HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

JA4H HTTP client fingerprint

ge11nn0300_47c2bbddfa85

Seen 2026-05-15 to 2026-08-27 across the retained window.

Open in lookup →

2

Source IPs

2

Networks

2

Countries

24

Ports hit

53.6K

Events

1

IPs / network

This fingerprint is spread thinly across many networks, which is the shape of a common, widely-used client.

Top networks

AS211443 Sino Worldwide Trading Limited1 IPs53.6K
AS211663 GALEON LLC1 IPs32

Countries

NL 1RU 1

Ports targeted

9299/tcp 2.9K7462/tcp 2.8K5706/tcp 2.8K6143/tcp 2.8K1080/tcp 2.8K6750/tcp 2.8K6179/tcp 2.8K5234/tcp 2.8K5831/tcp 2.7K5759/tcp 2.7K5955/tcp 2.7K6485/tcp 2.7K
Source IPCCNetworkEvents
46.151.178.11NLAS211443 Sino Worldwide Trading Limited53.6K
37.72.140.50RUAS211663 GALEON LLC32

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.