HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

JA4 TLS client fingerprint

t13i1911h1_9dc949149365_e5728521abd4

Seen 2026-09-11 to 2026-09-24 across the retained window.

Open in lookup → Addresses as a feed

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS135377 sends an email when it next hits a sensor.

38

Source IPs

4

Networks

4

Countries

5

Ports hit

180

Events

10

IPs / network

Top networks

AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED21 IPs108
AS9465 AGOTOZ PTE. LTD.12 IPs52
AS4808 China Unicom Beijing Province Network4 IPs16
AS142002 Scloud Pte Ltd1 IPs4

Countries

HK 30CN 4US 3SG 1

Ports targeted

443/tcp 688080/tcp 368001/tcp 2850001/tcp 288081/tcp 20

What it requests

GET/45
GET/ws45
GET/raw45
GET/socket.io/?EIO=4&transport=websocket45

User agents claimed

rawgrab38 IPs180
Source IPCCNetwork Last seenEvents
152.32.132.189AS0 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2112
118.26.38.132AS0 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-198
101.36.116.230AS0 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-248
123.58.215.74AS0 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-118
156.225.1.39AS0 AGOTOZ PTE. LTD.2026-09-158
118.193.38.163AS0 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-148
156.225.1.37AS0 AGOTOZ PTE. LTD.2026-09-194
156.225.1.94AS0 AGOTOZ PTE. LTD.2026-09-234
152.32.216.159AS0 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-114
152.32.235.85AS0 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-154
106.75.3.148AS0 China Unicom Beijing Province Network2026-09-114
152.32.190.84AS0 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-124
152.32.254.132AS0 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-124
165.154.206.35AS0 Scloud Pte Ltd2026-09-214
152.32.133.206AS0 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-234
128.1.132.17AS0 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-134
118.193.45.220AS0 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-204
156.225.1.114AS0 AGOTOZ PTE. LTD.2026-09-224
156.225.1.16AS0 AGOTOZ PTE. LTD.2026-09-124
156.225.1.96AS0 AGOTOZ PTE. LTD.2026-09-114

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.