JA4H HTTP client fingerprint

ge11nn0400_17292dadbc7b

Seen 2026-02-19 to 2026-07-28 across the retained window.

Open in lookup →

1.6K

Source IPs

75

Networks

30

Countries

24.8K

Ports hit

147.4K

Events

22

IPs / network

Top networks

AS25369 Hydra Communications Ltd1.3K IPs22.7K

AS14987 Rethem Hosting LLC114 IPs22.8K

AS49870 Alsycon B.V.27 IPs15.6K

AS215925 Vpsvault.host Ltd16 IPs13.8K

AS396982 Google LLC12 IPs26

AS14061 DigitalOcean, LLC11 IPs179

AS0 10 IPs2.2K

AS45102 Alibaba US Technology Co., Ltd.10 IPs775

AS209630 LLC Vash Kredit Bank9 IPs3.9K

AS51396 Pfcloud UG (haftungsbeschrankt)8 IPs206

AS206264 Amarutu Technology Ltd6 IPs39.2K

AS32475 Internap Holding LLC4 IPs11.7K

Countries

GB 997NL 275DE 225US 173SC 27AE 10BR 9CN 9RU 6IN 6

Ports targeted

443/tcp 5.8K 80/tcp 2.2K 8080/tcp 1.0K 8443/tcp 1.0K 9443/tcp 711 84/tcp 698 83/tcp 641 82/tcp 630 8000/tcp 628 5000/tcp 617 81/tcp 532 8800/tcp 495

Source IPCCNetworkEvents

5.61.209.224SCAS206264 Amarutu Technology Ltd22.4K

5.187.35.26NLAS206264 Amarutu Technology Ltd8.5K

5.187.35.142NLAS206264 Amarutu Technology Ltd8.2K

172.245.21.30USAS36352 HostPapa3.8K

192.161.49.2USAS23273 HostPapa3.2K

162.217.100.196USAS32475 Internap Holding LLC3.1K

162.217.100.36USAS32475 Internap Holding LLC3.0K

162.217.100.41USAS32475 Internap Holding LLC2.8K

162.217.100.201USAS32475 Internap Holding LLC2.8K

115.231.78.11CNAS58461 CT-HangZhou-IDC2.2K

160.119.76.60SCAS49870 Alsycon B.V.1.9K

45.205.1.240BRAS215925 Vpsvault.host Ltd1.5K

160.119.76.21SCAS49870 Alsycon B.V.1.5K

45.205.1.245BRAS215925 Vpsvault.host Ltd1.4K

160.119.76.62SCAS49870 Alsycon B.V.1.3K

45.205.1.246BRAS215925 Vpsvault.host Ltd1.2K

45.205.1.241BRAS215925 Vpsvault.host Ltd1.2K

45.194.67.27USAS215925 Vpsvault.host Ltd1.2K

45.205.1.242BRAS215925 Vpsvault.host Ltd1.2K

160.119.76.34SCAS49870 Alsycon B.V.1.2K

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.