HoneyLabs

JA4H HTTP client fingerprint

ge11nn07en_c3e833da1ad8

Seen 2026-02-20 to 2026-07-27 across the retained window.

503

Source IPs

47

Networks

20

Countries

35

Ports hit

1.5K

Events

11

IPs / network

Top networks

Countries

US 466DE 10IN 4NL 3CA 3KR 2SG 2TH 1TR 1GB 1

Ports targeted

Source IPCCNetworkEvents
91.92.43.129DEAS207043 Dedik Services Limited68
91.92.43.130DEAS207043 Dedik Services Limited67
91.92.33.114DEAS207043 Dedik Services Limited64
91.92.33.66DEAS207043 Dedik Services Limited63
93.152.224.155DEAS207043 Dedik Services Limited59
93.152.224.173DEAS207043 Dedik Services Limited58
82.24.200.58USAS397423 Tier.Net Technologies LLC55
91.92.33.65DEAS207043 Dedik Services Limited51
93.152.224.157DEAS207043 Dedik Services Limited51
94.26.90.114DEAS207043 Dedik Services Limited47
91.92.33.34DEAS207043 Dedik Services Limited46
199.47.242.83NLAS60781 LeaseWeb Netherlands B.V.30
199.47.242.80NLAS60781 LeaseWeb Netherlands B.V.24
70.95.75.217USAS20001 Charter Communications Inc18
24.214.20.170USAS12083 WideOpenWest Finance LLC18
184.107.106.72CAAS32613 Leaseweb Canada Inc.15
82.24.200.15USAS397423 Tier.Net Technologies LLC9
150.241.203.92USAS19318 Interserver, Inc9
103.120.189.68INAS137654 Netstra Communications Pvt Ltd6
184.107.106.73CAAS32613 Leaseweb Canada Inc.6

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.