HoneyLabs

JA4H HTTP client fingerprint

ge11nn09en_ad14bfc8ac19

Seen 2026-05-08 to 2026-07-27 across the retained window.

60

Source IPs

17

Networks

8

Countries

6

Ports hit

436

Events

4

IPs / network

Top networks

Countries

US 31GB 10DE 8FR 4CA 3BR 2JM 1MD 1

Ports targeted

Source IPCCNetworkEvents
185.181.229.69MDAS60602 Inovare-Prim SRL276
216.26.239.16BRAS200373 3xK Tech GmbH26
104.207.63.190FRAS200373 3xK Tech GmbH4
95.163.149.153USAS21769 Colocation America Corporation4
185.196.111.21DEAS42366 TerraTransit AG4
136.0.143.131USAS11798 Ace Data Centers, Inc.4
82.12.97.204GBAS5089 Virgin Media4
209.50.179.33BRAS200373 3xK Tech GmbH4
209.50.181.11GBAS200373 3xK Tech GmbH3
209.50.172.134USAS200373 3xK Tech GmbH3
86.170.74.52GBAS2856 British Telecommunications Limited3
45.3.33.120USAS200373 3xK Tech GmbH3
157.254.75.169USAS9009 M247 Europe SRL3
48.44.49.82USAS6079 RCN3
104.207.41.175USAS200373 3xK Tech GmbH3
104.207.43.214USAS200373 3xK Tech GmbH3
154.17.177.46FRAS9009 M247 Europe SRL3
172.84.101.90USAS47007 Colocation America Corporation3
45.3.42.216GBAS200373 3xK Tech GmbH3
204.14.109.166USAS47007 Colocation America Corporation3

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.