HoneyLabs

JA4 TLS client fingerprint

t13i1714h2_5b57614c22b0_5c2c66f702b0

Seen 2026-03-15 to 2026-07-27 across the retained window.

66

Source IPs

30

Networks

9

Countries

30

Ports hit

596

Events

2

IPs / network

Top networks

Countries

US 19DE 17GB 15FR 6PL 5NL 1IT 1BR 1MD 1

Ports targeted

Source IPCCNetworkEvents
185.181.229.69MDAS60602 Inovare-Prim SRL337
104.167.25.34USAS200373 3xK Tech GmbH78
209.50.170.4USAS200373 3xK Tech GmbH39
65.111.13.80USAS200373 3xK Tech GmbH27
216.26.239.16BRAS200373 3xK Tech GmbH20
185.177.72.153FRAS211590 Bucklog SARL16
45.3.33.211USAS200373 3xK Tech GmbH6
185.202.158.93DEAS42366 TerraTransit AG5
209.50.186.65ITAS200373 3xK Tech GmbH3
65.111.31.219FRAS200373 3xK Tech GmbH3
23.26.240.26USAS7385 Allstream Business US, LLC3
185.177.72.134FRAS211590 Bucklog SARL2
185.177.72.141FRAS211590 Bucklog SARL2
185.177.72.130FRAS211590 Bucklog SARL2
185.177.72.132FRAS211590 Bucklog SARL2
212.132.232.18GBAS201838 Community Fibre Limited1
108.233.180.139USAS7018 AT&T Enterprises, LLC1
188.90.44.49NLAS50266 Odido Netherlands B.V.1
91.89.131.123DEAS3209 Vodafone GmbH1
176.1.128.38DEAS6805 Telefonica Germany1

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.