HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

JA4 TLS client fingerprint

t13i1712h1_ab0a1bf427ad_ecd0401ec68b

Seen 2026-05-06 to 2026-08-23 across the retained window.

Open in lookup →

38

Source IPs

4

Networks

4

Countries

3

Ports hit

67

Events

10

IPs / network

Top networks

AS62513 GoCodeIT Inc22 IPs22
AS219329 Flash Edge Information Technology LLC14 IPs14
AS202412 Omegatech LTD1 IPs28
AS8075 Microsoft Corporation1 IPs3

Countries

US 29CA 7IN 1NL 1

Ports targeted

443/tcp 278443/tcp 208444/tcp 20

What it requests

HEAD/64
GET/.env3

User agents claimed

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.3637 IPs60
random1 IPs4
Python/3.12 aiohttp/3.13.51 IPs3
Source IPCCNetwork Last seenEvents
130.12.180.224NLAS202412 Omegatech LTD2026-08-2328
4.240.39.201INAS8075 Microsoft Corporation2026-08-213
153.76.9.171CAAS62513 GoCodeIT Inc2026-08-221
153.76.13.193CAAS62513 GoCodeIT Inc2026-08-221
83.245.51.127USAS62513 GoCodeIT Inc2026-08-221
155.117.181.133USAS219329 Flash Edge Information Technology LLC2026-08-221
153.76.17.29USAS62513 GoCodeIT Inc2026-08-231
68.166.196.237USAS219329 Flash Edge Information Technology LLC2026-08-221
153.76.17.5USAS62513 GoCodeIT Inc2026-08-221
68.166.199.48USAS219329 Flash Edge Information Technology LLC2026-08-221
83.245.49.56USAS62513 GoCodeIT Inc2026-08-221
68.166.216.105USAS219329 Flash Edge Information Technology LLC2026-08-221
74.1.27.244USAS219329 Flash Edge Information Technology LLC2026-08-221
96.126.136.243USAS219329 Flash Edge Information Technology LLC2026-08-231
153.76.16.153USAS62513 GoCodeIT Inc2026-08-221
83.245.54.36USAS62513 GoCodeIT Inc2026-08-231
83.245.50.36USAS62513 GoCodeIT Inc2026-08-231
153.76.16.233USAS62513 GoCodeIT Inc2026-08-231
153.76.16.20USAS62513 GoCodeIT Inc2026-08-221
155.117.180.187USAS219329 Flash Edge Information Technology LLC2026-08-221

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.