JA4H HTTP client fingerprint

ge11nn0500_3d22e8e9e6c3

Seen 2026-04-16 to 2026-07-27 across the retained window.

Open in lookup →

Source IPs

Networks

Countries

280

Ports hit

8.1K

Events

IPs / network

Top networks

AS35042 Layer7 Networks GmbH10 IPs8.1K

AS209132 Alviva Holding Limited1 IPs17

Countries

DE 10VU 1

Ports targeted

443/tcp 51 1066/tcp 34 1055/tcp 34 1064/tcp 34 1063/tcp 34 1062/tcp 34 1061/tcp 34 1065/tcp 34 1060/tcp 34 2036/tcp 34 1057/tcp 34 1056/tcp 34

Source IPCCNetworkEvents

88.214.25.134DEAS35042 Layer7 Networks GmbH1.1K

88.214.25.137DEAS35042 Layer7 Networks GmbH1.0K

88.214.25.130DEAS35042 Layer7 Networks GmbH1.0K

88.214.25.131DEAS35042 Layer7 Networks GmbH969

88.214.25.138DEAS35042 Layer7 Networks GmbH913

88.214.25.135DEAS35042 Layer7 Networks GmbH830

88.214.25.136DEAS35042 Layer7 Networks GmbH780

88.214.25.132DEAS35042 Layer7 Networks GmbH729

88.214.25.133DEAS35042 Layer7 Networks GmbH709

88.214.25.59DEAS35042 Layer7 Networks GmbH43

147.45.112.222VUAS209132 Alviva Holding Limited17

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.