JA4 TLS client fingerprint

t13i311000_e8f1e7e78f70_d41ae481755e

Seen 2026-02-19 to 2026-09-10 across the retained window.

Open in lookup →

1.2K

Source IPs

32

Networks

23

Countries

665

Ports hit

130.9K

Events

36

IPs / network

Top networks

AS14061 DigitalOcean, LLC607 IPs60.5K

AS63949 Akamai Connected Cloud356 IPs43.2K

AS59651 Alex Largman50 IPs359

AS213954 Global Transit Systems LLC45 IPs338

AS35830 Fast Servers (Pty) Ltd24 IPs151

AS43444 Fast Servers (Pty) Ltd18 IPs46

AS46475 Limestone Networks, Inc.9 IPs46

AS51167 Contabo GmbH9 IPs28

AS202425 IP Volume inc5 IPs197

AS39600 BUNNY TECHNOLOGY LLC4 IPs14

AS214664 JSC Buduschee3 IPs10

AS56048 China Mobile Communicaitons Corporation3 IPs8

Countries

US 891CA 44SC 34GB 30DE 29CN 18AU 17FR 16RU 14NL 14

Ports targeted

443/tcp 26.9K 3388/tcp 1.3K 3389/tcp 1.3K 27017/tcp 1.0K 5901/tcp 760 9200/tcp 727 5900/tcp 570 6000/tcp 568 6001/tcp 456 3376/tcp 344 943/tcp 332 800/tcp 318

What it requests

GET/6.9K

GET/nice%20ports%2C/Tri%6Eity.txt%2ebak2.8K

GET/.env296

GET/.env.production236

GET/favicon.ico213

GET/actuator/env211

GET/wp-config.php.bak199

GET/.env.local194

GET/application.yml180

GET/env160

GET/etc/passwd155

GET/appsettings.json145

User agents claimed

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36154 IPs25.6K

Mozilla/5.0 (Windows NT 10.0; Win64; x64)3 IPs952

Mozilla/5.018 IPs219

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.3610 IPs213

CryptoHunter-Vite-2026/1.02 IPs94

Source IPCCNetwork Last seenEvents

195.128.248.33UAAS6698 Virtual Systems LLC2026-08-2622.6K

185.254.197.231UAAS30860 Virtual Systems LLC2026-09-023.0K

50.116.46.114USAS63949 Akamai Connected Cloud2026-09-01471

45.33.70.184USAS63949 Akamai Connected Cloud2026-09-10456

45.33.54.208USAS63949 Akamai Connected Cloud2026-09-09456

45.79.192.72USAS63949 Akamai Connected Cloud2026-09-03430

206.189.191.128USAS14061 DigitalOcean, LLC2026-08-24402

66.228.43.62USAS63949 Akamai Connected Cloud2026-08-27392

104.248.52.1USAS14061 DigitalOcean, LLC2026-08-23390

157.230.154.114USAS14061 DigitalOcean, LLC2026-08-22386

143.198.122.236USAS14061 DigitalOcean, LLC2026-08-23367

138.197.205.162USAS14061 DigitalOcean, LLC2026-08-22358

50.116.19.153USAS63949 Akamai Connected Cloud2026-09-10342

69.164.192.153USAS63949 Akamai Connected Cloud2026-09-08342

64.227.16.244USAS14061 DigitalOcean, LLC2026-09-10342

165.227.31.79USAS14061 DigitalOcean, LLC2026-09-10342

45.33.33.130USAS63949 Akamai Connected Cloud2026-09-07340

157.230.171.130USAS14061 DigitalOcean, LLC2026-09-10333

174.138.32.218USAS14061 DigitalOcean, LLC2026-08-21318

45.79.207.209USAS63949 Akamai Connected Cloud2026-08-23316

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.