HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

Akin HTTP request fingerprint

a11cun020_00000009_0a8d7f11

Seen 2026-09-22 to 2026-09-23 across the retained window.

Open in lookup →

159

Source IPs

12

Networks

3

Countries

114

Ports hit

222

Events

13

IPs / network

Top networks

AS4837 CHINA UNICOM China169 Backbone41 IPs41
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED38 IPs76
AS4134 Chinanet30 IPs30
AS9465 AGOTOZ PTE. LTD.25 IPs41
AS4808 China Unicom Beijing Province Network15 IPs23
AS137266 CHINATELECOM Hubei province Wuhan 5G network2 IPs2
AS17638 ASN for TIANJIN Provincial Net of CT2 IPs2
AS140061 Qinghai Telecom2 IPs2
AS142002 Scloud Pte Ltd1 IPs2
AS17622 China Unicom Guangzhou network1 IPs1
AS17621 China Unicom Shanghai network1 IPs1
AS4812 China Telecom (Group)1 IPs1

Countries

CN 95HK 61US 3

Ports targeted

8080/tcp 1280/tcp 1012330/tcp 712331/tcp 612329/tcp 6443/tcp 551002/tcp 52096/tcp 512332/tcp 412333/tcp 43000/tcp 47547/tcp 4

What it requests

GET/206
GET/v17
GET/v1/vector/collections/describe4
GET/version3
GET/master-status1
GET/system_stats1
Source IPCCNetwork Last seenEvents
152.32.133.206HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-237
156.225.1.114HKAS9465 AGOTOZ PTE. LTD.2026-09-235
156.225.1.97HKAS9465 AGOTOZ PTE. LTD.2026-09-235
165.154.36.91USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-225
152.32.235.85USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-235
152.32.188.12HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-234
106.75.12.68CNAS4808 China Unicom Beijing Province Network2026-09-234
118.26.38.29HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-234
123.58.219.233HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-233
156.225.1.42HKAS9465 AGOTOZ PTE. LTD.2026-09-223
101.36.116.230HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-223
156.225.1.115HKAS9465 AGOTOZ PTE. LTD.2026-09-223
101.36.119.242HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-233
152.32.213.85HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-233
128.1.132.17HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-233
123.58.209.194HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-232
156.225.1.89HKAS9465 AGOTOZ PTE. LTD.2026-09-232
156.225.1.29HKAS9465 AGOTOZ PTE. LTD.2026-09-232
123.58.212.238HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-232
128.1.132.84HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-232

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

a10cun020_00000009_1fdb23c0same header set19 IPs19a10cun020_00000009_be1ad017same header set6 IPs16a11cun030_00000049_03330a181 header apart2 IPs16.1Ka11cun010_00000008_c4b2c4aa1 header apart337 IPs1.5Ka11cun030_00000049_54d07b6d1 header apart605 IPs1.2Ka10cun010_00000008_c4b2c4aa1 header apart18 IPs34a10cun010_00000001_a37af9cb1 header apart5 IPs17a10cun030_00000049_54d07b6d1 header apart3 IPs8

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.