UDP traffic / QUIC transport parameter fingerprint

60647680e335

QUIC transport parameter fingerprint. 47 datagrams in the last 30 days, last seen 2026-10-10 18:26 UTC.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Parameters as offered

1=30000,4=1048576,5=524288,6=524288,7=524288,8=100,9=100,e=8,f/8

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

QUIC

47 datagrams from 44 sources

Initial packets of HTTP/3 connections, decoded on the sensor.

QUIC 47

Latest QUIC datagram, to 443/udp

QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co

Destination ports

443/udp QUIC24
8443/udp QUIC23

QUIC clients (JA4)

q13i0307h9_55b375c5d22e_2f871f65fa7d from 16 sources16
q13i0307h9_55b375c5d22e_39d5f8cd0d4d from 16 sources16
q13i0308h3_55b375c5d22e_bc854dc9d3af from 15 sources15

QUIC transport parameters

60647680e335 from 44 sources47

QUIC versions

Networks

AS211298 Driftnet Ltd from 44 sources47

Countries

GB United Kingdom47

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
185.247.137.174	AS211298 Driftnet Ltd	GB	QUIC	2	2026-10-10 06:00
87.236.176.44	AS211298 Driftnet Ltd	GB	QUIC	2	2026-10-06 08:20
185.247.137.196	AS211298 Driftnet Ltd	GB	QUIC	2	2026-10-06 01:01
195.96.139.189	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 01:02
87.236.176.222	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 18:34
185.247.137.167	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 06:01
87.236.176.250	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 10:20
195.96.139.224	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 05:55
185.247.137.146	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-07 09:03
87.236.176.169	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-07 09:04
185.247.137.166	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 01:12
195.96.139.131	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 00:40
195.96.139.223	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 11:43
87.236.176.60	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 08:20
195.96.139.96	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 18:25
185.247.137.106	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 18:26
87.236.176.180	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 06:00
185.247.137.34	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 06:40
87.236.176.221	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 04:42
195.96.139.236	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 11:44

Latest datagrams

2026-10-10 18:26:20185.247.137.106to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 18:25:4287.236.176.107to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 18:25:04195.96.139.96to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 11:44:27195.96.139.236to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 11:43:49195.96.139.242to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 11:43:11195.96.139.223to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 06:01:35185.247.137.167to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 06:00:57185.247.137.174to 443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-10 06:00:1987.236.176.180to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-09 06:40:30185.247.137.34to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-09 06:39:53195.96.139.35to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-09 06:39:1387.236.176.34to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-09 05:56:56185.247.137.232to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-09 05:56:18195.96.139.233to 8443/udpQUICGB
QUIC v1 Initial alpn=http/0.9,http/1.0,spdy/1,spdy/2,spdy/3,stun.turn,stun.nat-discovery,h2c,webrtc,c-webrtc,ftp,imap,pop3,managesieve,coap,co
2026-10-09 05:55:40195.96.139.224to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29

About this fingerprint

A hash of the QUIC transport parameters a client offers: which parameters it sends and the values it picks for flow-control limits, idle timeout and connection IDs. Parameter order and GREASE values are normalised before hashing. Two clients with the same TLS stack but different QUIC libraries usually differ here.