JA4 TLS client fingerprint

t13i180900_e8a523a41297_78e6aca7449b

Seen 2026-02-20 to 2026-09-24 across the retained window.

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS213954 sends an email when it next hits a sensor.

Source IPs

Networks

Countries

194

Ports hit

576

Events

IPs / network

Top networks

AS213954 Global Transit Systems LLC19 IPs25

AS137409 GSL Networks Pty LTD8 IPs78

AS213388 Iic Rail Limited4 IPs216

AS46475 Limestone Networks, Inc.3 IPs4

AS26548 PureVoltage Hosting Inc.3 IPs3

AS202412 Omegatech LTD2 IPs244

AS212238 Datacamp Limited1 IPs3

AS211632 Internet Solutions & Innovations LTD.1 IPs3

Countries

US 34RO 4NL 2UA 1

Ports targeted

443/tcp 116 10443/tcp 13 4433/tcp 13 80/tcp 13 8443/tcp 10 4443/tcp 10 3389/tcp 9 500/tcp 9 1723/tcp 9 4500/tcp 9 9443/tcp 8 20443/tcp 8

What it requests

GET/remote/login172

GET/global-protect/login.esp117

GET/RDWeb/Pages/110

GET/+CSCOE+/logon.html110

GET/vpn/index.html36

GET/sslvpn_logon.shtml23

GET/tcp/vpn/index.html7

GET/1

User agents claimed

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.20341 IPs576

Source IPCCNetwork Last seenEvents

130.12.180.19AS0 Omegatech LTD2026-09-18196

45.142.193.213AS0 Iic Rail Limited2026-09-1694

45.142.193.149AS0 Iic Rail Limited2026-09-1776

151.240.104.196AS0 GSL Networks Pty LTD2026-09-1755

130.12.180.35AS0 Omegatech LTD2026-09-1548

45.142.193.24AS0 Iic Rail Limited2026-09-0723

45.142.193.239AS0 Iic Rail Limited2026-09-0823

151.240.46.221AS0 GSL Networks Pty LTD2026-09-218

151.240.46.176AS0 GSL Networks Pty LTD2026-09-246

151.240.104.132AS0 GSL Networks Pty LTD2026-09-224

188.119.190.247AS0 Datacamp Limited2026-09-113

45.147.11.70AS0 Global Transit Systems LLC2026-09-213

5.181.86.188AS0 Internet Solutions & Innovations LTD.2026-09-113

104.245.242.201AS0 Global Transit Systems LLC2026-09-223

193.142.37.48AS0 Global Transit Systems LLC2026-09-232

104.245.241.220AS0 Global Transit Systems LLC2026-09-242

151.240.92.42AS0 GSL Networks Pty LTD2026-09-122

83.97.117.178AS0 Limestone Networks, Inc.2026-09-232

104.245.243.30AS0 Global Transit Systems LLC2026-09-231

45.159.23.29AS0 Global Transit Systems LLC2026-09-141

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.