HoneyLabs

JA4H HTTP client fingerprint

ge11nn06en_e4773a62bf4c

Seen 2026-02-20 to 2026-06-21 across the retained window.

74

Source IPs

34

Networks

20

Countries

2.7K

Ports hit

47.0K

Events

2

IPs / network

Top networks

AS0 6 IPs53

Countries

US 26RU 11IR 7BG 5CN 5NL 3FR 2DE 2GB 2PA 1

Ports targeted

Source IPCCNetworkEvents
185.93.89.121IRAS213790 Limited Network LTD20.9K
213.209.159.5TWAS208137 Feo Prest SRL14.4K
165.227.213.98USAS14061 DigitalOcean, LLC6.2K
176.120.22.147RUAS198953 Proton66 OOO1.9K
91.215.85.104RUAS200593 Prospero Ooo389
84.200.73.111DEAS214036 Ultahost, Inc.334
45.74.59.4USAS208185 Net Gate Telecom S.R.L.312
45.74.59.3USAS208185 Net Gate Telecom S.R.L.279
45.74.59.2USAS208185 Net Gate Telecom S.R.L.240
78.100.195.89QAAS8781 Ooredoo Q.S.C.230
194.165.16.11MCAS48721 Flyservers S.A.221
101.36.125.58HKAS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED198
79.124.40.162BGAS50360 Tamatiya EOOD172
141.98.82.26PAAS209588 Flyservers S.A.156
176.120.22.120RUAS198953 Proton66 OOO112
108.181.56.75USAS40676 Psychz Networks96
46.21.146.162NLAS29802 HIVELOCITY, Inc.84
109.172.8.83EEAS62212 SmartApe OU72
192.253.248.152IRAS213790 Limited Network LTD57
192.253.248.154IRAS213790 Limited Network LTD49

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.