HoneyLabs

JA4H HTTP client fingerprint

ge11nn0200_fdb5000be5f4

Seen 2026-02-19 to 2026-07-06 across the retained window.

43

Source IPs

26

Networks

16

Countries

139

Ports hit

87.8K

Events

2

IPs / network

This fingerprint is spread thinly across many networks, which is the shape of a common, widely-used client.

Top networks

Countries

US 10NL 6RU 5GB 5SC 4BG 2CZ 2FR 1CN 1PL 1

Ports targeted

Source IPCCNetworkEvents
130.12.180.77NLAS202412 Omegatech LTD34.7K
130.12.180.111USAS202412 Omegatech LTD33.5K
130.12.180.34USAS202412 Omegatech LTD4.7K
204.76.203.206NLAS51396 Pfcloud UG (haftungsbeschrankt)2.7K
195.178.110.109BGAS48090 Techoff Srv Limited2.5K
45.148.10.247NLAS48090 Techoff Srv Limited2.2K
80.82.77.202NLAS202425 IP Volume inc1.9K
95.215.0.144RUAS34665 Petersburg Internet Network ltd.1.7K
195.178.110.199BGAS48090 Techoff Srv Limited1.4K
162.243.172.115USAS14061 DigitalOcean, LLC870
46.161.50.108RUAS34665 Petersburg Internet Network ltd.755
157.245.247.71USAS14061 DigitalOcean, LLC522
45.91.64.8RUAS214664 JSC Buduschee211
80.94.95.40ROAS204428 SS-Net59
5.61.209.102SCAS206264 Amarutu Technology Ltd29
45.194.67.2DOAS274069 PERSIL SERVICIOS MULTIPLES SRL15
64.176.181.100GBAS20473 The Constant Company, LLC9
5.61.209.33SCAS206264 Amarutu Technology Ltd9
45.91.64.7RUAS214664 JSC Buduschee7
64.89.163.238GBAS401626 Netiface America, Inc.6

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.