JA4H HTTP client fingerprint
op10nn0100_4740ae6347b0
Seen 2026-02-23 to 2026-07-13 across the retained window.
248
Source IPs
1
Networks
10
Countries
4
Ports hit
258
Events
248
IPs / network
This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.
Top networks
Countries
US 104CA 23NL 18FI 17GB 16AU 16CH 14DE 14BE 14BR 12
Ports targeted
Source IPCCNetworkEvents
About this fingerprint
JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.