JA4H HTTP client fingerprint

ge11nn05en_716f80ccc342

Seen 2026-02-19 to 2026-08-05 across the retained window.

Open in lookup →

928

Source IPs

Networks

Countries

5.0K

Ports hit

572.8K

Events

464

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

AS213412 ONYPHE SAS912 IPs569.7K

AS16276 OVH SAS16 IPs3.1K

Countries

US 480FR 448

Ports targeted

554/tcp 469 6443/tcp 425 5986/tcp 410 1717/tcp 388 5060/tcp 386 58603/tcp 383 8443/tcp 374 22323/tcp 374 8000/tcp 370 10323/tcp 369 8085/tcp 368 4567/tcp 368

Source IPCCNetworkEvents

195.184.76.32USAS213412 ONYPHE SAS961

91.230.168.18USAS213412 ONYPHE SAS959

91.230.168.136USAS213412 ONYPHE SAS958

195.184.76.240USAS213412 ONYPHE SAS952

91.230.168.10USAS213412 ONYPHE SAS946

91.230.168.8USAS213412 ONYPHE SAS944

195.184.76.166USAS213412 ONYPHE SAS944

91.230.168.25USAS213412 ONYPHE SAS941

195.184.76.247USAS213412 ONYPHE SAS939

91.230.168.232USAS213412 ONYPHE SAS938

91.230.168.27USAS213412 ONYPHE SAS935

195.184.76.136USAS213412 ONYPHE SAS935

91.230.168.3USAS213412 ONYPHE SAS934

91.230.168.9USAS213412 ONYPHE SAS933

91.230.168.128USAS213412 ONYPHE SAS932

195.184.76.168USAS213412 ONYPHE SAS931

91.230.168.29USAS213412 ONYPHE SAS931

91.230.168.24USAS213412 ONYPHE SAS929

195.184.76.173USAS213412 ONYPHE SAS929

195.184.76.174USAS213412 ONYPHE SAS929

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.