TCP SYN (p0f)

4:42+22:0:1412:65535,6:mss,nop,ws,nop,nop,ts,sok,eol+1:df,ecn:0

first seen 2026-06-19 16:59 · last seen 2026-06-21 09:01 · JSON

Decomposed attributes

IP version4
Initial TTL42+22
Options length0
MSS1412
Window size65535
Window scale6
Options layoutmss,nop,ws,nop,nop,ts,sok,eol+1
Quirksdf,ecn
Payload class0

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d1714h1_5b57614c22b0_43ade6aba3df2

HTTP request (JA4H)

fingerprintco-occurrences
ge11nn040000_217776c81665_000000000000_0000000000002

User-Agent

fingerprintco-occurrences
curl/8.7.11
bun-fingerprint-check/1.01

Country

fingerprintco-occurrences
CN · China2

Network (ASN)

fingerprintco-occurrences
AS4134 · CHINANET BACKBONE2