HoneyLabs

JA4H HTTP client fingerprint

ge11nn0200_f24fcf356134

Seen 2026-02-25 to 2026-07-27 across the retained window.

191

Source IPs

70

Networks

32

Countries

781

Ports hit

6.5K

Events

3

IPs / network

Top networks

AS0 4 IPs141

Countries

GB 47DE 27NL 25US 21TW 11SC 6UA 5PL 5BG 4HK 4

Ports targeted

Source IPCCNetworkEvents
5.61.209.33SCAS206264 Amarutu Technology Ltd1.0K
5.61.209.43SCAS206264 Amarutu Technology Ltd709
45.205.1.62SCAS328608 Africa-on-Cloud-AS592
2.57.121.203ROAS47890 Unmanaged Ltd394
195.3.221.86PLAS201814 MEVSPACE sp. z o.o.345
45.153.34.231NLAS197170 TechTies Inc.206
45.156.87.213NLAS197170 TechTies Inc.183
151.242.30.224AEAS214209 Internet Magnate (Pty) Ltd166
45.153.34.252NLAS197170 TechTies Inc.155
46.151.182.107NLAS205759 Ghosty Networks LLC153
45.153.34.219NLAS197170 TechTies Inc.147
163.172.4.167FRAS12876 Scaleway SAS133
45.153.34.195NLAS197170 TechTies Inc.133
45.139.122.80NLAS206264 Amarutu Technology Ltd130
85.11.167.203NLAS197170 TechTies Inc.130
128.136.131.84USAS13649 Flexential Colorado Corp.115
94.154.43.50NLAS219502 Storm Industries LLC65
94.154.43.243NLAS219502 Storm Industries LLC51
44.199.249.51USAS14618 Amazon.com, Inc.49

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.