HoneyLabs

JA4H HTTP client fingerprint

ge11nn0400_81183b25faae

Seen 2026-03-30 to 2026-07-26 across the retained window.

13

Source IPs

9

Networks

7

Countries

560

Ports hit

2.4K

Events

1

IPs / network

This fingerprint is spread thinly across many networks, which is the shape of a common, widely-used client.

Top networks

Countries

NL 6US 2IN 1LT 1IR 1DE 1FI 1

Ports targeted

Source IPCCNetworkEvents
165.227.213.98USAS14061 DigitalOcean, LLC2.1K
45.112.149.170INAS45769 D-Vois Broadband Pvt Ltd141
94.154.43.64NLAS219502 Storm Industries LLC46
124.198.131.185USAS210558 1337 Services GmbH33
172.94.9.98IRAS213790 Limited Network LTD24
164.92.157.85NLAS14061 DigitalOcean, LLC7
35.228.236.33FIAS396982 Google LLC4
104.248.207.162NLAS14061 DigitalOcean, LLC3
165.232.90.170NLAS14061 DigitalOcean, LLC3
141.98.10.12LTAS209605 UAB Host Baltic1
164.92.156.74NLAS14061 DigitalOcean, LLC1
68.183.14.16NLAS14061 DigitalOcean, LLC1
5.75.183.151DEAS24940 Hetzner Online GmbH1

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.