HTTP/2 frames (Akamai)

2:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p

first seen 2026-06-12 19:36 · last seen 2026-09-16 18:54 · JSON

Matches controlled captures

Known clients driven through this site's own edge produced this exact fingerprint — measured truth, not inference. catalog →

rust-hyper 1.11.1 · Debian 12 · via rustls · container — 3 sessions, last 2026-09-15 23:51 controlled
rust-reqwest 0.13.5 · Debian 12 · via rustls · container — 2 sessions, last 2026-09-15 23:51 controlled
rust-reqwest 0.13.5 · Debian 12 · via native-tls · container — 2 sessions, last 2026-09-15 23:51 controlled
rust-reqwest 0.12.28 · Debian 12 · via rustls · container — 7 sessions, last 2026-09-05 06:31 controlled
rust-reqwest 0.13.4 · Debian 12 · via rustls · container — 5 sessions, last 2026-09-01 00:48 controlled
rust-reqwest 0.13.4 · Debian 12 · via native-tls · container — 5 sessions, last 2026-09-01 00:47 controlled
rust-hyper 1.11.0 · Debian 12 · via rustls · container — 3 sessions, last 2026-08-26 04:34 controlled
rust-hyper 1.10.1 · Debian 12 · via rustls · container — 1 session, last 2026-07-01 03:30 controlled

Last 7 days (333 observations)

Distinct clients per day (last 30 days, peak 23/day)

Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.

Decomposed attributes

SETTINGS	`{"2": 0, "4": 2097152, "5": 16384, "6": 16384}`
WINDOW_UPDATE	`5177345`
PRIORITY frames	`0`
Pseudo-header order	`m,s,a,p`

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprint	co-occurrences
`t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3` Match?Exact match in Thumbprint's published controlled catalog captures: rust-reqwest 0.12.28.The fingerprint page shows the full measured match list. More on the catalog.	1455
`t13d1011h2_61a7ad8aa9b6_f9531d972513` Match?Exact match in Thumbprint's published controlled catalog captures: rust-reqwest 0.13.4, rust-hyper 1.11.0, rust-hyper 1.11.1, +1 more.The fingerprint page shows the full measured match list. More on the catalog.	61
`t13d3012h2_1d37bd780c83_8e6e362c5eac`	46
`t13d1011h2_61a7ad8aa9b6_3a8073edd8ef`	7

HTTP request (JA4H)

fingerprint	co-occurrences
`ge20nr050000_a36a3d5685e0_000000000000_000000000000`	517
`ge20nn030000_80b089f68b8e_000000000000_000000000000`	488
`ge20nn050000_a36a3d5685e0_000000000000_000000000000`	348
`ge20nr060000_c57eabf9cebf_000000000000_000000000000`	37
`ge20nn030000_ff50983941c1_000000000000_000000000000`	33
`ge20nn060000_c57eabf9cebf_000000000000_000000000000`	27
`ge20nn04*000_ded3c6d8f0eb_000000000000_000000000000`	17
`ge20nr030000_ff50983941c1_000000000000_000000000000`	14
`ge20nn04frfr_3b20e5b1deac_000000000000_000000000000`	12
`ge20nn04dede_3b20e5b1deac_000000000000_000000000000`	10

TCP SYN (p0f)

fingerprint	co-occurrences
`4:44+20:0:1390:65535,12:mss,sok,ts,nop,ws:df,id+:0`	456
`4:45+19:0:1390:65535,12:mss,sok,ts,nop,ws:df,id+:0`	453
`4:118+10:0:1460:62727,7:mss,sok,ts,nop,ws:df,id+:0`	323
`4:119+9:0:1460:62727,7:mss,sok,ts,nop,ws:df,id+:0`	150
`4:57+7:0:1420:mss*30,7:mss,sok,ts,nop,ws:df,id+:0`	47
`4:44+20:0:1410:mss*46,7:mss,sok,ts,nop,ws:df,id+:0`	27
`4:43+21:0:1410:mss*46,7:mss,sok,ts,nop,ws:df,id+:0`	27
`4:43+21:0:1390:65535,12:mss,sok,ts,nop,ws:df,id+:0`	11
`4:120+8:0:1460:62727,7:mss,sok,ts,nop,ws:df,id+:0`	8
`4:50+14:0:1460:mss*44,9:mss,sok,ts,nop,ws:df,id+:0`	7

TCP SYN (JA4T)

fingerprint	co-occurrences
`65535_2-4-8-1-3_1390_12`	862
`62727_2-4-8-1-3_1460_7`	487
`42600_2-4-8-1-3_1420_7`	53
`64860_2-4-8-1-3_1410_7`	50
`64240_2-4-8-1-3_1460_9`	7
`62587_2-4-8-1-3_1440_7`	5
`64240_2-4-8-1-3_1460_10`	4
`35424_2-4-8-1-3_1460_7`	4
`65535_2-1-3-1-1-4_1340_8`	3
`65535_2-1-3-1-1-8-4-0-0_1312_6`	3

User-Agent

fingerprint	co-occurrences
`Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)`	487
`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot`	414
`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot`	300
`Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)`	215
`Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; SleepBot/1.0; +http://sleepbot.com/) Chrome/131.0.0.0 Safari/537.36`	37
`Mozilla/5.0 (compatible; Qwantbot/1.0; +https://help.qwant.com/bot/)`	30
`Mozilla/5.0 (compatible; Discordbot/2.0; +https://discordapp.com)`	6
`Mozilla/5.0 (compatible; grok-agent/1.0; +https://x.ai)`	6
`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36`	5
`Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; KeenableBot/1.0; +https://keenable.ai/)`	5

Country

fingerprint	co-occurrences
`US` · United States	1489
`FR` · France	56
`HU` · Hungary	7
`DE` · Germany	5
`AU` · Australia	3
`RO` · Romania	3
`NL` · Netherlands	2
`CH` · Switzerland	1
`GB` · United Kingdom	1
`RU` · Russia	1

Network (ASN)

fingerprint	co-occurrences
`AS8075` · Microsoft Corporation	933
`AS16509` · Amazon.com, Inc.	494
`AS396982` · Google LLC	57
`AS199064` · QWANT SAS	56
`AS701` · Verizon Business	7
`AS213155` · Yettel Hungary Ltd.	5
`AS9009` · M247 Europe SRL	4
`AS38195` · Superloop	3
`AS16276` · OVH SAS	2
`AS396356` · Latitude.sh	2