HoneyLabs
LookupEnrichFeedsCVEsCampaignsASN IndexMCPBlogDocs
Dashboard

JA4 TLS client fingerprint

t13i190800_9dc949149365_97f8aa674fd9

Seen 2026-02-19 to 2026-06-04 across the retained window.

Open in lookup →

18.4K

Source IPs

101

Networks

36

Countries

57.7K

Ports hit

1.1M

Events

182

IPs / network

Top networks

AS4837 CHINA UNICOM China169 Backbone7.8K IPs10.3K
AS4134 Chinanet6.3K IPs10.0K
AS396982 Google LLC773 IPs41.9K
AS14618 Amazon.com, Inc.685 IPs3.9K
AS17622 China Unicom Guangzhou network418 IPs476
AS398324 Censys, Inc.368 IPs234.6K
AS140061 Qinghai Telecom296 IPs466
AS17638 ASN for TIANJIN Provincial Net of CT282 IPs449
AS140726 UNICOM AnHui province network267 IPs321
AS0 188 IPs138.2K
AS17621 China Unicom Shanghai network162 IPs374
AS45102 Alibaba US Technology Co., Ltd.151 IPs1.1K

Countries

CN 15.7KUS 2.1KDE 86CA 79SG 67FR 64GB 48JP 43NL 34UA 19

Ports targeted

443/tcp 5.9K9090/tcp 5.0K9200/tcp 3.0K4841/tcp 2.6K8443/tcp 2.5K4839/tcp 2.5K1963/tcp 2.4K4840/tcp 2.4K1962/tcp 2.4K1961/tcp 2.2K6443/tcp 2.0K5001/tcp 1.9K
Source IPCCNetworkEvents
167.94.146.55USAS398705 Censys, Inc.18.3K
167.94.146.50USAS398705 Censys, Inc.18.3K
167.94.146.56USAS398705 Censys, Inc.18.2K
167.94.146.59USAS398705 Censys, Inc.18.2K
167.94.146.58USAS398705 Censys, Inc.18.0K
167.94.146.57USAS398705 Censys, Inc.18.0K
167.94.146.53USAS398705 Censys, Inc.17.9K
167.94.146.63USAS398705 Censys, Inc.17.9K
167.94.146.62USAS398705 Censys, Inc.17.8K
167.94.146.48USAS398705 Censys, Inc.17.8K
167.94.146.51USAS398705 Censys, Inc.17.8K
167.94.146.52USAS398705 Censys, Inc.17.7K
167.94.146.54USAS398705 Censys, Inc.17.7K
167.94.146.49USAS398705 Censys, Inc.17.6K
167.94.146.61USAS398705 Censys, Inc.17.6K
167.94.146.60USAS398705 Censys, Inc.17.4K
85.217.149.36CAAS209334 Modat B.V.4.8K
85.217.149.12CAAS209334 Modat B.V.4.7K
85.217.149.19CAAS209334 Modat B.V.4.1K
85.217.149.8CAAS209334 Modat B.V.3.8K

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.