HoneyLabs

JA4 TLS client fingerprint

t13i311000_e8f1e7e78f70_d41ae481755e

Seen 2026-02-19 to 2026-06-04 across the retained window.

1.7K

Source IPs

44

Networks

23

Countries

1.9K

Ports hit

343.7K

Events

39

IPs / network

Top networks

AS0 4 IPs1.8K

Countries

US 1.6KDE 27GB 19NL 18CA 17AU 14RU 9TR 5SG 3SE 3

Ports targeted

Source IPCCNetworkEvents
178.16.53.144NLAS202412 Omegatech LTD4.9K
158.94.210.48NLAS202412 Omegatech LTD4.1K
178.16.53.147NLAS202412 Omegatech LTD3.2K
178.16.53.148NLAS202412 Omegatech LTD3.0K
92.118.127.162RUAS0 1.8K
128.136.131.84USAS13649 Flexential Colorado Corp.1.5K
45.33.86.71USAS63949 Akamai Connected Cloud975
45.33.5.31USAS63949 Akamai Connected Cloud809
167.99.167.114USAS14061 DigitalOcean, LLC803
192.81.131.247USAS63949 Akamai Connected Cloud798
192.81.129.224USAS63949 Akamai Connected Cloud788
198.199.123.146USAS14061 DigitalOcean, LLC767
157.230.159.118USAS14061 DigitalOcean, LLC763
64.225.45.23USAS14061 DigitalOcean, LLC757
198.58.122.150USAS63949 Akamai Connected Cloud751
146.190.77.193USAS14061 DigitalOcean, LLC750
167.172.201.214USAS14061 DigitalOcean, LLC748
192.81.131.56USAS63949 Akamai Connected Cloud745
66.175.211.220USAS63949 Akamai Connected Cloud732
192.81.129.166USAS63949 Akamai Connected Cloud722

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.