HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

JA4 TLS client fingerprint

t13i181100_e8a523a41297_02c8e53ee398

Seen 2026-02-20 to 2026-09-24 across the retained window.

Open in lookup → Addresses as a feed

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS213954 sends an email when it next hits a sensor.

37

Source IPs

8

Networks

4

Countries

65

Ports hit

273

Events

5

IPs / network

Top networks

AS213954 Global Transit Systems LLC18 IPs22
AS137409 GSL Networks Pty LTD6 IPs36
AS213388 Iic Rail Limited3 IPs113
AS46475 Limestone Networks, Inc.3 IPs4
AS26548 PureVoltage Hosting Inc.3 IPs3
AS202412 Omegatech LTD2 IPs86
AS211632 Internet Solutions & Innovations LTD.1 IPs6
AS212238 Datacamp Limited1 IPs3

Countries

US 31RO 3NL 2UA 1

Ports targeted

443/tcp 584443/tcp 109443/tcp 10444/tcp 86443/tcp 880/tcp 88443/tcp 755443/tcp 788/tcp 68080/tcp 67443/tcp 510443/tcp 5

What it requests

GET/login172
POST/cgi/login43
GET/vpn/index.html36
POST/global-protect/login.esp15
GET/tcp/vpn/index.html7

User agents claimed

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.20337 IPs273
Source IPCCNetwork Last seenEvents
45.142.193.149AS0 Iic Rail Limited2026-09-1790
130.12.180.19AS0 Omegatech LTD2026-09-1870
151.240.104.196AS0 GSL Networks Pty LTD2026-09-1722
130.12.180.35AS0 Omegatech LTD2026-08-3116
45.142.193.24AS0 Iic Rail Limited2026-08-2915
151.240.46.221AS0 GSL Networks Pty LTD2026-09-218
45.142.193.239AS0 Iic Rail Limited2026-09-088
5.181.86.188AS0 Internet Solutions & Innovations LTD.2026-09-116
188.119.190.247AS0 Datacamp Limited2026-09-113
151.240.46.176AS0 GSL Networks Pty LTD2026-09-233
193.142.37.48AS0 Global Transit Systems LLC2026-09-232
104.245.241.220AS0 Global Transit Systems LLC2026-09-242
45.147.11.70AS0 Global Transit Systems LLC2026-09-212
104.245.242.201AS0 Global Transit Systems LLC2026-09-222
83.97.117.178AS0 Limestone Networks, Inc.2026-09-232
62.204.49.157AS0 Limestone Networks, Inc.2026-09-201
45.159.23.29AS0 Global Transit Systems LLC2026-09-141
151.240.105.74AS0 GSL Networks Pty LTD2026-09-151
45.159.23.247AS0 Global Transit Systems LLC2026-09-161
45.147.232.99AS0 PureVoltage Hosting Inc.2026-09-121

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.