JA4H HTTP client fingerprint

po11nn19en_317963a85131

Seen 2026-02-28 to 2026-06-01 across the retained window.

Open in lookup →

Source IPs

Networks

Countries

Ports hit

Events

IPs / network

This fingerprint is spread thinly across many networks, which is the shape of a common, widely-used client.

Top networks

AS200593 Prospero Ooo2 IPs25

AS198953 Proton66 OOO2 IPs16

AS212238 Datacamp Limited2 IPs4

AS4213 Krypt Technologies1 IPs2

Countries

RU 3US 3TM 1

Ports targeted

443/tcp 8 44310/tcp 2 10443/tcp 2 9443/tcp 2 8443/tcp 2 7443/tcp 2 6443/tcp 2 5443/tcp 2 4443/tcp 2 4439/tcp 2 4437/tcp 2 4438/tcp 2

Source IPCCNetworkEvents

193.24.123.55RUAS200593 Prospero Ooo13

91.202.233.46TMAS200593 Prospero Ooo12

176.120.22.74RUAS198953 Proton66 OOO11

37.77.150.72RUAS198953 Proton66 OOO5

84.239.41.9USAS212238 Datacamp Limited2

149.40.50.24USAS212238 Datacamp Limited2

212.56.54.219USAS4213 Krypt Technologies2

About this fingerprint

JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.