UDP traffic / QUIC transport parameter fingerprint

24dc672a03ab

QUIC transport parameter fingerprint. 1 datagrams in the last 30 days, last seen 2026-10-07 10:56 UTC.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Parameters as offered

3=1472,4=16777216,5=65536,6=65536,7=65536,a=8,b=41,e=4,f/0,ff03de1a

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

QUIC

1 datagrams from 1 source

Initial packets of HTTP/3 connections, decoded on the sensor.

QUIC 1

Latest QUIC datagram, to 443/udp

QUIC v1 Initial alpn=smb

Destination ports

443/udp QUIC1

QUIC clients (JA4)

q13i0213sb_62ed6f6ca7ad_03ad308c6343 from 1 source1

QUIC transport parameters

24dc672a03ab from 1 source1

QUIC versions

Networks

AS3216 PVimpelCom from 1 source1

Countries

RU Russia1

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
62.105.128.170	AS3216 PVimpelCom	RU	QUIC	1	2026-10-07 10:56

Latest datagrams

2026-10-07 10:56:1562.105.128.170to 443/udpQUICRU
QUIC v1 Initial alpn=smb

About this fingerprint

A hash of the QUIC transport parameters a client offers: which parameters it sends and the values it picks for flow-control limits, idle timeout and connection IDs. Parameter order and GREASE values are normalised before hashing. Two clients with the same TLS stack but different QUIC libraries usually differ here.