JA4H HTTP client fingerprint

ge11nn0400_8fd06a127c33

Seen 2026-02-27 to 2026-09-11 across the retained window.

Open in lookup →

61

Source IPs

42

Networks

20

Countries

54.2K

Ports hit

4.1M

Events

1

IPs / network

This fingerprint is spread thinly across many networks, which is the shape of a common, widely-used client.

Top networks

AS137409 GSL Networks Pty LTD7 IPs15

AS41378 Kirino LLC5 IPs6

AS14061 DigitalOcean, LLC4 IPs65

AS8560 IONOS SE2 IPs62

AS51167 Contabo GmbH2 IPs25

AS30986 Scancom Limited2 IPs5

AS16509 Amazon.com, Inc.2 IPs3

AS56041 China Mobile communications corporation2 IPs2

AS396982 Google LLC2 IPs2

AS211750 MC-Node1 IPs4.1M

AS37963 Hangzhou Alibaba Advertising Co.,Ltd.1 IPs265

AS45090 Shenzhen Tencent Computer Systems Company Limited1 IPs67

Countries

US 11DZ 7DE 6CN 6NL 6TW 5FR 2SC 2IN 2UA 2

Ports targeted

9119/tcp 677 7777/tcp 552 2302/tcp 550 2303/tcp 550 2304/tcp 550 2456/tcp 549 2457/tcp 549 2458/tcp 549 7779/tcp 548 7778/tcp 548 2305/tcp 546 2306/tcp 546

What it requests

GET/INFO2.1M

GET/dynamic.json2.0M

GET/env332

GET/136

GET/v1/models49

GET/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession46

GEThttp://rfb.ac/judge32

GET/index.php14

GET/_ignition/execute-solution14

GET/public/plugins/alertlist/../../../../../../../../../../../../../../../../../../../etc/passwd12

User agents claimed

mcnode-exporter/1.01 IPs4.1M

Mozilla/5.037 IPs271

Python-urllib/3.61 IPs265

Python-urllib/3.122 IPs68

Python-urllib/3.92 IPs62

Source IPCCNetwork Last seenEvents

185.228.82.243NLAS211750 MC-Node2026-09-114.1M

39.106.215.228CNAS37963 Hangzhou Alibaba Advertising Co.,Ltd.2026-09-11265

101.34.89.52CNAS45090 Shenzhen Tencent Computer Systems Company Limited2026-09-1067

87.106.118.51DEAS8560 IONOS SE2026-09-0354

5.188.206.202BGAS200391 Krez 999 Eood2026-09-0644

45.90.99.197DEAS58087 Florian Kolb2026-09-1142

195.128.248.33UAAS6698 Virtual Systems LLC2026-08-2637

164.92.136.2DEAS14061 DigitalOcean, LLC2026-09-0632

77.90.185.247IRAS213790 Limited Network LTD2026-08-1730

37.19.200.137USAS212238 Datacamp Limited2026-09-0228

168.144.135.119SGAS14061 DigitalOcean, LLC2026-08-1622

45.159.230.92DEAS51167 Contabo GmbH2026-08-2916

155.2.191.24USAS136557 Host Universal Pty Ltd2026-09-0216

96.126.104.195USAS63949 Akamai Connected Cloud2026-09-0811

83.147.38.124USAS32097 WholeSale Internet, Inc.2026-08-2610

47.89.230.67USAS45102 Alibaba (US) Technology Co., Ltd.2026-08-1910

159.195.31.173DEAS197540 netcup GmbH2026-09-0610

45.55.89.67USAS14061 DigitalOcean, LLC2026-08-2410

43.133.163.249JPAS132203 Tencent Building, Kejizhongyi Avenue2026-08-2210

45.130.203.188DZAS137409 GSL Networks Pty LTD2026-08-269

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.