HoneyLabs
Lookup
Explore
CVEsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / Enrich
DocsBlog
Dashboard

JA4H HTTP client fingerprint

ge11nn0400_88d30a62b7ad

Seen 2026-02-19 to 2026-07-19 across the retained window.

Open in lookup →

11.3K

Source IPs

155

Networks

49

Countries

65.2K

Ports hit

4.8M

Events

73

IPs / network

Top networks

AS16509 Amazon.com, Inc.2.0K IPs228.1K
AS396982 Google LLC1.9K IPs2.2M
AS8075 Microsoft Corporation1.5K IPs23.4K
AS14061 DigitalOcean, LLC1.3K IPs275.6K
AS14618 Amazon.com, Inc.1.2K IPs6.5K
AS6939 Hurricane Electric LLC983 IPs346.4K
AS45102 Alibaba US Technology Co., Ltd.588 IPs2.4K
AS398324 Censys, Inc.545 IPs279.5K
AS0 244 IPs151.1K
AS211680 Sistemas Informaticos, S.A.230 IPs15.0K
AS21859 Zenlayer Inc186 IPs14.9K
AS63949 Akamai Connected Cloud175 IPs14.1K

Countries

US 7.9KDE 491PT 429HK 327SG 316CA 208NL 179IN 178JP 176GB 155

Ports targeted

9443/tcp 124.8K8240/tcp 124.3K8190/tcp 119.5K7860/tcp 118.4K9990/tcp 108.5K83/tcp 103.7K27017/tcp 103.2K7272/tcp 102.3K9980/tcp 74.5K8091/tcp 71.2K8230/tcp 68.4K9042/tcp 67.6K
Source IPCCNetworkEvents
34.32.98.232DEAS396982 Google LLC124.2K
34.145.99.73USAS396982 Google LLC121.8K
34.17.165.5ITAS396982 Google LLC119.4K
34.172.164.119USAS396982 Google LLC118.2K
34.18.217.21QAAS396982 Google LLC115.1K
34.40.152.103AUAS396982 Google LLC107.7K
34.14.215.57INAS396982 Google LLC102.2K
35.240.178.56SGAS396982 Google LLC100.4K
34.65.98.115CHAS396982 Google LLC99.1K
34.158.194.225KRAS396982 Google LLC74.1K
35.234.81.66DEAS396982 Google LLC68.7K
34.21.154.212SGAS396982 Google LLC68.4K
34.21.208.191SGAS396982 Google LLC67.4K
34.130.62.231CAAS396982 Google LLC66.4K
34.21.152.217SGAS396982 Google LLC60.8K
34.131.191.159INAS396982 Google LLC55.1K
34.6.123.140NLAS396982 Google LLC54.3K
34.93.154.77INAS396982 Google LLC54.0K
34.162.180.107USAS396982 Google LLC53.6K
34.100.199.1INAS396982 Google LLC53.6K

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.