HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

JA4 TLS client fingerprint

t13i130900_f57a46bbacb6_e7c285222651

Seen 2026-02-19 to 2026-09-23 across the retained window.

Open in lookup →

4.4K

Source IPs

68

Networks

38

Countries

4.4K

Ports hit

70.9K

Events

65

IPs / network

Top networks

AS4837 CHINA UNICOM China169 Backbone1.2K IPs1.3K
AS200373 3xK Tech GmbH1.1K IPs1.2K
AS4134 Chinanet973 IPs1.1K
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED539 IPs56.7K
AS140061 Qinghai Telecom71 IPs76
AS26548 PureVoltage Hosting Inc.69 IPs69
AS17638 ASN for TIANJIN Provincial Net of CT58 IPs60
AS17622 China Unicom Guangzhou network58 IPs60
AS137266 CHINATELECOM Hubei province Wuhan 5G network55 IPs56
AS17621 China Unicom Shanghai network42 IPs42
AS46475 Limestone Networks, Inc.30 IPs30
AS136907 HUAWEI CLOUDS13 IPs345

Countries

CN 2.5KUS 822DE 143BR 132GB 120FR 105HK 73TH 66CA 44JP 43

Ports targeted

8443/tcp 3618000/tcp 2888888/tcp 2878080/tcp 280443/tcp 2789999/tcp 1876379/tcp 181587/tcp 1776443/tcp 1768899/tcp 1738081/tcp 1688009/tcp 168

What it requests

GET/19.1K
GET/robots.txt10.9K
GET/sitemap.xml10.9K
GET/config.json10.9K
GET/favicon.ico10.9K
GET/aab9607
GET/aaa9606
GET/dana-na507
GET/remote/login507
POST/global-protect/prelogin.esp?tmp=tmp&clientVer=4100&clientos=Windows507
GET/sslvpnclient?launchplatform=mac&neProto=3&supportipv6=yes507
GET/my.policy448

User agents claimed

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0562 IPs43.7K
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11562 IPs11.3K
what-vpn-go/0.1119 IPs3.3K
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36242 IPs1.6K
Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.01 IPs1.3K
Source IPCCNetwork Last seenEvents
91.92.43.222DEAS207043 Dedik Services Limited2026-09-233.4K
94.26.83.79DEAS207043 Dedik Services Limited2026-09-233.3K
150.107.36.82HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-231.4K
45.91.64.6RUAS214664 JSC Buduschee2026-09-23642
45.91.64.8RUAS214664 JSC Buduschee2026-09-16475
45.91.64.7RUAS214664 JSC Buduschee2026-09-22334
165.154.138.34DEAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-17287
165.154.138.33DEAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-15285
165.154.163.199USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-15285
152.32.181.210AEAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-17284
152.32.243.98KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-15279
165.154.100.42PHAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-15277
165.154.162.102USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-15276
152.32.156.95INAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-15272
152.32.180.86AEAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-18272
118.193.47.114HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-15266
165.154.164.57DEAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-18264
118.193.56.184THAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-15262
118.194.238.196PHAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-18262
152.32.235.78USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-18261

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.