JA4H HTTP client fingerprint
ge11nn0300_ff50983941c1
Seen 2026-05-04 to 2026-07-14 across the retained window.
73
Source IPs
3
Networks
1
Countries
3
Ports hit
248
Events
24
IPs / network
This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.
Top networks
Countries
US 73
Ports targeted
Source IPCCNetworkEvents
About this fingerprint
JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.