HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

JA4 TLS client fingerprint

t13i190900_9dc949149365_e7c285222651

Seen 2026-02-19 to 2026-09-21 across the retained window.

Open in lookup →

Known fingerprint

ngrok 3.8.0 (Windows)

1.1K

Source IPs

49

Networks

17

Countries

7.4K

Ports hit

96.4K

Events

23

IPs / network

Top networks

AS4837 CHINA UNICOM China169 Backbone337 IPs375
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED273 IPs82.5K
AS4134 Chinanet266 IPs297
AS9465 AGOTOZ PTE. LTD.39 IPs68
AS14061 DigitalOcean, LLC33 IPs1.9K
AS137266 CHINATELECOM Hubei province Wuhan 5G network24 IPs26
AS4808 China Unicom Beijing Province Network23 IPs44
AS213790 Limited Network LTD18 IPs4.1K
AS17622 China Unicom Guangzhou network16 IPs18
AS17638 ASN for TIANJIN Provincial Net of CT16 IPs18
AS9808 China Mobile Communications Group Co., Ltd.9 IPs10
AS142002 Scloud Pte Ltd7 IPs3.0K

Countries

CN 717HK 160US 113TH 37GB 26NL 23NG 21DE 10SC 7IR 5

Ports targeted

443/tcp 1.4K80/tcp 5598443/tcp 2157681/tcp 2038000/tcp 1813306/tcp 1648080/tcp 15050050/tcp 1468888/tcp 1454569/tcp 1409999/tcp 13950001/tcp 136

What it requests

GET/22.1K
GET/favicon.ico8.2K
GET/robots.txt7.9K
GET/sitemap.xml7.9K
GET/aab9971
GET/aaa9970
GET/+CSCOU+/csco_logo.gif659
GET/lato-regular.woff2659
GET/fonts/ftnt-icons.woff659
GET/remote/login659
GET/auth_portal/Default/logo.gif659
GET/auth1.js659

User agents claimed

Go-http-client/1.1118 IPs25.4K
curl/7.29.0240 IPs11.7K
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3619 IPs4.2K
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.367 IPs1.9K
l9explore/1.2.22 IPs793
Source IPCCNetwork Last seenEvents
152.32.170.55HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-216.5K
128.1.132.220HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-216.1K
152.32.172.108HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-216.1K
152.32.189.128HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-216.0K
152.32.189.121HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-215.9K
45.148.10.5NLAS48090 Techoff Srv Limited2026-09-21824
45.138.12.51LTAS218785 Tc Datacenter Limited2026-09-21801
165.154.135.215USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-21626
118.194.251.101THAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-20584
118.193.57.62THAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-20583
165.154.182.53USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-20574
152.32.134.89HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-21572
80.82.77.202NLAS202425 IP Volume inc2026-09-18569
165.154.206.223USAS142002 Scloud Pte Ltd2026-09-20560
152.32.128.85HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-21560
118.194.250.232THAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-21560
118.194.250.113THAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-21557
118.193.33.130HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-21556
165.154.206.204USAS142002 Scloud Pte Ltd2026-09-20549
165.154.120.89THAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-21546

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.