Akin HTTP request fingerprint

a10cun020_0000000a_78f1f19c

Seen 2026-09-22 to 2026-09-24 across the retained window.

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS45102 sends an email when it next hits a sensor.

173

Source IPs

Networks

Countries

501

Ports hit

618

Events

IPs / network

Top networks

AS45102 Alibaba (US) Technology Co., Ltd.144 IPs585

AS4134 Chinanet6 IPs7

AS45090 Shenzhen Tencent Computer Systems Company Limited3 IPs3

AS31898 Oracle Corporation3 IPs3

AS37963 Hangzhou Alibaba Advertising Co.,Ltd.2 IPs2

AS132203 Tencent Building, Kejizhongyi Avenue2 IPs2

AS46562 Performive LLC1 IPs2

AS57269 Digi Spain Telecom S.A1 IPs2

AS4808 China Unicom Beijing Province Network1 IPs2

AS16276 OVH SAS1 IPs1

AS51167 Contabo GmbH1 IPs1

AS53340 VegasNAP, LLC1 IPs1

Countries

SG 90US 61CN 12KR 3FR 2ES 1HK 1NL 1BR 1IR 1

Ports targeted

11434/tcp 8 8000/tcp 8 4000/tcp 5 9091/tcp 4 9090/tcp 4 3000/tcp 4 28017/tcp 3 18789/tcp 3 10443/tcp 3 8091/tcp 3 8084/tcp 3 8080/tcp 3

What it requests

GET/618

Source IPCCNetwork Last seenEvents

43.106.58.188SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2317

47.85.104.213USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2314

43.106.48.6SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2313

43.106.52.96SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2311

43.106.58.146SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2310

47.84.111.144SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2310

43.98.200.1SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2310

47.84.97.178SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2310

43.106.56.76SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2310

47.84.96.224SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2310

43.98.176.103SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-239

43.98.166.144SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-239

43.106.52.37SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-239

43.106.53.188SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-239

47.236.224.95SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-239

47.236.38.116SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-238

47.84.97.110SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-238

43.106.54.116SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-238

43.106.60.112SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-237

47.84.112.13SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-237

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

a11cun020_0000000a_78f1f19csame header set7 IPs100 a11cun020_0000000a_4e1a3733same header set1 IPs15 a11cun010_00000008_c4b2c4aa1 header apart390 IPs4.1K a11cun030_0000004a_c91eaf541 header apart110 IPs635 a10cun010_00000008_c4b2c4aa1 header apart36 IPs233 a11cun030_0000000e_21fe282e1 header apart4 IPs47 a11cun030_0000000b_4c75231d1 header apart2 IPs3 a10cun030_0000004a_c91eaf541 header apart3 IPs3

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.