JA4H HTTP client fingerprint

ge11nn07zh_328ac60cd186

Seen 2026-05-05 to 2026-07-14 across the retained window.

Open in lookup →

Source IPs

Networks

Countries

204

Ports hit

517

Events

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

AS132203 Tencent Building, Kejizhongyi Avenue40 IPs513

AS4134 Chinanet3 IPs4

Countries

US 30TH 10CN 3

Ports targeted

80/tcp 184 443/tcp 46 35777/tcp 5 38189/tcp 5 36019/tcp 4 2792/tcp 4 35139/tcp 4 4359/tcp 3 23310/tcp 3 14358/tcp 3 35954/tcp 3 32100/tcp 3

Source IPCCNetworkEvents

43.153.56.77USAS132203 Tencent Building, Kejizhongyi Avenue24

170.106.177.90USAS132203 Tencent Building, Kejizhongyi Avenue18

43.173.118.188USAS132203 Tencent Building, Kejizhongyi Avenue18

170.106.191.145USAS132203 Tencent Building, Kejizhongyi Avenue18

43.130.39.106USAS132203 Tencent Building, Kejizhongyi Avenue16

43.153.49.186USAS132203 Tencent Building, Kejizhongyi Avenue16

124.156.246.175THAS132203 Tencent Building, Kejizhongyi Avenue16

43.173.126.206USAS132203 Tencent Building, Kejizhongyi Avenue16

49.51.74.96USAS132203 Tencent Building, Kejizhongyi Avenue15

43.153.7.216USAS132203 Tencent Building, Kejizhongyi Avenue15

43.173.252.50THAS132203 Tencent Building, Kejizhongyi Avenue15

43.153.35.251USAS132203 Tencent Building, Kejizhongyi Avenue15

43.173.125.4USAS132203 Tencent Building, Kejizhongyi Avenue14

43.173.120.137USAS132203 Tencent Building, Kejizhongyi Avenue14

170.106.105.69USAS132203 Tencent Building, Kejizhongyi Avenue14

49.51.182.15USAS132203 Tencent Building, Kejizhongyi Avenue13

43.173.127.111USAS132203 Tencent Building, Kejizhongyi Avenue13

49.51.38.205USAS132203 Tencent Building, Kejizhongyi Avenue13

170.106.168.174USAS132203 Tencent Building, Kejizhongyi Avenue13

43.173.251.70THAS132203 Tencent Building, Kejizhongyi Avenue13

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.