HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

JA4H HTTP client fingerprint

po11nn0300_7059b3fb2d4a

Seen 2026-05-04 to 2026-08-29 across the retained window.

Open in lookup →

187

Source IPs

1

Networks

2

Countries

6

Ports hit

198

Events

187

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

AS396982 Google LLC187 IPs198

Countries

US 162GB 25

Ports targeted

7547/tcp 1168547/tcp 207549/tcp 177545/tcp 1627547/tcp 1617547/tcp 13

What it requests

POST/198
Source IPCCNetwork Last seenEvents
35.203.210.41GBAS396982 Google LLC2026-08-213
147.185.132.39USAS396982 Google LLC2026-08-032
205.210.31.50USAS396982 Google LLC2026-08-242
147.185.132.195USAS396982 Google LLC2026-08-212
35.203.210.91GBAS396982 Google LLC2026-08-282
162.216.150.203USAS396982 Google LLC2026-08-172
198.235.24.240USAS396982 Google LLC2026-08-162
198.235.24.238USAS396982 Google LLC2026-08-212
147.185.132.45USAS396982 Google LLC2026-08-242
147.185.132.201USAS396982 Google LLC2026-08-102
205.210.31.91USAS396982 Google LLC2026-08-081
198.235.24.131USAS396982 Google LLC2026-08-111
205.210.31.40USAS396982 Google LLC2026-08-051
147.185.132.240USAS396982 Google LLC2026-08-281
198.235.24.222USAS396982 Google LLC2026-08-261
147.185.132.118USAS396982 Google LLC2026-08-091
147.185.132.46USAS396982 Google LLC2026-07-301
205.210.31.69USAS396982 Google LLC2026-08-191
35.203.211.174GBAS396982 Google LLC2026-08-131
198.235.24.124USAS396982 Google LLC2026-08-101

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.