Network (ASN)
AS198953
first seen 2026-08-30 02:47 · last seen 2026-10-29 08:27 · JSON
Last 7 days (1 observations)
Distinct clients per day (last 30 days, peak 1/day)
Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.
Decomposed attributes
| Network name | Proton66 OOO |
|---|---|
| Domain | proton66.ru |
Co-observed signals
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.
TLS ClientHello (JA4)
| fingerprint | co-occurrences |
|---|---|
t12d210700_76e208dd3e22_f28add8e7af0 | 4 |
t13d1011h1_61a7ad8aa9b6_3a8073edd8ef | 1 |
t12d240600_9295eb73ea51_3ca778f33b42 | 1 |
HTTP request (JA4H)
TCP SYN (p0f)
TCP SYN (JA4T)
| fingerprint | co-occurrences |
|---|---|
64240_2-1-3-1-1-4_1460_8 | 5 |
8192_2-1-3-1-1-4_1460_8 | 1 |
User-Agent
Country
| fingerprint | co-occurrences |
|---|---|
RU · Russia | 6 |
TLS supported groups
| fingerprint | co-occurrences |
|---|---|
0017,0018 | 1 |