HoneyLabs

JA4 TLS client fingerprint

t12d130600_2d7513195f68_e51b7354d87f

Seen 2026-05-03 to 2026-09-20 across the retained window.

23

Source IPs

2

Networks

2

Countries

2

Ports hit

51

Events

12

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

Countries

US 22CA 1

Ports targeted

What it requests

GET/18

User agents claimed

Mozilla/5.0 (Linux; Android 11; M2004J15SC) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Mobile Safari/537.3621 IPs49
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.32 IPs2
Source IPCCNetwork Last seenEvents
47.251.11.3USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-135
47.89.195.210USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-133
47.88.94.161USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-193
47.88.93.234USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-083
47.254.76.138USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-193
47.88.94.159USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-183
47.88.86.63USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-053
47.254.25.10USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-133
47.88.94.28USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-103
47.254.85.182USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-202
47.88.5.56USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-202
47.88.90.156USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-112
47.254.16.187USAS45102 Alibaba (US) Technology Co., Ltd.2026-08-292
47.251.13.32USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-032
47.89.193.162USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-182
47.254.74.59USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-192
47.88.78.6USAS45102 Alibaba (US) Technology Co., Ltd.2026-08-282
47.88.6.178USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-021
159.203.160.137USAS14061 DigitalOcean, LLC2026-08-251
47.88.87.97USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-021

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.