HoneyLabs

JA4H HTTP client fingerprint

po11nn0500_b4ba55311b46

Seen 2026-02-20 to 2026-07-28 across the retained window.

711

Source IPs

68

Networks

28

Countries

52

Ports hit

5.7K

Events

10

IPs / network

Top networks

AS0 59 IPs1.9K

Countries

US 522DE 118NL 21GB 7AE 6FR 6SE 4SG 3BG 3AU 2

Ports targeted

Source IPCCNetworkEvents
45.198.224.5SEAS0 1.8K
195.178.110.131BGAS48090 Techoff Srv Limited574
45.198.224.60USAS215925 Vpsvault.host Ltd309
101.36.125.58HKAS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED301
185.181.229.69MDAS60602 Inovare-Prim SRL276
23.111.155.222USAS29802 HIVELOCITY, Inc.217
45.148.10.215NLAS48090 Techoff Srv Limited204
194.213.3.108GBAS212027 PebbleHost Ltd170
45.144.28.70FRAS41745 Baykov Ilya Sergeevich117
151.243.11.23AEAS209630 LLC Vash Kredit Bank71
179.43.163.26CHAS51852 Private Layer INC59
94.154.43.10UAAS219502 Storm Industries LLC46
94.26.106.30DEAS215607 dataforest GmbH37
192.142.28.77NLAS60064 Hostpalace Datacenters Ltd37
185.242.3.5NLAS401626 Netiface America, Inc.26
87.121.84.8USAS215925 Vpsvault.host Ltd21
167.94.146.59USAS398705 Censys, Inc.20
167.94.146.52USAS398705 Censys, Inc.17
167.94.146.61USAS398705 Censys, Inc.13
167.94.146.50USAS398705 Censys, Inc.12

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.