HoneyLabs
LookupEnrichFeedsCVEsCampaignsASN IndexMCPBlogDocs
Dashboard

JA4H HTTP client fingerprint

ge11nn0400_88d30a62b7ad

Seen 2026-02-19 to 2026-06-04 across the retained window.

Open in lookup →

6.9K

Source IPs

113

Networks

41

Countries

60.0K

Ports hit

1.3M

Events

61

IPs / network

Top networks

AS8075 Microsoft Corporation1.5K IPs12.4K
AS6939 Hurricane Electric LLC983 IPs218.3K
AS14061 DigitalOcean, LLC839 IPs146.7K
AS14618 Amazon.com, Inc.734 IPs4.6K
AS16509 Amazon.com, Inc.564 IPs118.2K
AS398324 Censys, Inc.368 IPs175.6K
AS396982 Google LLC304 IPs95.5K
AS45102 Alibaba US Technology Co., Ltd.241 IPs1.7K
AS0 229 IPs108.4K
AS211680 Sistemas Informaticos, S.A.228 IPs8.6K
AS21859 Zenlayer Inc186 IPs8.9K
AS63949 Akamai Connected Cloud146 IPs9.1K

Countries

US 5.5KPT 427DE 231SG 178CA 107FR 61NL 60HK 57JP 45CN 43

Ports targeted

9090/tcp 17.8K443/tcp 12.4K80/tcp 10.8K8443/tcp 7.8K8080/tcp 7.2K8888/tcp 6.2K9443/tcp 6.0K4443/tcp 5.6K3000/tcp 5.6K9200/tcp 5.5K7443/tcp 5.3K9000/tcp 5.3K
Source IPCCNetworkEvents
157.245.71.193NLAS14061 DigitalOcean, LLC19.0K
16.58.56.214USAS16509 Amazon.com, Inc.16.2K
18.116.101.220USAS16509 Amazon.com, Inc.14.6K
18.218.118.203USAS16509 Amazon.com, Inc.14.2K
167.94.146.50USAS398705 Censys, Inc.13.7K
167.94.146.55USAS398705 Censys, Inc.13.7K
167.94.146.56USAS398705 Censys, Inc.13.6K
167.94.146.59USAS398705 Censys, Inc.13.6K
167.94.146.58USAS398705 Censys, Inc.13.5K
167.94.146.57USAS398705 Censys, Inc.13.5K
167.94.146.53USAS398705 Censys, Inc.13.4K
167.94.146.63USAS398705 Censys, Inc.13.4K
167.94.146.48USAS398705 Censys, Inc.13.3K
167.94.146.62USAS398705 Censys, Inc.13.3K
167.94.146.51USAS398705 Censys, Inc.13.3K
167.94.146.54USAS398705 Censys, Inc.13.2K
167.94.146.52USAS398705 Censys, Inc.13.2K
167.94.146.61USAS398705 Censys, Inc.13.2K
167.94.146.49USAS398705 Censys, Inc.13.2K
167.94.146.60USAS398705 Censys, Inc.13.0K

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.