HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

JA4 TLS client fingerprint

t13i190900_9dc949149365_e7c285222651

Seen 2026-02-19 to 2026-09-06 across the retained window.

Open in lookup →

Known fingerprint

ngrok 3.8.0 (Windows)

2.9K

Source IPs

49

Networks

16

Countries

8.0K

Ports hit

129.0K

Events

59

IPs / network

Top networks

AS4837 CHINA UNICOM China169 Backbone1.2K IPs1.5K
AS4134 Chinanet937 IPs1.2K
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED292 IPs109.1K
AS137266 CHINATELECOM Hubei province Wuhan 5G network70 IPs87
AS9465 AGOTOZ PTE. LTD.52 IPs713
AS17638 ASN for TIANJIN Provincial Net of CT50 IPs57
AS17622 China Unicom Guangzhou network47 IPs60
AS140061 Qinghai Telecom41 IPs125
AS14061 DigitalOcean, LLC37 IPs2.0K
AS17621 China Unicom Shanghai network35 IPs42
AS4808 China Unicom Beijing Province Network33 IPs248
AS213790 Limited Network LTD18 IPs5.9K

Countries

CN 2.4KHK 190US 113TH 37GB 24NL 21NG 21IR 18DE 8SG 8

Ports targeted

443/tcp 3757681/tcp 3628443/tcp 3138317/tcp 1923306/tcp 1908000/tcp 1884443/tcp 18410443/tcp 1824433/tcp 1826060/tcp 1778801/tcp 16880/tcp 164

What it requests

GET/30.9K
GET/favicon.ico12.8K
GET/robots.txt11.3K
GET/sitemap.xml11.3K
GET/aab91.4K
GET/aaa91.4K
GET/auth1.js1.0K
GET/fonts/ftnt-icons.woff1.0K
GET/+CSCOU+/csco_logo.gif1.0K
GET/lato-regular.woff21.0K
GET/remote/login1.0K
GET/auth_portal/Default/logo.gif1.0K

User agents claimed

Go-http-client/1.1122 IPs35.8K
curl/7.29.0240 IPs14.0K
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3619 IPs6.2K
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.362.4K IPs3.2K
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.366 IPs2.8K
Source IPCCNetwork Last seenEvents
152.32.170.55HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-068.1K
128.1.132.220HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-068.1K
152.32.189.121HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-067.8K
152.32.172.108HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-067.7K
152.32.189.128HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-067.7K
118.193.57.62THAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-061.2K
118.26.39.231HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-06986
80.82.77.202NLAS202425 IP Volume inc2026-09-02955
80.82.70.133NLAS202425 IP Volume inc2026-09-04945
165.154.135.215USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-06838
118.194.251.101THAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-06793
165.154.182.174USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-05780
118.193.33.130HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-06768
45.194.70.249SCAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-06762
165.154.182.53USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-06762
152.32.128.85HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-06760
118.194.250.22THAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-06758
101.36.123.67HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-06756
165.154.206.223USAS142002 Scloud Pte Ltd2026-09-06755
123.58.213.118HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-06740

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.