HoneyLabs

JA4H HTTP client fingerprint

op10nn0100_4740ae6347b0

Seen 2026-02-23 to 2026-08-27 across the retained window.

59

Source IPs

1

Networks

10

Countries

4

Ports hit

61

Events

59

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

Countries

US 23FI 9NL 5CH 4AU 4BR 4BE 4GB 3CA 2DE 1

Ports targeted

What it requests

OPTIONS/61
Source IPCCNetwork Last seenEvents
34.140.3.220BEAS396982 Google LLC2026-08-102
136.70.140.165USAS396982 Google LLC2026-08-032
35.244.66.202AUAS396982 Google LLC2026-08-171
34.19.135.137CAAS396982 Google LLC2026-08-241
35.237.116.79USAS396982 Google LLC2026-08-101
34.186.211.108CAAS396982 Google LLC2026-08-131
8.231.135.125USAS396982 Google LLC2026-08-031
34.73.30.69USAS396982 Google LLC2026-08-061
34.26.170.142USAS396982 Google LLC2026-08-061
34.151.183.245AUAS396982 Google LLC2026-08-271
34.158.16.250CHAS396982 Google LLC2026-08-101
34.88.221.110FIAS396982 Google LLC2026-08-271
34.20.204.186USAS396982 Google LLC2026-08-241
34.40.194.190AUAS396982 Google LLC2026-08-171
34.39.48.162GBAS396982 Google LLC2026-08-101
34.95.208.101BRAS396982 Google LLC2026-08-101
34.90.8.53NLAS396982 Google LLC2026-08-171
34.169.209.52USAS396982 Google LLC2026-08-061
35.247.224.223BRAS396982 Google LLC2026-08-241
34.21.19.175USAS396982 Google LLC2026-08-241

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.