JA4H HTTP client fingerprint
po11nn0400_7e1fe689c643
Seen 2026-02-19 to 2026-07-15 across the retained window.
399
Source IPs
1
Networks
1
Countries
2
Ports hit
756
Events
399
IPs / network
This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.
Top networks
Countries
US 399
Ports targeted
Source IPCCNetworkEvents
About this fingerprint
JA4H fingerprints the shape of an HTTP request: method, version, the ordered set of headers and the cookie and language handling. It identifies the HTTP client independently of the URL it asks for.