HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

JA4H HTTP client fingerprint

ge10nn0200_5594a17e7e7e

Seen 2026-02-22 to 2026-09-02 across the retained window.

Open in lookup →

2.0K

Source IPs

20

Networks

14

Countries

20.3K

Ports hit

623.9K

Events

98

IPs / network

Top networks

AS396982 Google LLC1.9K IPs621.5K
AS12876 Scaleway SAS23 IPs136
AS202425 IP Volume inc6 IPs1.6K
AS214664 JSC Buduschee2 IPs316
AS34665 Petersburg Internet Network ltd.2 IPs14
AS197834 Ucom CJSC1 IPs185
AS44050 Petersburg Internet Network ltd.1 IPs53
AS46042 Gunadarma University1 IPs24
AS202412 Omegatech LTD1 IPs15
AS6939 Hurricane Electric LLC1 IPs8
AS213291 Nebius B.V.1 IPs5
AS47890 Unmanaged Ltd1 IPs5

Countries

US 1.4KGB 500FR 22NL 8RU 4IN 3BR 2FI 1AM 1TH 1

Ports targeted

80/tcp 5538080/tcp 1929200/tcp 1293052/tcp 1157547/tcp 1135800/tcp 1128088/tcp 1118530/tcp 10950070/tcp 10916010/tcp 1085000/tcp 1053000/tcp 96

What it requests

GET/623.9K
GET/admin/config.php24

User agents claimed

Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity1.9K IPs621.4K
Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)78 IPs286
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.151 IPs252
Mozilla/5.0 (Linux; Android 5.0; ASUS_Z00AD) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.361 IPs188
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.3) Gecko/20091020 Linux Mint/8 (Helena) Firefox/3.5.31 IPs181
Source IPCCNetwork Last seenEvents
162.216.149.74USAS396982 Google LLC2026-09-02559
147.185.132.14USAS396982 Google LLC2026-09-02543
162.216.150.9USAS396982 Google LLC2026-09-02542
162.216.150.34USAS396982 Google LLC2026-09-02538
162.216.149.140USAS396982 Google LLC2026-09-02529
162.216.150.97USAS396982 Google LLC2026-09-02526
162.216.149.201USAS396982 Google LLC2026-09-02525
162.216.150.180USAS396982 Google LLC2026-09-02523
162.216.150.220USAS396982 Google LLC2026-09-02521
147.185.132.101USAS396982 Google LLC2026-09-02521
147.185.132.98USAS396982 Google LLC2026-09-02520
162.216.150.130USAS396982 Google LLC2026-09-02519
162.216.149.226USAS396982 Google LLC2026-09-02518
147.185.133.210USAS396982 Google LLC2026-09-02518
162.216.149.90USAS396982 Google LLC2026-09-02517
162.216.149.157USAS396982 Google LLC2026-09-02517
162.216.149.207USAS396982 Google LLC2026-09-02516
147.185.132.113USAS396982 Google LLC2026-09-02516
147.185.133.126USAS396982 Google LLC2026-09-02515
147.185.132.149USAS396982 Google LLC2026-09-02514

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.