JA4H HTTP client fingerprint

ge11nn0400_91d9e55fb80a

Seen 2026-05-15 to 2026-07-19 across the retained window.

Open in lookup →

10

Source IPs

7

Networks

7

Countries

17

Ports hit

115

Events

1

IPs / network

This fingerprint is spread thinly across many networks, which is the shape of a common, widely-used client.

Top networks

AS4134 Chinanet3 IPs44

AS401626 Netiface America, Inc.2 IPs16

AS51852 Private Layer INC1 IPs29

AS36352 HostPapa1 IPs9

AS209630 LLC Vash Kredit Bank1 IPs7

AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED1 IPs6

AS16735 ALGAR TELECOM S/A1 IPs4

Countries

CN 3US 2HK 1NL 1CH 1BR 1AE 1

Ports targeted

8161/tcp 18 444/tcp 10 8080/tcp 10 443/tcp 9 8317/tcp 9 3000/tcp 7 8001/tcp 6 11413/tcp 6 8081/tcp 6 8000/tcp 6 6001/tcp 5 5001/tcp 5

Source IPCCNetworkEvents

179.43.163.26CHAS51852 Private Layer INC29

118.123.80.12CNAS4134 Chinanet23

118.123.80.56CNAS4134 Chinanet20

185.242.3.87NLAS401626 Netiface America, Inc.13

204.152.193.32USAS36352 HostPapa9

151.243.11.23AEAS209630 LLC Vash Kredit Bank7

101.36.125.58HKAS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED6

201.16.163.61BRAS16735 ALGAR TELECOM S/A4

64.89.163.22USAS401626 Netiface America, Inc.3

118.123.80.29CNAS4134 Chinanet1

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.