JA4 TLS client fingerprint

t13i3112h1_e8f1e7e78f70_d339722ba4af

Seen 2026-02-20 to 2026-07-27 across the retained window.

Open in lookup →

1.5K

Source IPs

Networks

Countries

553

Ports hit

11.5K

Events

516

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

AS14061 DigitalOcean, LLC965 IPs6.7K

AS63949 Akamai Connected Cloud581 IPs4.8K

AS0 1 IPs1

Countries

US 1.5KCA 30AU 16GB 14DE 12

Ports targeted

443/tcp 706 4433/tcp 664 8443/tcp 663 4443/tcp 617 4444/tcp 518 943/tcp 31 1993/tcp 31 1976/tcp 30 1987/tcp 30 440/tcp 30 106/tcp 30 998/tcp 29

Source IPCCNetworkEvents

157.245.190.121USAS14061 DigitalOcean, LLC88

165.227.23.2USAS14061 DigitalOcean, LLC86

66.228.53.105USAS63949 Akamai Connected Cloud85

157.230.180.226USAS14061 DigitalOcean, LLC83

74.207.243.171USAS63949 Akamai Connected Cloud83

165.227.21.39USAS14061 DigitalOcean, LLC81

66.228.53.163USAS63949 Akamai Connected Cloud81

159.65.226.156USAS14061 DigitalOcean, LLC80

50.116.19.134USAS63949 Akamai Connected Cloud80

167.99.4.153USAS14061 DigitalOcean, LLC80

178.128.179.48USAS14061 DigitalOcean, LLC80

45.79.207.14USAS63949 Akamai Connected Cloud80

159.89.55.59USAS14061 DigitalOcean, LLC80

74.207.252.109USAS63949 Akamai Connected Cloud80

45.79.202.194USAS63949 Akamai Connected Cloud80

167.172.121.214USAS14061 DigitalOcean, LLC79

45.56.72.239USAS63949 Akamai Connected Cloud79

138.68.248.32USAS14061 DigitalOcean, LLC79

147.182.179.26USAS14061 DigitalOcean, LLC79

45.79.103.44USAS63949 Akamai Connected Cloud79

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.