HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

JA4H HTTP client fingerprint

ge11nn0300_341eb0d8946c

Seen 2026-02-20 to 2026-08-28 across the retained window.

Open in lookup →

1.7K

Source IPs

5

Networks

22

Countries

205

Ports hit

71.8K

Events

348

IPs / network

Top networks

AS396982 Google LLC1.7K IPs71.6K
AS51852 Private Layer INC1 IPs132
AS214209 Internet Magnate (Pty) Ltd1 IPs34
AS201814 MEVSPACE sp. z o.o.1 IPs3
AS9009 M247 Europe SRL1 IPs3

Countries

US 1.3KBE 40JP 37TW 34DE 32NL 28IN 27ID 27CA 24AU 24

Ports targeted

82/tcp 1.4K5601/tcp 1.4K443/tcp 1.2K12000/tcp 1.2K4567/tcp 1.2K8190/tcp 1.2K8448/tcp 1.1K8447/tcp 1.1K7443/tcp 1.0K5000/tcp 9869800/tcp 9104848/tcp 779

What it requests

GET/.git/config1.5K
GET/wordpress/.git/config1.5K
GET/www/.git/config1.5K
GET/src/.git/config1.5K
GET/html/.git/config1.5K
GET/app/.git/config1.5K
GET/var/www/.git/config1.5K
GET/backend/.git/config1.5K
GET/htdocs/.git/config1.5K
GET/public/.git/config1.5K
GET/site/.git/config1.5K
GET/api/.git/config1.5K

User agents claimed

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36593 IPs39.1K
crusader-worker/1.01.2K IPs32.5K
Mozilla/5.01 IPs132
Mozilla/5.0 (compatible; CScanner/1.0)1 IPs12
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.361 IPs10
Source IPCCNetwork Last seenEvents
34.138.154.44USAS396982 Google LLC2026-08-28566
34.60.149.150USAS396982 Google LLC2026-08-28566
136.64.152.102USAS396982 Google LLC2026-08-28561
34.44.129.91USAS396982 Google LLC2026-08-28561
34.175.199.78ESAS396982 Google LLC2026-08-28552
34.23.142.236USAS396982 Google LLC2026-08-28542
34.135.46.117USAS396982 Google LLC2026-08-28542
34.24.141.55USAS396982 Google LLC2026-08-28542
34.176.154.83CLAS396982 Google LLC2026-08-28542
34.74.102.77USAS396982 Google LLC2026-08-28542
35.189.166.231TWAS396982 Google LLC2026-08-28542
35.220.252.100HKAS396982 Google LLC2026-08-28542
35.229.36.26USAS396982 Google LLC2026-08-28542
35.227.12.88USAS396982 Google LLC2026-08-28542
35.234.33.27TWAS396982 Google LLC2026-08-28542
136.107.142.125USAS396982 Google LLC2026-08-28542
34.145.142.176USAS396982 Google LLC2026-08-28542
34.186.223.69CAAS396982 Google LLC2026-08-28542
34.56.219.203USAS396982 Google LLC2026-08-27542
34.26.131.236USAS396982 Google LLC2026-08-28542

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.