JA4H HTTP client fingerprint
ge11nn0200_5594a17e7e7e
Seen 2026-05-04 to 2026-08-29 across the retained window.
93
Source IPs
1
Networks
1
Countries
1
Ports hit
104
Events
93
IPs / network
This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.
Top networks
Countries
US 93
Ports targeted
What it requests
User agents claimed
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity93 IPs104
Source IPCCNetwork
Last seenEvents
About this fingerprint
JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.