JA4H HTTP client fingerprint
po11nn0300_7059b3fb2d4a
Seen 2026-05-04 to 2026-07-15 across the retained window.
359
Source IPs
1
Networks
2
Countries
6
Ports hit
419
Events
359
IPs / network
This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.
Top networks
Countries
US 288GB 71
Source IPCCNetworkEvents
About this fingerprint
JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.