HoneyLabs

JA4H HTTP client fingerprint

po11nn0600_f8bf768a441b

Seen 2026-03-26 to 2026-07-28 across the retained window.

200

Source IPs

112

Networks

41

Countries

12

Ports hit

1.3K

Events

2

IPs / network

This fingerprint is spread thinly across many networks, which is the shape of a common, widely-used client.

Top networks

AS0 3 IPs364

Countries

US 43CN 17IN 16SG 14GB 13FR 10NL 10DE 10CA 7IR 7

Ports targeted

Source IPCCNetworkEvents
45.198.224.5SEAS0 541
45.198.224.4SEAS0 54
78.100.195.89QAAS8781 Ooredoo Q.S.C.23
210.217.42.139KRAS4766 Korea Telecom23
50.116.72.42USAS19871 Network Solutions, LLC21
68.178.167.214USAS26496 GoDaddy.com, LLC20
52.146.20.92USAS8075 Microsoft Corporation19
103.120.189.68INAS137654 Netstra Communications Pvt Ltd19
103.120.189.74INAS137654 Netstra Communications Pvt Ltd18
134.209.97.194SGAS14061 DigitalOcean, LLC17
47.251.42.6USAS45102 Alibaba (US) Technology Co., Ltd.16
161.35.3.45USAS14061 DigitalOcean, LLC16
20.193.146.159INAS8075 Microsoft Corporation15
161.132.53.68PEAS3132 Red Cientifica Peruana15
102.69.167.14TZAS328436 Flashnet-Technologies-Limited14
64.227.160.35INAS14061 DigitalOcean, LLC13
85.215.219.126DEAS8560 IONOS SE11
40.81.230.77INAS8075 Microsoft Corporation11
35.200.191.248INAS396982 Google LLC11
20.203.102.60AEAS8075 Microsoft Corporation10

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.