HoneyLabs

JA4 TLS client fingerprint

t13i1909h1_9dc949149365_97f8aa674fd9

Seen 2026-02-19 to 2026-07-27 across the retained window.

385

Source IPs

7

Networks

10

Countries

967

Ports hit

204.4K

Events

55

IPs / network

Top networks

AS396982 Google LLC250 IPs186.9K
AS0 1 IPs1

Countries

US 263PT 76FR 32NL 4SG 3IN 2CA 2GB 1AU 1DE 1

Ports targeted

Source IPCCNetworkEvents
216.180.246.126USAS396982 Google LLC1.3K
216.180.246.124USAS396982 Google LLC1.2K
216.180.246.1USAS396982 Google LLC1.2K
216.180.246.3USAS396982 Google LLC1.2K
216.180.246.104USAS396982 Google LLC1.1K
216.180.246.236USAS396982 Google LLC1.1K
216.180.246.151USAS396982 Google LLC1.0K
216.180.246.116USAS396982 Google LLC1.0K
216.180.246.8USAS396982 Google LLC1.0K
216.180.246.149USAS396982 Google LLC1.0K
216.180.246.32USAS396982 Google LLC1.0K
216.180.246.159USAS396982 Google LLC1.0K
216.180.246.40USAS396982 Google LLC998
216.180.246.136USAS396982 Google LLC997
216.180.246.67USAS396982 Google LLC986
216.180.246.77USAS396982 Google LLC984
216.180.246.85USAS396982 Google LLC980
216.180.246.88USAS396982 Google LLC979
216.180.246.73USAS396982 Google LLC972
216.180.246.131USAS396982 Google LLC972

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.