JA4 TLS client fingerprint

t13i1811h1_85036bcba153_d41ae481755e

Seen 2026-02-19 to 2026-07-27 across the retained window.

Open in lookup →

104

Source IPs

34

Networks

16

Countries

589

Ports hit

15.0K

Events

3

IPs / network

Top networks

AS21859 Zenlayer Inc32 IPs7.6K

AS211680 Sistemas Informaticos, S.A.22 IPs5.7K

AS14956 RouterHosting LLC7 IPs8

AS4837 CHINA UNICOM China169 Backbone5 IPs20

AS42708 Glesys AB3 IPs8

AS4134 Chinanet3 IPs5

AS0 2 IPs122

AS36352 HostPapa2 IPs25

AS47890 Unmanaged Ltd2 IPs7

AS397423 Tier.Net Technologies LLC2 IPs2

AS63949 Akamai Connected Cloud1 IPs1.3K

AS400619 AROSSCLOUD INC.1 IPs86

Countries

PT 55US 19CN 9DK 3SG 3BG 2DE 2BR 2RO 2GB 1

Ports targeted

53/tcp 281 443/tcp 255 3000/tcp 134 8443/tcp 133 5577/tcp 127 80/tcp 83 2087/tcp 75 37/tcp 71 2000/tcp 70 84/tcp 69 13/tcp 67 389/tcp 67

Source IPCCNetworkEvents

96.126.104.20USAS63949 Akamai Connected Cloud1.3K

185.226.197.27PTAS21859 Zenlayer Inc351

185.226.196.12PTAS21859 Zenlayer Inc349

45.156.128.96PTAS211680 Sistemas Informaticos, S.A.330

45.156.128.56PTAS211680 Sistemas Informaticos, S.A.326

109.105.210.72PTAS21859 Zenlayer Inc324

45.156.129.60PTAS211680 Sistemas Informaticos, S.A.322

45.156.129.65PTAS211680 Sistemas Informaticos, S.A.313

185.180.141.42PTAS21859 Zenlayer Inc309

45.156.129.100PTAS211680 Sistemas Informaticos, S.A.309

45.156.129.70PTAS211680 Sistemas Informaticos, S.A.306

185.180.141.12PTAS21859 Zenlayer Inc303

45.156.128.61PTAS211680 Sistemas Informaticos, S.A.303

45.156.128.71PTAS211680 Sistemas Informaticos, S.A.302

185.226.197.7PTAS21859 Zenlayer Inc299

45.156.129.90PTAS211680 Sistemas Informaticos, S.A.293

109.105.210.67PTAS21859 Zenlayer Inc293

109.105.210.57PTAS21859 Zenlayer Inc291

185.226.197.47PTAS21859 Zenlayer Inc290

45.156.129.85PTAS211680 Sistemas Informaticos, S.A.288

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.