HoneyLabs

JA4H HTTP client fingerprint

ge11nn12en_023595b8c6e1

Seen 2026-05-08 to 2026-07-27 across the retained window.

65

Source IPs

17

Networks

8

Countries

6

Ports hit

610

Events

4

IPs / network

Top networks

Countries

US 34GB 11DE 8FR 5CA 3BR 2JM 1MD 1

Ports targeted

Source IPCCNetworkEvents
185.181.229.69MDAS60602 Inovare-Prim SRL377
216.26.239.16BRAS200373 3xK Tech GmbH49
45.3.42.216GBAS200373 3xK Tech GmbH7
104.207.63.190FRAS200373 3xK Tech GmbH6
216.26.243.95GBAS200373 3xK Tech GmbH5
198.56.1.221USAS9009 M247 Europe SRL5
65.111.1.9USAS200373 3xK Tech GmbH5
154.17.173.237FRAS9009 M247 Europe SRL5
184.174.11.131USAS21769 Colocation America Corporation5
48.44.49.82USAS6079 RCN5
65.111.22.86GBAS200373 3xK Tech GmbH4
104.207.32.199USAS200373 3xK Tech GmbH4
82.21.70.164DEAS212238 Datacamp Limited4
185.201.161.98DEAS42366 TerraTransit AG4
81.79.51.65GBAS5378 Vodafone Limited4
209.50.187.216CAAS200373 3xK Tech GmbH4
152.232.63.213USAS55286 B2 Net Solutions Inc.4
173.211.36.23USAS21769 Colocation America Corporation4
95.163.150.180USAS21769 Colocation America Corporation4
45.73.164.169USAS21769 Colocation America Corporation4

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.