JA4H HTTP client fingerprint

ge11nn0500_297583b23a58

Seen 2026-02-20 to 2026-07-27 across the retained window.

Open in lookup →

34

Source IPs

22

Networks

15

Countries

448

Ports hit

1.9K

Events

2

IPs / network

This fingerprint is spread thinly across many networks, which is the shape of a common, widely-used client.

Top networks

AS51167 Contabo GmbH4 IPs68

AS201814 MEVSPACE sp. z o.o.3 IPs29

AS396982 Google LLC3 IPs10

AS8075 Microsoft Corporation3 IPs3

AS16276 OVH SAS2 IPs29

AS219502 Storm Industries LLC2 IPs15

AS45090 Shenzhen Tencent Computer Systems Company Limited2 IPs8

AS63949 Akamai Connected Cloud1 IPs1.7K

AS8560 IONOS SE1 IPs17

AS31898 Oracle Corporation1 IPs16

AS43350 NForce Entertainment B.V.1 IPs12

AS15169 Google LLC1 IPs6

Countries

US 7CN 4FR 4DE 3NL 3IN 3PL 2SG 1JO 1FI 1

Ports targeted

3004/tcp 56 80/tcp 45 22/tcp 26 11434/tcp 23 53/tcp 20 37/tcp 20 443/tcp 19 9998/tcp 18 84/tcp 18 502/tcp 18 123/tcp 18 8443/tcp 17

Source IPCCNetworkEvents

96.126.104.20USAS63949 Akamai Connected Cloud1.7K

185.207.251.4FRAS51167 Contabo GmbH57

149.50.122.23PLAS201814 MEVSPACE sp. z o.o.24

212.227.244.14DEAS8560 IONOS SE17

51.195.191.88FRAS16276 OVH SAS17

161.118.214.86SGAS31898 Oracle Corporation16

141.11.107.134NLAS43350 NForce Entertainment B.V.12

57.129.12.51DEAS16276 OVH SAS12

94.154.43.196NLAS219502 Storm Industries LLC9

81.70.62.207CNAS45090 Shenzhen Tencent Computer Systems Company Limited7

35.212.182.60USAS15169 Google LLC6

94.154.43.213NLAS219502 Storm Industries LLC6

68.183.199.232CAAS14061 DigitalOcean, LLC4

62.171.140.61DEAS51167 Contabo GmbH4

149.50.122.21PLAS201814 MEVSPACE sp. z o.o.4

155.133.23.242FRAS51167 Contabo GmbH4

35.228.236.33FIAS396982 Google LLC4

213.136.82.108FRAS51167 Contabo GmbH3

35.229.45.100USAS396982 Google LLC3

34.26.237.19USAS396982 Google LLC3

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.