HoneyLabs

JA4 TLS client fingerprint

t13i5910h1_a33745022dd6_1f22a2ca17c4

Seen 2026-03-27 to 2026-07-11 across the retained window.

18

Source IPs

3

Networks

3

Countries

50

Ports hit

55.6K

Events

6

IPs / network

Top networks

Countries

US 16AU 1DE 1

Ports targeted

Source IPCCNetworkEvents
104.243.35.92USAS23470 ReliableSite.Net LLC8.0K
185.150.191.236USAS23470 ReliableSite.Net LLC7.9K
209.222.101.194USAS23470 ReliableSite.Net LLC6.3K
104.243.35.94USAS23470 ReliableSite.Net LLC5.9K
104.243.32.126USAS23470 ReliableSite.Net LLC4.8K
104.243.43.7USAS23470 ReliableSite.Net LLC4.7K
104.243.32.235USAS23470 ReliableSite.Net LLC3.2K
104.243.35.104USAS23470 ReliableSite.Net LLC3.0K
104.243.35.120USAS23470 ReliableSite.Net LLC3.0K
45.76.121.37AUAS20473 The Constant Company, LLC2.8K
206.221.176.60USAS23470 ReliableSite.Net LLC2.0K
104.243.43.19USAS23470 ReliableSite.Net LLC1.7K
185.150.191.165USAS23470 ReliableSite.Net LLC963
104.243.34.165USAS23470 ReliableSite.Net LLC861
104.243.35.45USAS23470 ReliableSite.Net LLC259
172.93.106.153USAS23470 ReliableSite.Net LLC115
104.243.41.28USAS23470 ReliableSite.Net LLC15
87.120.126.170DEAS215730 H2nexus Ltd1

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.