HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

JA4H HTTP client fingerprint

ge11nn0500_9af7e0472034

Seen 2026-02-19 to 2026-09-15 across the retained window.

Open in lookup →

723

Source IPs

35

Networks

20

Countries

1.8K

Ports hit

15.3K

Events

21

IPs / network

Top networks

AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED621 IPs13.9K
AS142002 Scloud Pte Ltd23 IPs353
AS14061 DigitalOcean, LLC21 IPs209
AS51396 Pfcloud UG (haftungsbeschrankt)6 IPs100
AS16509 Amazon.com, Inc.6 IPs26
AS197170 TechTies Inc.3 IPs72
AS213790 Limited Network LTD3 IPs47
AS210644 Aeza Group LLC3 IPs31
AS8560 IONOS SE3 IPs21
AS401626 Netiface America, Inc.3 IPs13
AS207043 Dedik Services Limited2 IPs243
AS48090 Techoff Srv Limited2 IPs41

Countries

US 437HK 139SC 93NL 16DE 8IN 7UA 4FR 3IR 3SG 2

Ports targeted

8080/tcp 1.3K8181/tcp 1.1K4433/tcp 1.1K443/tcp 42380/tcp 20011443/tcp 1518317/tcp 1278443/tcp 369200/tcp 348000/tcp 203000/tcp 20636/tcp 14

What it requests

GET/7.7K
GET/favicon.ico7.3K
GET/.env114
GET/.git/config49
GET/remote/login22
GET/env16
GET/_profiler/phpinfo14
GET/.git/HEAD12
GET/.git/index12
GET/api/public/downloads/recommended/file11
GET/.svn/wc.db8
GET/.git/refs/6

User agents claimed

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/113.016 IPs34
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.017 IPs34
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/608.2.11 (KHTML, like Gecko) Version/13 Safari/608.2.1115 IPs34
Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3617 IPs33
Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.3616 IPs32
Source IPCCNetwork Last seenEvents
2.27.160.71USAS207043 Dedik Services Limited2026-09-13200
107.150.97.4USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1596
152.53.191.99DEAS197540 netcup GmbH2026-09-0895
107.150.103.9USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1584
165.154.134.22USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1584
152.32.235.6USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1582
107.150.102.190USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1582
107.150.102.191USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1580
165.154.163.115USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1478
165.154.135.211USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1478
118.193.77.116USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1576
152.32.233.178USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1474
107.150.97.149USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1572
165.154.172.36USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-0470
107.150.105.214USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1568
107.150.103.65USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1466
107.150.100.197USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1566
165.154.173.60USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-0566
165.154.173.125USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-0366
107.150.109.193USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1465

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.