HoneyLabs

JA4 TLS client fingerprint

t13i131000_f57a46bbacb6_e5728521abd4

Seen 2026-02-19 to 2026-07-28 across the retained window.

708

Source IPs

258

Networks

85

Countries

2.1K

Ports hit

17.0K

Events

3

IPs / network

Top networks

Countries

US 184SE 56BR 55DE 30NL 26AR 22SG 20CL 19GB 17RU 15

Ports targeted

Source IPCCNetworkEvents
130.12.180.105USAS202412 Omegatech LTD1.3K
45.148.10.247NLAS48090 Techoff Srv Limited886
178.16.53.180NLAS202412 Omegatech LTD756
158.94.208.228DEAS202412 Omegatech LTD672
5.61.209.224SCAS206264 Amarutu Technology Ltd628
130.12.180.29USAS202412 Omegatech LTD521
5.187.35.142NLAS206264 Amarutu Technology Ltd473
178.16.54.62NLAS202412 Omegatech LTD450
195.178.110.133BGAS48090 Techoff Srv Limited338
5.187.35.26NLAS206264 Amarutu Technology Ltd291
37.77.150.10RUAS198953 Proton66 OOO241
195.178.110.104BGAS48090 Techoff Srv Limited216
195.178.110.157BGAS48090 Techoff Srv Limited216
178.16.53.233NLAS202412 Omegatech LTD216
195.178.110.132BGAS48090 Techoff Srv Limited216
103.168.67.107USAS142430 DIGI VPS154
195.178.110.155BGAS48090 Techoff Srv Limited153
93.123.109.165BGAS48090 Techoff Srv Limited146
192.161.49.2USAS23273 HostPapa105
104.152.52.207USAS14987 Rethem Hosting LLC104

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.