HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
DocsBlog
Dashboard

JA4 TLS client fingerprint

t13i140900_cbb2034c60b8_e7c285222651

Seen 2026-02-19 to 2026-08-16 across the retained window.

Open in lookup →

2.1K

Source IPs

73

Networks

33

Countries

1.5K

Ports hit

159.3K

Events

29

IPs / network

Top networks

AS396982 Google LLC2.0K IPs152.8K
AS14061 DigitalOcean, LLC19 IPs393
AS45102 Alibaba US Technology Co., Ltd.14 IPs2.8K
AS51396 Pfcloud UG (haftungsbeschrankt)14 IPs84
AS17623 China Unicom Shenzen network7 IPs43
AS51852 Private Layer INC6 IPs107
AS36352 HostPapa6 IPs75
AS210644 Aeza Group LLC6 IPs34
AS41745 Baykov Ilya Sergeevich5 IPs200
AS215439 Play2go International Limited5 IPs153
AS219502 Storm Industries LLC4 IPs67
AS25820 IT7 Networks Inc4 IPs33

Countries

US 1.5KGB 505NL 37DE 15CN 11SG 9CH 8HK 7BG 7BR 6

Ports targeted

443/tcp 5.2K8443/tcp 2857681/tcp 2352087/tcp 2214443/tcp 2193344/tcp 2104332/tcp 20043676/tcp 19931337/tcp 1995556/tcp 1994432/tcp 1975557/tcp 194
Source IPCCNetworkEvents
45.148.10.67NLAS48090 Techoff Srv Limited1.6K
162.216.150.144USAS396982 Google LLC624
35.203.211.42GBAS396982 Google LLC516
147.185.132.169USAS396982 Google LLC493
8.208.10.94GBAS45102 Alibaba US Technology Co., Ltd.456
162.216.150.37USAS396982 Google LLC450
147.185.133.176USAS396982 Google LLC434
147.185.133.237USAS396982 Google LLC432
147.185.133.48USAS396982 Google LLC415
47.251.93.227USAS45102 Alibaba US Technology Co., Ltd.408
162.216.150.150USAS396982 Google LLC383
162.216.150.13USAS396982 Google LLC380
35.203.211.184GBAS396982 Google LLC378
35.203.210.195GBAS396982 Google LLC376
35.203.211.110GBAS396982 Google LLC375
162.216.150.210USAS396982 Google LLC366
47.91.125.252AEAS45102 Alibaba US Technology Co., Ltd.360
162.216.150.196USAS396982 Google LLC358
147.185.133.246USAS396982 Google LLC354
162.216.149.30USAS396982 Google LLC345

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.