HoneyLabs

JA4H HTTP client fingerprint

ge11nn0400_9c3956fad5da

Seen 2026-02-19 to 2026-06-04 across the retained window.

5.4K

Source IPs

135

Networks

41

Countries

56.5K

Ports hit

758.3K

Events

40

IPs / network

Top networks

AS0 186 IPs99.7K

Countries

US 3.1KDE 516JP 508MY 487SG 479CN 88NL 51HK 49GB 21TH 17

Ports targeted

Source IPCCNetworkEvents
104.192.2.154USAS27176 DataWagon LLC20.5K
167.94.146.55USAS398705 Censys, Inc.13.6K
167.94.146.50USAS398705 Censys, Inc.13.6K
167.94.146.56USAS398705 Censys, Inc.13.5K
167.94.146.59USAS398705 Censys, Inc.13.5K
167.94.146.58USAS398705 Censys, Inc.13.4K
167.94.146.53USAS398705 Censys, Inc.13.4K
167.94.146.57USAS398705 Censys, Inc.13.4K
167.94.146.63USAS398705 Censys, Inc.13.3K
167.94.146.51USAS398705 Censys, Inc.13.3K
167.94.146.62USAS398705 Censys, Inc.13.2K
167.94.146.48USAS398705 Censys, Inc.13.2K
167.94.146.52USAS398705 Censys, Inc.13.1K
167.94.146.54USAS398705 Censys, Inc.13.1K
167.94.146.49USAS398705 Censys, Inc.13.1K
167.94.146.61USAS398705 Censys, Inc.13.1K
167.94.146.60USAS398705 Censys, Inc.12.9K
185.177.72.61FRAS211590 Bucklog SARL8.5K
80.82.77.202NLAS202425 IP Volume inc3.6K
101.36.112.101HKAS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED2.3K

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.