JA4 TLS client fingerprint

t13i2510h2_b78ed14e2fd0_e7c285222651

Seen 2026-07-17 to 2026-09-23 across the retained window.

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS45102 sends an email when it next hits a sensor.

498

Source IPs

Networks

Countries

389

Ports hit

2.3K

Events

166

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

AS45102 Alibaba (US) Technology Co., Ltd.488 IPs2.2K

AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED6 IPs33

AS137280 Kingsoft cloud corporation limited4 IPs27

Countries

SG 330US 168

Ports targeted

7547/tcp 19 8111/tcp 17 9091/tcp 16 8200/tcp 16 9999/tcp 15 8008/tcp 15 10443/tcp 14 10000/tcp 14 9443/tcp 14 9191/tcp 14 8444/tcp 14 8332/tcp 14

What it requests

GET/favicon.ico2.3K

User agents claimed

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36498 IPs2.3K

Source IPCCNetwork Last seenEvents

43.106.53.162AS0 Alibaba (US) Technology Co., Ltd.2026-08-3017

43.98.205.217AS0 Alibaba (US) Technology Co., Ltd.2026-09-1317

47.77.177.220AS0 Alibaba (US) Technology Co., Ltd.2026-09-1815

43.106.48.44AS0 Alibaba (US) Technology Co., Ltd.2026-09-1315

43.98.191.85AS0 Alibaba (US) Technology Co., Ltd.2026-08-2514

47.237.0.46AS0 Alibaba (US) Technology Co., Ltd.2026-09-1314

43.106.58.188AS0 Alibaba (US) Technology Co., Ltd.2026-09-2314

43.98.199.249AS0 Alibaba (US) Technology Co., Ltd.2026-09-1314

43.98.177.139AS0 Alibaba (US) Technology Co., Ltd.2026-08-3012

47.84.108.25AS0 Alibaba (US) Technology Co., Ltd.2026-08-3012

43.98.181.148AS0 Alibaba (US) Technology Co., Ltd.2026-08-3012

47.254.37.72AS0 Alibaba (US) Technology Co., Ltd.2026-09-2312

43.106.53.135AS0 Alibaba (US) Technology Co., Ltd.2026-09-2312

47.84.123.87AS0 Alibaba (US) Technology Co., Ltd.2026-09-1312

43.106.53.209AS0 Alibaba (US) Technology Co., Ltd.2026-09-1312

43.98.197.47AS0 Alibaba (US) Technology Co., Ltd.2026-09-1311

104.250.53.219AS0 Kingsoft cloud corporation limited2026-09-2111

165.154.29.157AS0 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2111

43.106.48.6AS0 Alibaba (US) Technology Co., Ltd.2026-09-2311

43.106.53.195AS0 Alibaba (US) Technology Co., Ltd.2026-09-1311

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.