HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
DocsBlog
Dashboard

JA4H HTTP client fingerprint

ge11nn0500_d3a2dcb1cd63

Seen 2026-02-21 to 2026-08-15 across the retained window.

Open in lookup →

1.4K

Source IPs

43

Networks

21

Countries

21.1K

Ports hit

82.7K

Events

31

IPs / network

Top networks

AS25369 Hydra Communications Ltd1.3K IPs66.1K
AS49870 Alsycon B.V.25 IPs9.5K
AS213790 Limited Network LTD18 IPs3.9K
AS36925 ASMedi7 IPs69
AS14061 DigitalOcean, LLC5 IPs57
AS12876 Scaleway S.a.s.3 IPs273
AS208137 Feo Prest SRL2 IPs469
AS51396 Pfcloud UG (haftungsbeschrankt)2 IPs293
AS61112 AKILE LTD2 IPs59
AS135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP2 IPs37
AS206264 Amarutu Technology Ltd2 IPs35
AS4213 Krypt Technologies2 IPs23

Countries

GB 928DE 320NL 265SC 25IR 19US 17MA 7FR 4BG 4TW 2

Ports targeted

80/tcp 549443/tcp 5418443/tcp 26610443/tcp 2405173/tcp 2134433/tcp 19581/tcp 1378000/tcp 1288085/tcp 1258088/tcp 1238084/tcp 1233128/tcp 121
Source IPCCNetworkEvents
94.154.43.36UAAS206264 Amarutu Technology Ltd1.4K
160.119.76.60SCAS49870 Alsycon B.V.1.3K
160.119.76.62SCAS49870 Alsycon B.V.1.2K
160.119.76.21SCAS49870 Alsycon B.V.1.0K
160.119.76.34SCAS49870 Alsycon B.V.797
160.119.76.24SCAS49870 Alsycon B.V.519
160.119.76.59SCAS49870 Alsycon B.V.488
160.119.76.54SCAS49870 Alsycon B.V.478
160.119.76.32SCAS49870 Alsycon B.V.460
160.119.76.43SCAS49870 Alsycon B.V.452
160.119.76.63SCAS49870 Alsycon B.V.413
194.88.98.83DEAS25369 Hydra Communications Ltd401
194.88.98.91DEAS25369 Hydra Communications Ltd371
160.119.76.16SCAS49870 Alsycon B.V.366
176.65.139.36DEAS51396 Pfcloud UG (haftungsbeschrankt)366
194.88.98.88DEAS25369 Hydra Communications Ltd366
194.88.98.85DEAS25369 Hydra Communications Ltd365
194.88.98.90DEAS25369 Hydra Communications Ltd360
194.88.98.84DEAS25369 Hydra Communications Ltd358
194.88.98.89DEAS25369 Hydra Communications Ltd357

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.