JA4 TLS client fingerprint

t13i180900_85036bcba153_1f22a2ca17c4

Seen 2026-02-23 to 2026-09-17 across the retained window.

Open in lookup →

Source IPs

Networks

Countries

Ports hit

Events

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

AS396982 Google LLC50 IPs50

AS137409 GSL Networks Pty LTD3 IPs3

AS9009 M247 Europe SRL1 IPs2

Countries

US 12AU 6FI 6CH 5BR 5NL 4GB 4DE 4BE 3DZ 3

Ports targeted

443/tcp 19 80/tcp 14 2351/tcp 11 9999/tcp 9 8090/tcp 2

What it requests

OPTIONS/53

GET/files/1

GET/www/1

User agents claimed

Mozilla/5.03 IPs3

Source IPCCNetwork Last seenEvents

77.243.184.191CHAS9009 M247 Europe SRL2026-08-262

34.13.220.56NLAS396982 Google LLC2026-09-101

34.65.38.219CHAS396982 Google LLC2026-09-171

34.179.233.241DEAS396982 Google LLC2026-09-141

34.14.41.109BEAS396982 Google LLC2026-09-071

34.19.135.137CAAS396982 Google LLC2026-08-241

34.151.245.171BRAS396982 Google LLC2026-09-141

35.199.84.9BRAS396982 Google LLC2026-08-311

34.151.183.245AUAS396982 Google LLC2026-08-271

34.159.10.188DEAS396982 Google LLC2026-09-071

34.148.164.151USAS396982 Google LLC2026-09-071

34.88.221.110FIAS396982 Google LLC2026-08-271

34.95.197.211BRAS396982 Google LLC2026-09-171

45.130.203.138DZAS137409 GSL Networks Pty LTD2026-08-251

34.13.187.63NLAS396982 Google LLC2026-09-141

34.47.57.115CAAS396982 Google LLC2026-09-141

34.88.44.224FIAS396982 Google LLC2026-08-271

34.40.190.182AUAS396982 Google LLC2026-09-141

35.247.224.223BRAS396982 Google LLC2026-08-241

34.21.19.175USAS396982 Google LLC2026-08-241

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.