HoneyLabs

JA4H HTTP client fingerprint

po11nn0600_ed383ed8462e

Seen 2026-02-19 to 2026-07-27 across the retained window.

826

Source IPs

19

Networks

12

Countries

10

Ports hit

2.1K

Events

43

IPs / network

Top networks

AS0 122 IPs202

Countries

US 763DE 26CA 13FR 10NL 5HK 2GB 2JP 1MD 1SC 1

Ports targeted

Source IPCCNetworkEvents
185.181.229.69MDAS60602 Inovare-Prim SRL255
18.116.101.220USAS16509 Amazon.com, Inc.67
16.58.56.214USAS16509 Amazon.com, Inc.66
5.61.209.224SCAS206264 Amarutu Technology Ltd48
18.218.118.203USAS16509 Amazon.com, Inc.40
3.129.187.38USAS16509 Amazon.com, Inc.26
142.93.146.198CAAS14061 DigitalOcean, LLC20
194.213.3.108GBAS212027 PebbleHost Ltd20
3.130.168.2USAS16509 Amazon.com, Inc.19
3.131.220.121USAS16509 Amazon.com, Inc.15
167.94.146.52USAS398705 Censys, Inc.12
167.94.146.55USAS398705 Censys, Inc.11
64.62.156.202USAS6939 Hurricane Electric LLC10
184.105.247.195USAS6939 Hurricane Electric LLC9
3.132.26.232USAS16509 Amazon.com, Inc.9
167.94.146.58USAS398705 Censys, Inc.9
167.94.146.62USAS398705 Censys, Inc.8
66.132.172.139USAS398324 Censys, Inc.8
65.49.20.67USAS6939 Hurricane Electric LLC8
64.62.156.192USAS6939 Hurricane Electric LLC8

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.