HoneyLabs

Akin HTTP request fingerprint

a10cun030_00000049_54d07b6d

Seen 2026-09-22 to 2026-09-23 across the retained window.

3

Source IPs

3

Networks

3

Countries

3

Ports hit

6

Events

1

IPs / network

This fingerprint is spread thinly across many networks, which is the shape of a common, widely-used client.

Top networks

Countries

NL 1BR 1AZ 1

Ports targeted

What it requests

GET/1

User agents claimed

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.362 IPs5
Mozilla/5.01 IPs1
Source IPCCNetwork Last seenEvents
213.172.73.149AZAS13099 az-evro Tel LLC2026-09-233
187.17.228.218BRAS28267 SIM INTERNET PROVEDORES DE INTERNET EIRELI.2026-09-232
46.151.178.133NLAS211443 Sino Worldwide Trading Limited2026-09-221

Fingerprint family: 2 shapes, 3 IPs, 22 events in 30 days

Every shape here is within one request header of the family's largest shape and comes from the same source addresses. One tool, several request shapes; a hashed fingerprint shows these as unrelated.

a10cun030_00000049_54d07b6d this one3 IPs6a10cun020_00000048_724c10fb2 IPs16

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

a11cun030_00000049_03330a18same header set2 IPs14.6Ka11cun030_00000049_54d07b6dsame header set564 IPs1.1Ka10cun041_00000049_8cf638c8same header set1 IPs3a11cun040_0000004d_aa48e2c81 header apart1.4K IPs9.5Ka10cun020_00000041_0a8d7f111 header apart1.4K IPs9.2Ka11cun040_0000004d_4110f1561 header apart10 IPs3.0Ka11cun040_0000004b_4c87b06e1 header apart113 IPs493a11cun020_00000048_724c10fb1 header apart83 IPs473

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.