HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

JA4H HTTP client fingerprint

he11nn0400_8fd06a127c33

Seen 2026-06-03 to 2026-09-07 across the retained window.

Open in lookup →

25

Source IPs

1

Networks

2

Countries

1

Ports hit

25

Events

25

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

AS396982 Google LLC25 IPs25

Countries

US 23SG 2

Ports targeted

80/tcp 25

What it requests

HEAD/25

User agents claimed

Python-urllib/3.1425 IPs25
Source IPCCNetwork Last seenEvents
34.96.36.85USAS396982 Google LLC2026-08-251
34.96.45.196USAS396982 Google LLC2026-08-261
34.96.48.80SGAS396982 Google LLC2026-08-301
34.34.229.34USAS396982 Google LLC2026-08-261
136.124.35.116USAS396982 Google LLC2026-08-261
34.96.36.188USAS396982 Google LLC2026-08-271
34.96.36.147USAS396982 Google LLC2026-08-231
34.96.60.197USAS396982 Google LLC2026-08-261
34.96.36.123USAS396982 Google LLC2026-08-311
34.96.47.196USAS396982 Google LLC2026-08-261
136.124.33.0USAS396982 Google LLC2026-08-211
34.96.49.245USAS396982 Google LLC2026-08-301
34.34.229.110USAS396982 Google LLC2026-08-221
34.96.49.168USAS396982 Google LLC2026-08-201
34.34.229.99USAS396982 Google LLC2026-09-021
136.124.35.32USAS396982 Google LLC2026-09-031
34.96.49.10USAS396982 Google LLC2026-09-071
136.124.32.226USAS396982 Google LLC2026-08-301
34.96.49.235USAS396982 Google LLC2026-09-041
34.96.49.198USAS396982 Google LLC2026-08-311

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.