HoneyLabs

JA4 TLS client fingerprint

t13i140900_cbb2034c60b8_e7c285222651

Seen 2026-02-19 to 2026-06-21 across the retained window.

2.1K

Source IPs

51

Networks

31

Countries

1.5K

Ports hit

83.9K

Events

40

IPs / network

Top networks

AS396982 Google LLC1.9K IPs79.2K
AS0 3 IPs120

Countries

US 1.5KGB 494NL 22SG 9DE 8HK 7CH 6BG 6BR 6CA 4

Ports targeted

Source IPCCNetworkEvents
45.148.10.67NLAS48090 Techoff Srv Limited1.6K
162.216.150.144USAS396982 Google LLC427
147.185.133.237USAS396982 Google LLC400
35.203.210.195GBAS396982 Google LLC363
35.203.210.220GBAS396982 Google LLC343
35.203.211.139GBAS396982 Google LLC332
35.203.211.110GBAS396982 Google LLC314
47.251.93.227USAS45102 Alibaba US Technology Co., Ltd.312
35.203.210.63GBAS396982 Google LLC273
35.203.210.121GBAS396982 Google LLC268
47.91.125.252AEAS45102 Alibaba US Technology Co., Ltd.264
165.22.224.68CAAS14061 DigitalOcean, LLC261
147.185.132.71USAS396982 Google LLC256
162.216.150.26USAS396982 Google LLC252
147.185.132.169USAS396982 Google LLC248
35.203.211.184GBAS396982 Google LLC241
147.185.133.179USAS396982 Google LLC235
147.185.133.22USAS396982 Google LLC234
162.216.150.181USAS396982 Google LLC233
147.185.133.120USAS396982 Google LLC232

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.