HoneyLabs

JA4H HTTP client fingerprint

po11nn0700_1cd7ee9bf867

Seen 2026-02-20 to 2026-06-15 across the retained window.

69

Source IPs

4

Networks

9

Countries

121

Ports hit

933

Events

17

IPs / network

Top networks

Countries

DE 20US 15CA 10GB 7NL 7SG 6IN 2ID 1SC 1

Ports targeted

Source IPCCNetworkEvents
167.172.232.142USAS14061 DigitalOcean, LLC35
207.154.197.113DEAS14061 DigitalOcean, LLC29
64.226.65.160DEAS14061 DigitalOcean, LLC28
139.59.136.184DEAS14061 DigitalOcean, LLC25
206.189.233.36USAS14061 DigitalOcean, LLC25
167.99.181.249CAAS14061 DigitalOcean, LLC25
167.172.158.128USAS14061 DigitalOcean, LLC25
68.183.9.16NLAS14061 DigitalOcean, LLC20
209.97.180.8GBAS14061 DigitalOcean, LLC20
167.99.210.137NLAS14061 DigitalOcean, LLC20
139.59.132.8DEAS14061 DigitalOcean, LLC20
167.99.182.39CAAS14061 DigitalOcean, LLC20
46.101.1.225GBAS14061 DigitalOcean, LLC20
157.245.105.107INAS14061 DigitalOcean, LLC20
209.38.208.202DEAS14061 DigitalOcean, LLC20
157.245.204.205SGAS14061 DigitalOcean, LLC20
143.110.217.244CAAS14061 DigitalOcean, LLC20
142.93.129.190NLAS14061 DigitalOcean, LLC20
159.65.18.197GBAS14061 DigitalOcean, LLC19
164.90.208.56DEAS14061 DigitalOcean, LLC19

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.