HoneyLabs

Akin HTTP request fingerprint

a10cun010_00000001_a37af9cb

Seen 2026-09-22 to 2026-09-23 across the retained window.

5

Source IPs

2

Networks

2

Countries

17

Ports hit

17

Events

2

IPs / network

Top networks

Countries

US 3HK 2

Ports targeted

What it requests

GET/17
Source IPCCNetwork Last seenEvents
150.107.36.236HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-237
150.107.38.251HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-234
148.153.56.174USAS63199 CDS Global Cloud Co., Ltd2026-09-233
148.153.188.254USAS63199 CDS Global Cloud Co., Ltd2026-09-232
165.154.163.10USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-231

Fingerprint family: 2 shapes, 6 IPs, 32 events in 30 days

Every shape here is within one request header of the family's largest shape and comes from the same source addresses. One tool, several request shapes; a hashed fingerprint shows these as unrelated.

a10cun020_00000009_be1ad0176 IPs15a10cun010_00000001_a37af9cb this one5 IPs17

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

a10cun020_00000041_0a8d7f111 header apart1.4K IPs9.2Ka10lun000_00000000_334359b91 header apart117 IPs465a11cun020_00000009_0a8d7f111 header apart148 IPs208a11lun000_00000000_334359b91 header apart8 IPs32a10cun020_00000009_1fdb23c01 header apart16 IPs16a10cun020_00000009_be1ad0171 header apart6 IPs15a11cun020_00000041_0a8d7f111 header apart6 IPs6a11cun030_00000049_03330a182 headers apart2 IPs14.6K

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.