JA4H HTTP client fingerprint

ge11nn0400_9c3956fad5da

Seen 2026-02-19 to 2026-07-19 across the retained window.

Open in lookup →

6.7K

Source IPs

196

Networks

48

Countries

62.2K

Ports hit

1.1M

Events

34

IPs / network

Top networks

AS45102 Alibaba US Technology Co., Ltd.2.8K IPs21.7K

AS16509 Amazon.com, Inc.2.2K IPs2.8K

AS398324 Censys, Inc.545 IPs265.9K

AS14061 DigitalOcean, LLC361 IPs6.0K

AS0 192 IPs139.0K

AS63949 Akamai Connected Cloud152 IPs538

AS398722 Censys, Inc.96 IPs62.4K

AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED76 IPs234.0K

AS4837 CHINA UNICOM China169 Backbone51 IPs51

AS4134 Chinanet30 IPs83

AS51396 Pfcloud UG (haftungsbeschrankt)22 IPs2.2K

AS37963 Hangzhou Alibaba Advertising Co.,Ltd.19 IPs861

Countries

US 4.2KDE 532JP 509MY 487SG 482CN 135NL 80HK 50CA 30GB 24

Ports targeted

443/tcp 11.6K 80/tcp 11.0K 8080/tcp 7.1K 4841/tcp 2.9K 8443/tcp 2.9K 4839/tcp 2.7K 4840/tcp 2.7K 1963/tcp 2.7K 1962/tcp 2.7K 1961/tcp 2.3K 18789/tcp 2.2K 18245/tcp 2.1K

Source IPCCNetworkEvents

104.192.2.154USAS27176 DataWagon LLC20.5K

167.94.146.63USAS398705 Censys, Inc.19.7K

167.94.146.59USAS398705 Censys, Inc.19.6K

167.94.146.50USAS398705 Censys, Inc.19.6K

167.94.146.56USAS398705 Censys, Inc.19.5K

167.94.146.53USAS398705 Censys, Inc.19.5K

167.94.146.57USAS398705 Censys, Inc.19.5K

167.94.146.55USAS398705 Censys, Inc.19.5K

167.94.146.58USAS398705 Censys, Inc.19.4K

167.94.146.51USAS398705 Censys, Inc.19.3K

167.94.146.49USAS398705 Censys, Inc.19.2K

167.94.146.62USAS398705 Censys, Inc.19.1K

167.94.146.48USAS398705 Censys, Inc.19.1K

167.94.146.61USAS398705 Censys, Inc.19.1K

167.94.146.52USAS398705 Censys, Inc.19.1K

167.94.146.54USAS398705 Censys, Inc.18.9K

167.94.146.60USAS398705 Censys, Inc.18.8K

45.148.10.200NLAS48090 Techoff Srv Limited10.2K

185.177.72.61FRAS211590 Bucklog SARL8.5K

80.82.77.202NLAS202425 IP Volume inc3.9K

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.