HoneyLabs

JA4 TLS client fingerprint

t13i250900_b78ed14e2fd0_e7c285222651

Seen 2026-02-20 to 2026-07-27 across the retained window.

5.3K

Source IPs

34

Networks

22

Countries

2.4K

Ports hit

45.5K

Events

157

IPs / network

Top networks

AS396982 Google LLC3.9K IPs29.5K
AS0 4 IPs134

Countries

BE 3.7KSG 1.1KUS 458GB 14DE 12NL 12CA 9IN 7RU 5BG 5

Ports targeted

Source IPCCNetworkEvents
195.3.221.86PLAS201814 MEVSPACE sp. z o.o.2.3K
96.126.104.20USAS63949 Akamai Connected Cloud1.7K
101.36.125.58HKAS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED1.2K
158.94.210.48NLAS202412 Omegatech LTD502
178.16.53.144NLAS202412 Omegatech LTD466
91.215.85.104RUAS200593 Prospero Ooo389
178.16.53.147NLAS202412 Omegatech LTD296
178.16.53.148NLAS202412 Omegatech LTD274
172.94.9.253IRAS213790 Limited Network LTD214
79.124.40.162BGAS50360 Tamatiya EOOD184
185.241.208.27PLAS210558 1337 Services GmbH154
194.165.16.11MCAS48721 Flyservers S.A.137
176.120.22.120RUAS198953 Proton66 OOO112
34.77.172.114BEAS396982 Google LLC64
207.175.91.152USAS396982 Google LLC58
104.199.97.121BEAS396982 Google LLC57
35.241.175.180BEAS396982 Google LLC57
79.124.49.102BGAS50360 Tamatiya EOOD54
34.140.27.219BEAS396982 Google LLC48

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.