HoneyLabs

JA4 TLS client fingerprint

t13i180900_e8a523a41297_78e6aca7449b

Seen 2026-02-20 to 2026-07-28 across the retained window.

275

Source IPs

28

Networks

16

Countries

2.2K

Ports hit

14.2K

Events

10

IPs / network

Top networks

AS0 6 IPs9

Countries

US 191SC 23IL 18RU 14RO 10IR 5MC 3TW 3FI 1BG 1

Ports targeted

Source IPCCNetworkEvents
45.142.193.139ROAS214295 Skynet Network Ltd1.5K
45.142.193.24ROAS214295 Skynet Network Ltd1.4K
45.142.193.213ROAS214295 Skynet Network Ltd1.4K
45.142.193.221ROAS214295 Skynet Network Ltd1.3K
45.142.193.198ROAS214295 Skynet Network Ltd1.2K
213.209.159.186TWAS208137 Feo Prest SRL1.1K
45.142.193.142ROAS214295 Skynet Network Ltd981
45.142.193.239ROAS214295 Skynet Network Ltd972
45.142.193.200ROAS214295 Skynet Network Ltd668
62.60.131.152IRAS208137 Feo Prest SRL635
45.142.193.197ROAS214295 Skynet Network Ltd570
45.142.193.149ROAS214295 Skynet Network Ltd398
213.177.179.193TWAS208137 Feo Prest SRL268
192.253.248.173IRAS213790 Limited Network LTD247
178.16.55.241USAS202412 Omegatech LTD183
172.94.9.244IRAS213790 Limited Network LTD171
80.66.66.211FIAS209702 Soldatov Alexey Valerevich156
80.66.83.32RUAS216473 Bashinskii Vadim Ruslanovich156
193.24.123.55RUAS200593 Prospero Ooo130
91.202.233.46TMAS200593 Prospero Ooo108

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.