JA4H HTTP client fingerprint

po11nn0700_7a7c5172e3ad

Seen 2026-02-20 to 2026-07-27 across the retained window.

Open in lookup →

123

Source IPs

62

Networks

29

Countries

25

Ports hit

1.4K

Events

2

IPs / network

This fingerprint is spread thinly across many networks, which is the shape of a common, widely-used client.

Top networks

AS206092 F.n.s. Holdings Limited28 IPs32

AS9009 M247 Europe SRL6 IPs7

AS14061 DigitalOcean, LLC5 IPs236

AS13335 Cloudflare, Inc.4 IPs13

AS4837 CHINA UNICOM China169 Backbone3 IPs676

AS212238 Datacamp Limited3 IPs19

AS401626 Netiface America, Inc.3 IPs14

AS8560 IONOS SE3 IPs12

AS210558 1337 Services GmbH3 IPs5

AS174 Cogent Communications, LLC2 IPs22

AS7602 Sai gon Postel Corporation2 IPs19

AS62240 Clouvider Limited2 IPs15

Countries

US 46NL 11DE 9SG 7CH 6GB 6FR 4RU 3VN 3CN 3

Ports targeted

54321/tcp 458 12345/tcp 161 23333/tcp 160 18789/tcp 140 80/tcp 91 443/tcp 89 23456/tcp 80 65432/tcp 80 7001/tcp 26 7011/tcp 16 2087/tcp 14 8001/tcp 10

Source IPCCNetworkEvents

58.241.238.184CNAS4837 CHINA UNICOM China169 Backbone560

137.184.36.28USAS14061 DigitalOcean, LLC161

36.64.1.29IDAS7713 PT Telekomunikasi Indonesia140

120.2.26.214CNAS4837 CHINA UNICOM China169 Backbone114

64.23.217.254USAS14061 DigitalOcean, LLC66

158.173.25.49USAS212238 Datacamp Limited16

52.200.116.105USAS14618 Amazon.com, Inc.14

140.99.190.9USAS62240 Clouvider Limited14

31.135.19.237PLAS56983 SWIDMAN S.C. Mariusz Bzowski, Dariusz Drelich12

181.41.206.106USAS174 Cogent Communications, LLC12

180.93.78.21VNAS7602 Sai gon Postel Corporation10

181.41.206.178USAS174 Cogent Communications, LLC10

180.93.249.92VNAS7602 Sai gon Postel Corporation9

5.255.103.88NLAS60404 The Infrastructure Group B.V.9

185.242.3.238NLAS401626 Netiface America, Inc.9

194.164.57.119DEAS8560 IONOS SE8

104.28.254.47SGAS13335 Cloudflare, Inc.7

185.187.206.102IQAS48492 I.Q Online for Internet Services and Communications LLC6

64.225.112.202USAS14061 DigitalOcean, LLC6

185.221.64.84BGAS197450 Sunucun Bilgi Iletisim Teknolojileri ve Ticaret Ltd. Sti.6

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.