HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
DocsBlog
Dashboard

JA4H HTTP client fingerprint

ge11nn0200_3ed38b250d3d

Seen 2026-02-20 to 2026-08-16 across the retained window.

Open in lookup →

3.0K

Source IPs

77

Networks

32

Countries

11.6K

Ports hit

424.2K

Events

40

IPs / network

Top networks

AS396982 Google LLC1.9K IPs408.4K
AS6939 Hurricane Electric LLC919 IPs8.4K
AS14061 DigitalOcean, LLC47 IPs54
AS63949 Akamai Connected Cloud23 IPs24
AS135392 MillenialHost Limited14 IPs160
AS63199 CDS Global Cloud Co., Ltd12 IPs2.0K
Unattributed12 IPs1.3K
AS51396 Pfcloud UG (haftungsbeschrankt)8 IPs67
AS10439 CariNet, Inc.7 IPs34
AS219502 Storm Industries LLC5 IPs96
AS174 Cogent Communications, LLC5 IPs5
AS402253 SKN Subnet & Telecom Ltd4 IPs913

Countries

US 2.5KGB 484NL 28JP 12CN 9DE 9CA 7FR 6CH 6SC 6

Ports targeted

443/tcp 76980/tcp 6568080/tcp 6038000/tcp 58082/tcp 5623128/tcp 5178081/tcp 5135985/tcp 499808/tcp 47585/tcp 47583/tcp 4758888/tcp 464
Source IPCCNetworkEvents
162.216.150.144USAS396982 Google LLC1.5K
35.203.211.184GBAS396982 Google LLC1.2K
35.203.211.42GBAS396982 Google LLC1.2K
162.216.150.203USAS396982 Google LLC1.2K
147.185.132.169USAS396982 Google LLC1.2K
147.185.133.176USAS396982 Google LLC1.1K
162.216.150.210USAS396982 Google LLC1.1K
162.216.150.196USAS396982 Google LLC1.1K
35.203.210.63GBAS396982 Google LLC1.0K
162.216.150.37USAS396982 Google LLC1.0K
162.216.150.150USAS396982 Google LLC979
35.203.211.110GBAS396982 Google LLC974
147.185.133.237USAS396982 Google LLC968
147.185.132.148USAS396982 Google LLC963
162.216.150.186USAS396982 Google LLC927
162.216.149.31USAS396982 Google LLC916
147.185.132.71USAS396982 Google LLC915
162.216.149.185USAS396982 Google LLC905
147.185.133.13USAS396982 Google LLC904
162.216.150.13USAS396982 Google LLC887

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.