HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

Akin HTTP request fingerprint

a10cun020_00000009_1fdb23c0

Seen 2026-09-22 to 2026-09-24 across the retained window.

Open in lookup → Addresses as a feed

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS4766 sends an email when it next hits a sensor.

37

Source IPs

16

Networks

8

Countries

24

Ports hit

37

Events

2

IPs / network

Top networks

AS4766 Korea Telecom16 IPs16
AS17858 LG POWERCOMM5 IPs5
AS4713 NTT DOCOMO BUSINESS,Inc.2 IPs2
AS2514 NTT PC Communications, Inc.2 IPs2
AS18278 Cable TV Corporation1 IPs1
AS22381 SAMM TECNOLOGIA E TELECOMUNICACOES S.A1 IPs1
AS9824 JCOM Co., Ltd.1 IPs1
AS2518 BIGLOBE Inc.1 IPs1
AS7303 Telecom Argentina S.A.1 IPs1
AS17839 LG HelloVision Corp.1 IPs1
AS8399 SEWAN SAS1 IPs1
AS8473 Bahnhof AB1 IPs1

Countries

KR 23JP 8IS 1BR 1UY 1SE 1AR 1FR 1

Ports targeted

90/tcp 38080/tcp 380/tcp 283/tcp 288/tcp 2557/tcp 21024/tcp 22194/tcp 25001/tcp 28081/tcp 265008/tcp 285/tcp 1

What it requests

GET/37
Source IPCCNetwork Last seenEvents
110.233.200.123JPAS2518 BIGLOBE Inc.2026-09-241
221.160.48.166KRAS4766 Korea Telecom2026-09-241
106.245.155.12KRAS3786 LG DACOM Corporation2026-09-231
114.179.86.102JPAS4713 NTT DOCOMO BUSINESS,Inc.2026-09-241
121.171.132.200KRAS4766 Korea Telecom2026-09-231
14.56.46.112KRAS4766 Korea Telecom2026-09-241
177.126.9.146BRAS22381 SAMM TECNOLOGIA E TELECOMUNICACOES S.A2026-09-231
183.101.92.112KRAS4766 Korea Telecom2026-09-231
218.148.254.70KRAS4766 Korea Telecom2026-09-241
125.249.66.225KRAS17858 LG POWERCOMM2026-09-231
118.42.24.175KRAS4766 Korea Telecom2026-09-231
118.33.192.71KRAS4766 Korea Telecom2026-09-221
150.31.64.177JPAS2497 Internet Initiative Japan Inc.2026-09-231
112.161.15.192KRAS4766 Korea Telecom2026-09-231
110.47.148.93KRAS17839 LG HelloVision Corp.2026-09-231
200.125.28.150UYAS6057 Administracion Nacional de Telecomunicaciones2026-09-221
200.73.145.26ARAS7303 Telecom Argentina S.A.2026-09-221
157.157.89.157ISAS6677 Mila hf2026-09-231
183.91.119.235JPAS18278 Cable TV Corporation2026-09-221
14.54.190.33KRAS4766 Korea Telecom2026-09-231

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

a11cun020_00000009_0a8d7f11same header set360 IPs567a10cun020_00000009_be1ad017same header set7 IPs25a10cun020_00000009_0a8d7f11same header set1 IPs1a11cun030_00000049_03330a181 header apart4 IPs34.6Ka11cun010_00000008_c4b2c4aa1 header apart390 IPs4.1Ka11cun030_00000049_54d07b6d1 header apart1.2K IPs3.2Ka10cun010_00000008_c4b2c4aa1 header apart36 IPs233a10cun010_00000001_a37af9cb1 header apart7 IPs45

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.