HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

JA4H HTTP client fingerprint

ge11nn0300_0db47b7d240d

Seen 2026-02-19 to 2026-09-10 across the retained window.

Open in lookup →

5.2K

Source IPs

104

Networks

35

Countries

6.6K

Ports hit

247.6K

Events

50

IPs / network

Top networks

AS396982 Google LLC3.4K IPs223.0K
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED628 IPs8.0K
AS45102 Alibaba (US) Technology Co., Ltd.554 IPs2.8K
AS14061 DigitalOcean, LLC168 IPs2.6K
AS398324 Censys, Inc.51 IPs61
AS5089 Virgin Media30 IPs34
AS142002 Scloud Pte Ltd23 IPs203
AS398722 Censys, Inc.21 IPs21
AS5607 Sky UK Limited19 IPs20
AS2856 British Telecommunications Limited18 IPs20
AS219502 Storm Industries LLC15 IPs829
AS398705 Censys, Inc.15 IPs25

Countries

US 2.3KBE 1.4KGB 609SG 398HK 140DE 103SC 92NL 36CN 10BG 8

Ports targeted

8080/tcp 2.1K443/tcp 2.1K80/tcp 9004433/tcp 8838181/tcp 8208006/tcp 3698000/tcp 2869200/tcp 2783000/tcp 2738098/tcp 2688088/tcp 26610250/tcp 255

What it requests

GET/231.9K
GET/favicon.ico11.5K
GET/login807
GET/stats208
GEThttp://ip-api.com/json/170
GET/.env113
GET/api/config88
GET/robots.txt82
GET/.git/config55
GET/api/session/properties31
GET/livewire/update28
GET/api/tags28

User agents claimed

Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity2.0K IPs220.6K
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36652 IPs8.2K
Go-http-client/1.1257 IPs6.4K
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36656 IPs3.0K
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.361.4K IPs2.1K
Source IPCCNetwork Last seenEvents
109.224.17.213IQAS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd2026-08-21803
45.82.78.106DEAS212512 Detai Prosperous Technologies Limited2026-09-10491
45.82.78.104DEAS212512 Detai Prosperous Technologies Limited2026-09-10483
45.82.78.105DEAS212512 Detai Prosperous Technologies Limited2026-09-10480
45.82.78.108DEAS212512 Detai Prosperous Technologies Limited2026-09-10477
45.82.78.102DEAS212512 Detai Prosperous Technologies Limited2026-09-10469
45.82.78.100DEAS212512 Detai Prosperous Technologies Limited2026-09-10465
45.82.78.103DEAS212512 Detai Prosperous Technologies Limited2026-09-10458
45.82.78.107DEAS212512 Detai Prosperous Technologies Limited2026-09-10455
130.12.180.194NLAS202412 Omegatech LTD2026-09-10378
94.154.43.140NLAS219502 Storm Industries LLC2026-09-02328
45.198.224.240USAS215925 Vpsvault.host Ltd2026-08-31252
45.153.34.43NLAS197170 TechTies Inc.2026-09-04225
43.156.111.207SGAS132203 Tencent Building, Kejizhongyi Avenue2026-08-28196
204.76.203.30NLAS51396 Pfcloud UG (haftungsbeschrankt)2026-08-19194
147.185.133.232USAS396982 Google LLC2026-09-10191
162.216.150.191USAS396982 Google LLC2026-09-10182
185.136.15.110KZAS205997 Vlad Cojuhari2026-08-18182
138.226.239.90GBAS213474 HomeLine Broadband LLC2026-08-18181
138.226.239.91GBAS213474 HomeLine Broadband LLC2026-08-18181

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.