HoneyLabs

JA4 TLS client fingerprint

t13i191000_9dc949149365_e5728521abd4

Seen 2026-02-19 to 2026-07-06 across the retained window.

539

Source IPs

90

Networks

34

Countries

2.3K

Ports hit

43.0K

Events

6

IPs / network

Top networks

AS0 9 IPs141

Countries

DE 219HK 107CN 56US 45RO 16NL 14TW 13SG 12IN 11RU 5

Ports targeted

Source IPCCNetworkEvents
104.192.2.154USAS27176 DataWagon LLC20.5K
45.148.10.200NLAS48090 Techoff Srv Limited7.9K
46.151.178.13NLAS211443 Sino Worldwide Trading Limited2.9K
80.87.206.237RUAS16276 OVH SAS1.5K
204.76.203.215NLAS51396 Pfcloud UG (haftungsbeschrankt)1.0K
193.34.212.9PLAS201814 MEVSPACE sp. z o.o.836
80.87.206.229RUAS16276 OVH SAS686
204.76.203.73NLAS51396 Pfcloud UG (haftungsbeschrankt)586
5.181.190.188PLAS201814 MEVSPACE sp. z o.o.574
168.100.9.75NLAS399629 BL Networks284
93.123.109.167BGAS48090 Techoff Srv Limited265
213.209.159.75TWAS208137 Feo Prest SRL225
31.57.184.226USAS197769 VPS Dedicated LLC72
47.251.42.6USAS45102 Alibaba US Technology Co., Ltd.66
103.215.75.70INAS150303 SoloRDP55
93.123.109.163BGAS48090 Techoff Srv Limited55
93.123.109.165BGAS48090 Techoff Srv Limited55
64.226.127.28DEAS14061 DigitalOcean, LLC48
134.122.74.181DEAS14061 DigitalOcean, LLC47
103.120.189.68INAS137654 Netstra Communications Pvt Ltd45

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.