JA4H HTTP client fingerprint

ge11nn05en_5fca7fb4a57a

Seen 2026-07-18 to 2026-07-28 across the retained window.

Open in lookup →

46

Source IPs

28

Networks

18

Countries

9

Ports hit

329

Events

2

IPs / network

This fingerprint is spread thinly across many networks, which is the shape of a common, widely-used client.

Top networks

AS22773 Cox Communications Inc.7 IPs9

AS31898 Oracle Corporation4 IPs6

AS210644 Aeza Group LLC3 IPs18

AS16276 OVH SAS2 IPs211

AS215540 Global Connectivity Solutions Llp2 IPs18

AS132203 Tencent Building, Kejizhongyi Avenue2 IPs10

AS7552 Viettel Group2 IPs5

AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2 IPs4

AS53667 FranTech Solutions2 IPs2

AS46562 Performive LLC2 IPs2

AS15691 Uan Company S.r.l.1 IPs11

AS56971 Cgi Global Limited1 IPs7

Countries

US 19RU 4VN 3JP 3HK 2LV 2SE 2DE 1FI 1TW 1

Ports targeted

264/tcp 92 4443/tcp 77 80/tcp 69 4433/tcp 32 9443/tcp 26 443/tcp 21 4125/tcp 10 4081/tcp 1 8080/tcp 1

Source IPCCNetworkEvents

80.87.206.20RUAS16276 OVH SAS142

80.87.206.19RUAS16276 OVH SAS69

138.124.51.186DEAS210644 Aeza Group LLC16

130.49.187.61RUAS215540 Global Connectivity Solutions Llp16

212.77.75.20ITAS15691 Uan Company S.r.l.11

119.28.13.138HKAS132203 Tencent Building, Kejizhongyi Avenue9

104.252.127.74LVAS56971 Cgi Global Limited7

171.25.158.95SEAS35100 Patrik Lagerman5

27.69.78.118VNAS7552 Viettel Group3

101.36.104.46JPAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED3

103.7.138.17USAS35916 MULTACOM CORPORATION3

98.170.57.241USAS22773 Cox Communications Inc.2

64.32.13.199USAS46844 Sharktech2

109.248.78.131RUAS47193 LAN-Optic, Ltd2

121.169.46.116KRAS4766 Korea Telecom2

23.175.248.21USAS16611 InfiniaHost.com2

78.159.131.108ALAS215540 Global Connectivity Solutions Llp2

140.245.99.105SGAS31898 Oracle Corporation2

171.234.160.79VNAS7552 Viettel Group2

184.182.240.211USAS22773 Cox Communications Inc.2

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.