JA4H HTTP client fingerprint

ge11nn09en_5f96af7f1814

Seen 2026-02-19 to 2026-07-28 across the retained window.

Open in lookup →

38

Source IPs

16

Networks

9

Countries

76

Ports hit

14.8K

Events

2

IPs / network

Top networks

AS206264 Amarutu Technology Ltd13 IPs9.8K

AS51396 Pfcloud UG (haftungsbeschrankt)7 IPs3.4K

AS60064 Hostpalace Datacenters Ltd3 IPs133

AS219502 Storm Industries LLC2 IPs1.1K

AS209605 UAB Host Baltic2 IPs284

AS12876 Scaleway S.a.s.1 IPs51

AS23470 ReliableSite.Net LLC1 IPs39

AS61254 ESTOXY OU1 IPs19

AS44486 SYNLINQ1 IPs11

AS47890 Unmanaged Ltd1 IPs8

AS0 1 IPs6

AS206996 ZAP-Hosting GmbH1 IPs2

Countries

NL 15SC 9US 4DE 4GB 2RO 1PL 1SE 1FR 1

Ports targeted

80/tcp 2.1K 8080/tcp 1.6K 82/tcp 1.5K 81/tcp 1.5K 83/tcp 1.4K 85/tcp 1.2K 88/tcp 983 8081/tcp 877 84/tcp 835 90/tcp 708 8082/tcp 623 65004/tcp 612

Source IPCCNetworkEvents

5.61.209.92SCAS206264 Amarutu Technology Ltd3.7K

204.76.203.212NLAS51396 Pfcloud UG (haftungsbeschrankt)2.8K

5.61.209.43SCAS206264 Amarutu Technology Ltd1.7K

195.182.16.23DEAS206264 Amarutu Technology Ltd1.3K

94.154.43.243NLAS219502 Storm Industries LLC1.1K

5.61.209.126SCAS206264 Amarutu Technology Ltd1.1K

45.139.122.80NLAS206264 Amarutu Technology Ltd494

204.76.203.36NLAS51396 Pfcloud UG (haftungsbeschrankt)394

5.61.209.102SCAS206264 Amarutu Technology Ltd386

5.61.209.44SCAS206264 Amarutu Technology Ltd348

5.61.209.107SCAS206264 Amarutu Technology Ltd335

91.224.92.32GBAS209605 UAB Host Baltic260

5.61.209.96SCAS206264 Amarutu Technology Ltd196

204.76.203.219NLAS51396 Pfcloud UG (haftungsbeschrankt)162

5.61.209.33SCAS206264 Amarutu Technology Ltd152

192.142.24.66NLAS60064 Hostpalace Datacenters Ltd77

5.61.209.88SCAS206264 Amarutu Technology Ltd60

192.142.24.60NLAS60064 Hostpalace Datacenters Ltd52

151.115.91.20PLAS12876 Scaleway S.a.s.51

104.194.10.143USAS23470 ReliableSite.Net LLC39

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.