JA4H HTTP client fingerprint

ge11nn0300_341eb0d8946c

Seen 2026-02-20 to 2026-09-09 across the retained window.

Open in lookup →

6.0K

Source IPs

2

Networks

23

Countries

204

Ports hit

525.5K

Events

2992

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

AS396982 Google LLC6.0K IPs525.4K

AS51852 Private Layer INC1 IPs76

Countries

US 3.3KBE 366JP 304TW 212CA 164GB 153NL 150BR 144CH 135FI 135

Ports targeted

8190/tcp 16.3K 8085/tcp 11.3K 82/tcp 9.9K 8448/tcp 9.3K 4567/tcp 9.1K 9202/tcp 8.7K 12000/tcp 8.6K 7443/tcp 8.6K 8447/tcp 8.4K 5601/tcp 8.3K 9800/tcp 8.1K 443/tcp 7.4K

What it requests

GET/www/.git/config4.2K

GET/src/.git/config4.2K

GET/wordpress/.git/config4.2K

GET/.git/config4.2K

GET/site/.git/config4.2K

GET/public/.git/config4.2K

GET/html/.git/config4.2K

GET/app/.git/config4.2K

GET/backend/.git/config4.2K

GET/htdocs/.git/config4.2K

GET/var/www/.git/config4.2K

GET/api/.git/config4.2K

User agents claimed

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.362.9K IPs420.6K

crusader-worker/1.03.4K IPs104.8K

Mozilla/5.01 IPs76

Source IPCCNetwork Last seenEvents

34.93.32.208INAS396982 Google LLC2026-09-064.8K

35.189.7.56AUAS396982 Google LLC2026-09-064.1K

34.88.217.176FIAS396982 Google LLC2026-09-064.1K

34.153.223.172JPAS396982 Google LLC2026-09-063.2K

34.53.45.204USAS396982 Google LLC2026-09-063.2K

34.146.10.239JPAS396982 Google LLC2026-09-063.1K

34.39.208.120BRAS396982 Google LLC2026-09-063.1K

34.106.96.134USAS396982 Google LLC2026-09-063.0K

136.67.125.61USAS396982 Google LLC2026-09-062.9K

136.117.50.181USAS396982 Google LLC2026-09-062.9K

34.95.158.26BRAS396982 Google LLC2026-09-072.8K

34.116.85.1AUAS396982 Google LLC2026-09-062.8K

34.20.230.32USAS396982 Google LLC2026-09-062.7K

34.146.205.220JPAS396982 Google LLC2026-09-072.6K

34.81.25.124TWAS396982 Google LLC2026-09-062.6K

34.97.2.189JPAS396982 Google LLC2026-09-072.5K

34.21.205.165SGAS396982 Google LLC2026-09-062.5K

34.100.179.178INAS396982 Google LLC2026-09-062.5K

35.233.75.198BEAS396982 Google LLC2026-09-072.4K

35.240.25.196BEAS396982 Google LLC2026-09-062.3K

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.