JA4H HTTP client fingerprint

ge11nn0300_dedeb29cc523

Seen 2026-02-20 to 2026-07-27 across the retained window.

Open in lookup →

1.6K

Source IPs

Networks

Countries

555

Ports hit

12.9K

Events

526

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

AS14061 DigitalOcean, LLC983 IPs7.6K

AS63949 Akamai Connected Cloud593 IPs5.3K

AS0 1 IPs1

Countries

US 1.5KCA 33AU 17GB 14DE 13

Ports targeted

443/tcp 691 4433/tcp 664 8443/tcp 663 4443/tcp 617 8080/tcp 565 4444/tcp 518 80/tcp 489 9200/tcp 243 8086/tcp 131 943/tcp 31 1993/tcp 31 1987/tcp 30

Source IPCCNetworkEvents

167.71.22.183USAS14061 DigitalOcean, LLC90

157.245.190.121USAS14061 DigitalOcean, LLC88

165.227.23.2USAS14061 DigitalOcean, LLC86

66.228.53.105USAS63949 Akamai Connected Cloud85

45.79.202.194USAS63949 Akamai Connected Cloud84

74.207.243.171USAS63949 Akamai Connected Cloud83

165.22.150.172USAS14061 DigitalOcean, LLC83

157.230.180.226USAS14061 DigitalOcean, LLC83

170.64.146.180AUAS14061 DigitalOcean, LLC82

66.228.53.163USAS63949 Akamai Connected Cloud81

165.227.21.39USAS14061 DigitalOcean, LLC81

159.89.55.59USAS14061 DigitalOcean, LLC80

45.79.207.14USAS63949 Akamai Connected Cloud80

165.22.162.48USAS14061 DigitalOcean, LLC80

159.65.226.156USAS14061 DigitalOcean, LLC80

50.116.19.134USAS63949 Akamai Connected Cloud80

74.207.254.127USAS63949 Akamai Connected Cloud80

74.207.252.109USAS63949 Akamai Connected Cloud80

167.99.4.153USAS14061 DigitalOcean, LLC80

142.93.250.47USAS14061 DigitalOcean, LLC80

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.