HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

JA4H HTTP client fingerprint

po11nn0400_7e1fe689c643

Seen 2026-02-19 to 2026-08-29 across the retained window.

Open in lookup →

188

Source IPs

1

Networks

1

Countries

2

Ports hit

235

Events

188

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

AS396982 Google LLC188 IPs235

Countries

US 188

Ports targeted

5985/tcp 1195986/tcp 116

What it requests

POST/wsman235
Source IPCCNetwork Last seenEvents
198.235.24.167USAS396982 Google LLC2026-08-254
198.235.24.89USAS396982 Google LLC2026-08-093
198.235.24.91USAS396982 Google LLC2026-08-063
147.185.132.30USAS396982 Google LLC2026-08-193
205.210.31.42USAS396982 Google LLC2026-08-273
205.210.31.93USAS396982 Google LLC2026-08-223
147.185.132.15USAS396982 Google LLC2026-08-203
205.210.31.49USAS396982 Google LLC2026-08-263
198.235.24.38USAS396982 Google LLC2026-08-213
198.235.24.251USAS396982 Google LLC2026-08-212
205.210.31.109USAS396982 Google LLC2026-08-122
198.235.24.95USAS396982 Google LLC2026-08-222
198.235.24.164USAS396982 Google LLC2026-08-162
147.185.132.118USAS396982 Google LLC2026-08-112
216.25.89.77USAS396982 Google LLC2026-08-192
147.185.132.18USAS396982 Google LLC2026-08-272
147.185.132.13USAS396982 Google LLC2026-08-202
147.185.132.61USAS396982 Google LLC2026-08-162
198.235.24.94USAS396982 Google LLC2026-08-172
205.210.31.220USAS396982 Google LLC2026-08-192

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.