HoneyLabs

JA4 TLS client fingerprint

t13i311000_e8f1e7e78f70_d41ae481755e

Seen 2026-02-19 to 2026-07-27 across the retained window.

2.4K

Source IPs

67

Networks

29

Countries

1.9K

Ports hit

476.2K

Events

36

IPs / network

Top networks

AS0 4 IPs1.9K

Countries

US 2.1KCA 115DE 44GB 34AU 31NL 20RU 10FR 6ID 5SG 5

Ports targeted

Source IPCCNetworkEvents
178.16.53.144NLAS202412 Omegatech LTD4.9K
158.94.210.48NLAS202412 Omegatech LTD4.1K
178.16.53.147NLAS202412 Omegatech LTD3.2K
178.16.53.148NLAS202412 Omegatech LTD3.0K
195.128.248.33UAAS6698 Virtual Systems LLC2.2K
92.118.127.162RUAS0 1.8K
128.136.131.84USAS13649 Flexential Colorado Corp.1.5K
45.33.86.71USAS63949 Akamai Connected Cloud975
195.170.172.128ESAS41608 NextGenWebs, S.L.824
45.33.5.31USAS63949 Akamai Connected Cloud809
167.99.167.114USAS14061 DigitalOcean, LLC803
192.81.131.247USAS63949 Akamai Connected Cloud798
157.230.208.70USAS14061 DigitalOcean, LLC797
192.81.129.224USAS63949 Akamai Connected Cloud788
198.199.123.146USAS14061 DigitalOcean, LLC767
157.230.159.118USAS14061 DigitalOcean, LLC763
64.225.45.23USAS14061 DigitalOcean, LLC757
198.58.122.150USAS63949 Akamai Connected Cloud751
146.190.77.193USAS14061 DigitalOcean, LLC750
167.172.201.214USAS14061 DigitalOcean, LLC748

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.