HoneyLabs

JA4H HTTP client fingerprint

ge11nn0400_ef4d07580f66

Seen 2026-02-21 to 2026-07-06 across the retained window.

3.1K

Source IPs

133

Networks

46

Countries

6.0K

Ports hit

84.5K

Events

23

IPs / network

Top networks

AS0 8 IPs2.2K

Countries

US 967JP 516SG 487DE 485MY 446SC 27FR 18GB 18IN 16NL 15

Ports targeted

Source IPCCNetworkEvents
160.119.76.60SCAS49870 Alsycon B.V.3.8K
160.119.76.62SCAS49870 Alsycon B.V.3.4K
160.119.76.21SCAS49870 Alsycon B.V.3.1K
160.119.76.34SCAS49870 Alsycon B.V.2.3K
160.119.76.59SCAS49870 Alsycon B.V.1.4K
160.119.76.54SCAS49870 Alsycon B.V.1.4K
160.119.76.32SCAS49870 Alsycon B.V.1.4K
160.119.76.43SCAS49870 Alsycon B.V.1.4K
160.119.76.24SCAS49870 Alsycon B.V.1.3K
45.198.224.5SEAS0 1.3K
160.119.76.63SCAS49870 Alsycon B.V.1.2K
78.100.195.89QAAS8781 Ooredoo Q.S.C.1.2K
154.86.119.173SCAS0 1.2K
160.119.76.16SCAS49870 Alsycon B.V.1.1K
160.119.76.52SCAS49870 Alsycon B.V.1.0K
160.119.76.50SCAS49870 Alsycon B.V.955
160.119.76.55SCAS49870 Alsycon B.V.915
160.119.76.49SCAS49870 Alsycon B.V.915
160.119.76.19SCAS49870 Alsycon B.V.556
160.119.76.58SCAS49870 Alsycon B.V.517

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.