HoneyLabs

JA4H HTTP client fingerprint

po11nn0700_e1eadaf42879

Seen 2026-03-05 to 2026-07-28 across the retained window.

340

Source IPs

180

Networks

56

Countries

69

Ports hit

3.2K

Events

2

IPs / network

This fingerprint is spread thinly across many networks, which is the shape of a common, widely-used client.

Top networks

Countries

IN 63US 25CN 20MY 17MX 15SA 14VN 13EG 11IR 11BR 11

Ports targeted

Source IPCCNetworkEvents
141.148.181.195USAS31898 Oracle Corporation2.0K
185.242.226.103USAS202425 IP Volume inc64
167.86.107.21FRAS51167 Contabo GmbH49
2.27.111.44GBAS2856 British Telecommunications PLC38
155.117.6.87HKAS9304 HGC Global Communications Limited34
161.248.146.210VNAS135918 VIET DIGITAL TECHNOLOGY LIABILITY COMPANY25
150.129.114.227INAS45916 Gujarat Telelink Pvt Ltd24
117.247.251.95INAS9829 National Internet Backbone17
194.79.103.229EGAS36992 ETISALAT MISR14
164.215.155.222IRAS43754 Asiatech Data Transmission company14
124.106.67.118PHAS9299 Philippine Long Distance Telephone Company14
187.217.145.140MXAS8151 UNINET13
160.119.76.10SCAS49870 Alsycon B.V.13
45.127.35.199SGAS134677 Dromatics Systems Pte Ltd12
119.203.187.190KRAS4766 Korea Telecom11
178.135.49.178LBAS42003 OGERO10
185.138.123.230IQAS203217 Horizon Scope Mobile Telecom WLL9
217.146.95.157GBAS25369 Hydra Communications Ltd9
115.187.37.171INAS23860 Alliance Broadband Services Pvt. Ltd.9
61.216.166.31TWAS3462 Data Communication Business Group9

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.