HoneyLabs

JA4 TLS client fingerprint

t13i4311h1_c7886603b240_b26ce05bbdd6

Seen 2026-02-19 to 2026-07-27 across the retained window.

1.4K

Source IPs

54

Networks

31

Countries

1.7K

Ports hit

11.9K

Events

27

IPs / network

Top networks

Countries

US 1.1KBE 172CH 42CN 40DE 17NL 5FR 4AU 4GB 3HK 3

Ports targeted

Source IPCCNetworkEvents
45.142.193.144ROAS213388 Iic Rail Limited1.6K
13.212.235.253SGAS16509 Amazon.com, Inc.552
15.152.106.7JPAS16509 Amazon.com, Inc.311
54.90.66.49USAS14618 Amazon.com, Inc.276
52.51.123.95IEAS16509 Amazon.com, Inc.276
34.221.110.167USAS16509 Amazon.com, Inc.276
202.155.143.143IDAS151592 PT Awan Data Teknologi131
141.11.88.101USAS212477 RoyaleHosting BV72
217.60.97.170AEAS399486 12651980 CANADA INC.42
213.209.159.113TWAS208137 Feo Prest SRL36
95.182.96.193FRAS56971 Cgi Global Limited30
44.220.188.128USAS14618 Amazon.com, Inc.17
44.220.188.3USAS14618 Amazon.com, Inc.17
34.77.191.38BEAS396982 Google LLC17
44.220.188.10USAS14618 Amazon.com, Inc.17
44.220.185.212USAS14618 Amazon.com, Inc.16
18.97.26.34USAS14618 Amazon.com, Inc.16
44.220.185.90USAS14618 Amazon.com, Inc.16
18.97.26.24USAS14618 Amazon.com, Inc.16
44.220.188.203USAS14618 Amazon.com, Inc.15

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.