEAS207043 Dedik Services Limited18

84.233.216.247DEAS212238 Datacamp Limited18

65.111.13.80USAS200373 3xK Tech GmbH18

93.152.224.173DEAS207043 Dedik Services Limited13

91.92.43.129DEAS207043 Dedik Services Limited12

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.