User-Agent

Claude-User (claude-code/2.1.220; +https://support.anthropic.com/)

first seen 2026-07-29 01:03 · last seen 2026-07-31 04:08 · JSON

Decomposed attributes

Browser / clientclaude-code 2.1.220
Device classbot
Declared URLhttps://support.anthropic.com/
Noteinferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d171000_5b57614c22b0_78e6aca7449b4

HTTP request (JA4H)

fingerprintco-occurrences
ge11nn050000_2469c960a647_000000000000_0000000000004

TCP SYN (p0f)

fingerprintco-occurrences
4:50+14:0:1460:mss*29,10:mss,sok,ts,nop,ws:df,id+:02
4:55+9:0:1460:mss*44,10:mss,sok,ts,nop,ws:df,id+:01
4:47+17:0:1460:mss*29,10:mss,sok,ts,nop,ws:df,id+:01

TCP SYN (JA4T)

fingerprintco-occurrences
42340_2-4-8-1-3_1460_103
64240_2-4-8-1-3_1460_101

Country

fingerprintco-occurrences
SG · Singapore3
AU · Australia1

Network (ASN)

fingerprintco-occurrences
AS396856 · Sharon Networks, LLC3
AS38195 · Superloop1