HoneyLabs

JA4H HTTP client fingerprint

ge11nn0500_cac2c496544b

Seen 2026-02-21 to 2026-07-06 across the retained window.

571

Source IPs

57

Networks

30

Countries

359

Ports hit

17.4K

Events

10

IPs / network

Top networks

Countries

US 318DE 49SG 48GB 28JP 23HK 22CA 19NL 14CN 7IN 6

Ports targeted

Source IPCCNetworkEvents
67.213.118.179USAS396356 Latitude.sh4.4K
194.246.38.42ROAS49468 Magit'st Srl1.9K
163.7.3.220IDAS150436 Byteplus Pte. Ltd.1.3K
167.86.68.175DEAS51167 Contabo GmbH782
80.87.206.251RUAS16276 OVH SAS405
205.237.106.117FRAS3920 PUSHPKT OU327
45.148.10.166NLAS48090 Techoff Srv Limited327
168.76.20.229ZAAS137951 ASLINE LIMITED204
118.123.80.29CNAS4134 Chinanet175
118.123.80.24CNAS4134 Chinanet142
118.123.80.60CNAS4134 Chinanet135
101.47.23.214SGAS150436 Byteplus Pte. Ltd.120
69.5.20.93IDAS150436 Byteplus Pte. Ltd.101
107.155.55.51SGAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED90
152.32.173.62HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED89
128.1.49.71JPAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED88
152.32.173.129HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED86
118.26.110.66SGAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED85
152.32.220.111SGAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED84
3.79.191.113DEAS16509 Amazon.com, Inc.78

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.