JA4 TLS client fingerprint

t13i781000_ab95583b6d39_d41ae481755e

Seen 2026-02-26 to 2026-09-24 across the retained window.

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS396982 sends an email when it next hits a sensor.

301

Source IPs

Networks

Countries

Ports hit

1.7K

Events

IPs / network

Top networks

AS396982 Google LLC290 IPs1.5K

AS138195 MOACK.Co.LTD3 IPs6

AS202425 IP Volume inc2 IPs15

AS138995 Antbox Networks Limited2 IPs8

AS205960 Hdtidc Limited2 IPs6

AS53667 FranTech Solutions1 IPs113

AS9848 SEJONG NETWORKS1 IPs3

Countries

BE 289KR 5US 3SG 2GB 1CN 1

Ports targeted

636/tcp 760 445/tcp 275 389/tcp 228 53/tcp 171 3306/tcp 61 1433/tcp 22 995/tcp 13 443/tcp 11 8443/tcp 10 5900/tcp 10 22/tcp 8 135/tcp 8

What it requests

GET/389

GET/nice%20ports%2C/Tri%6Eity.txt%2ebak4

Source IPCCNetwork Last seenEvents

209.141.59.162AS0 FranTech Solutions2026-09-17113

34.79.179.46AS0 Google LLC2026-09-1630

35.190.202.202AS0 Google LLC2026-09-1327

34.62.82.68AS0 Google LLC2026-09-1524

104.199.37.139AS0 Google LLC2026-09-0222

35.195.161.223AS0 Google LLC2026-09-0419

34.79.142.143AS0 Google LLC2026-09-1019

35.205.183.239AS0 Google LLC2026-09-0119

34.140.172.141AS0 Google LLC2026-09-0519

34.14.97.10AS0 Google LLC2026-09-1517

35.187.46.141AS0 Google LLC2026-09-0417

34.52.162.228AS0 Google LLC2026-09-2417

34.53.142.56AS0 Google LLC2026-09-2017

104.199.6.237AS0 Google LLC2026-09-0817

35.233.126.188AS0 Google LLC2026-09-0216

34.79.176.118AS0 Google LLC2026-08-2616

34.53.185.182AS0 Google LLC2026-09-0616

34.62.238.163AS0 Google LLC2026-09-1916

104.199.111.106AS0 Google LLC2026-09-2416

207.175.56.234AS0 Google LLC2026-08-3016

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.