HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

JA4H HTTP client fingerprint

ge11nn0400_9c3956fad5da

Seen 2026-02-19 to 2026-09-04 across the retained window.

Open in lookup →

1.6K

Source IPs

101

Networks

37

Countries

30.8K

Ports hit

237.4K

Events

16

IPs / network

Top networks

AS16509 Amazon.com, Inc.647 IPs3.4K
AS398324 Censys, Inc.270 IPs88.2K
AS14061 DigitalOcean, LLC141 IPs1.5K
AS398722 Censys, Inc.128 IPs14.0K
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED74 IPs40.0K
AS63949 Akamai Connected Cloud63 IPs207
AS398705 Censys, Inc.16 IPs65.1K
AS4837 CHINA UNICOM China169 Backbone16 IPs20
AS37963 Hangzhou Alibaba Advertising Co.,Ltd.14 IPs76
AS219502 Storm Industries LLC13 IPs259
AS396982 Google LLC11 IPs20
AS399629 BL Networks10 IPs91

Countries

US 1.3KCN 45NL 44HK 39DE 37TH 17CA 16GB 11SG 10RU 10

Ports targeted

80/tcp 4.7K443/tcp 4.0K8080/tcp 1.7K8000/tcp 1.1K8888/tcp 9843000/tcp 6834841/tcp 6669000/tcp 6635001/tcp 6531962/tcp 6271963/tcp 6244839/tcp 622

What it requests

GET/favicon.ico178.0K
GET/13.8K
GET/sitemap.xml10.8K
GET/robots.txt10.8K
GET/aab92.2K
GET/aaa92.1K
GEThttp://azenv.net/1.9K
GEThttp://proxy.flarevpn.digital:8080/judge1.6K
GET/logs?format=xml866
GEThttp://httpbin.org/get560
GET/api/health468
GET/.git/config456

User agents claimed

Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)414 IPs167.3K
Go-http-client/1.1167 IPs38.8K
l9explore/1.2.26 IPs9.3K
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.3611 IPs4.1K
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.361 IPs2.5K
Source IPCCNetwork Last seenEvents
167.94.146.55USAS398705 Censys, Inc.2026-09-044.4K
167.94.146.52USAS398705 Censys, Inc.2026-09-044.3K
93.123.109.228BGAS48090 Techoff Srv Limited2026-08-284.2K
167.94.146.57USAS398705 Censys, Inc.2026-09-044.2K
167.94.146.63USAS398705 Censys, Inc.2026-09-044.2K
167.94.146.56USAS398705 Censys, Inc.2026-09-044.1K
167.94.146.59USAS398705 Censys, Inc.2026-09-044.1K
167.94.146.60USAS398705 Censys, Inc.2026-09-044.1K
167.94.146.62USAS398705 Censys, Inc.2026-09-044.1K
167.94.146.49USAS398705 Censys, Inc.2026-09-044.1K
167.94.146.58USAS398705 Censys, Inc.2026-09-044.1K
167.94.146.50USAS398705 Censys, Inc.2026-09-044.0K
167.94.146.53USAS398705 Censys, Inc.2026-09-044.0K
167.94.146.54USAS398705 Censys, Inc.2026-09-043.9K
167.94.146.51USAS398705 Censys, Inc.2026-09-043.9K
167.94.146.48USAS398705 Censys, Inc.2026-09-043.8K
167.94.146.61USAS398705 Censys, Inc.2026-09-043.8K
193.32.204.199TRAS153622 Madina IT2026-09-042.9K
52.24.112.111USAS16509 Amazon.com, Inc.2026-09-022.5K
204.76.203.7NLAS51396 Pfcloud UG (haftungsbeschrankt)2026-09-031.7K

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.