HoneyLabs

JA4 TLS client fingerprint

t13i181100_e8a523a41297_02c8e53ee398

Seen 2026-02-20 to 2026-07-27 across the retained window.

240

Source IPs

22

Networks

11

Countries

1.5K

Ports hit

6.8K

Events

11

IPs / network

Top networks

AS0 5 IPs5

Countries

US 163SC 23IL 18RU 14RO 10IR 5TW 3TM 1GB 1DE 1

Ports targeted

Source IPCCNetworkEvents
45.142.193.198ROAS214295 Skynet Network Ltd764
45.142.193.139ROAS214295 Skynet Network Ltd762
45.142.193.221ROAS214295 Skynet Network Ltd742
45.142.193.213ROAS214295 Skynet Network Ltd688
45.142.193.239ROAS214295 Skynet Network Ltd594
45.142.193.200ROAS214295 Skynet Network Ltd478
45.142.193.24ROAS214295 Skynet Network Ltd477
45.142.193.197ROAS214295 Skynet Network Ltd312
213.177.179.193TWAS208137 Feo Prest SRL263
213.209.159.186TWAS208137 Feo Prest SRL248
192.253.248.173IRAS213790 Limited Network LTD247
45.142.193.142ROAS214295 Skynet Network Ltd240
80.66.83.32RUAS216473 Bashinskii Vadim Ruslanovich156
62.60.131.152IRAS208137 Feo Prest SRL150
45.142.193.149ROAS214295 Skynet Network Ltd126
172.94.9.244IRAS213790 Limited Network LTD86
193.24.123.55RUAS200593 Prospero Ooo52
91.202.233.46TMAS200593 Prospero Ooo48
176.120.22.74RUAS198953 Proton66 OOO44
192.253.248.171IRAS213790 Limited Network LTD27

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.