JA4 TLS client fingerprint

t13i3111h1_e8f1e7e78f70_b26ce05bbdd6

Seen 2026-03-15 to 2026-07-06 across the retained window.

Open in lookup →

40

Source IPs

28

Networks

17

Countries

60

Ports hit

1.3K

Events

1

IPs / network

This fingerprint is spread thinly across many networks, which is the shape of a common, widely-used client.

Top networks

AS13335 Cloudflare, Inc.8 IPs10

AS14061 DigitalOcean, LLC3 IPs12

AS8075 Microsoft Corporation3 IPs3

AS56971 Cgi Global Limited2 IPs3

AS6698 Virtual Systems LLC1 IPs644

AS215292 Gravhosting LLC1 IPs239

AS41557 Drustvo za telekomunikaciski uslugi TELEKABEL DOOEL Stip1 IPs173

AS44118 BalkanTel DOO1 IPs72

AS14618 Amazon.com, Inc.1 IPs36

AS213790 Limited Network LTD1 IPs20

AS51167 Contabo GmbH1 IPs20

AS209605 UAB Host Baltic1 IPs17

Countries

US 14SG 4FR 3BG 2DE 2SC 2AT 2NL 2LT 1MK 1

Ports targeted

443/tcp 697 2087/tcp 73 554/tcp 18 9999/tcp 18 5554/tcp 18 8008/tcp 18 89/tcp 18 8080/tcp 18 35000/tcp 18 84/tcp 13 5000/tcp 12 8082/tcp 12

Source IPCCNetworkEvents

195.128.248.33UAAS6698 Virtual Systems LLC644

81.161.239.13USAS215292 Gravhosting LLC239

89.205.21.201MKAS41557 Drustvo za telekomunikaciski uslugi TELEKABEL DOOEL Stip173

95.169.194.18BGAS44118 BalkanTel DOO72

3.208.183.244USAS14618 Amazon.com, Inc.36

167.86.76.227DEAS51167 Contabo GmbH20

172.94.9.60IRAS213790 Limited Network LTD20

185.36.81.23LTAS209605 UAB Host Baltic17

178.128.58.50SGAS14061 DigitalOcean, LLC6

149.202.85.196FRAS16276 OVH SAS5

93.123.109.214BGAS48090 Techoff Srv Limited4

45.156.87.67NLAS51396 Pfcloud UG (haftungsbeschrankt)4

206.189.184.244USAS14061 DigitalOcean, LLC4

46.151.182.131NLAS205759 Ghosty Networks LLC4

104.28.195.166USAS13335 Cloudflare, Inc.3

193.135.9.84DEAS48314 IP-Projects GmbH & Co. KG3

160.119.76.10SCAS49870 Alsycon B.V.3

81.217.16.32ATAS8339 kabelplus GmbH2

139.59.101.20SGAS14061 DigitalOcean, LLC2

85.192.27.231ATAS210644 Aeza International Ltd2

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.