JA4 TLS client fingerprint

t13i1711h1_ab0a1bf427ad_882d495ac381

Seen 2026-04-01 to 2026-07-26 across the retained window.

Open in lookup →

27

Source IPs

13

Networks

9

Countries

6

Ports hit

748

Events

2

IPs / network

Top networks

AS14061 DigitalOcean, LLC13 IPs13

AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2 IPs609

AS30058 FDCservers.net2 IPs26

AS48492 I.Q Online for Internet Services and Communications LLC1 IPs59

AS4766 Korea Telecom1 IPs11

AS16276 OVH SAS1 IPs6

AS9009 M247 Europe SRL1 IPs6

AS211443 Sino Worldwide Trading Limited1 IPs5

AS25369 Hydra Communications Ltd1 IPs4

AS138997 Eons Data Communications Limited1 IPs3

AS400992 ZhouyiSat Communications1 IPs3

AS202422 G-Core Labs S.A.1 IPs2

Countries

US 17HK 2BG 2KR 1NL 1RU 1AU 1IQ 1CZ 1

Ports targeted

5180/tcp 348 10022/tcp 261 2087/tcp 65 4434/tcp 38 443/tcp 33 8317/tcp 3

Source IPCCNetworkEvents

101.36.106.75HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED348

123.58.213.230HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED261

185.187.206.102IQAS48492 I.Q Online for Internet Services and Communications LLC59

66.90.100.114USAS30058 FDCservers.net18

14.52.137.232KRAS4766 Korea Telecom11

50.7.230.82NLAS30058 FDCservers.net8

80.87.206.103RUAS16276 OVH SAS6

146.70.129.114CZAS9009 M247 Europe SRL6

91.92.41.151BGAS211443 Sino Worldwide Trading Limited5

85.11.187.4BGAS25369 Hydra Communications Ltd4

185.228.72.109USAS400992 ZhouyiSat Communications3

65.75.223.56USAS138997 Eons Data Communications Limited3

103.30.211.135AUAS202422 G-Core Labs S.A.2

138.197.204.39USAS14061 DigitalOcean, LLC1

165.22.163.25USAS14061 DigitalOcean, LLC1

137.184.137.241USAS14061 DigitalOcean, LLC1

165.22.143.220USAS14061 DigitalOcean, LLC1

165.22.152.198USAS14061 DigitalOcean, LLC1

146.190.210.92USAS14061 DigitalOcean, LLC1

138.68.7.126USAS14061 DigitalOcean, LLC1

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.