HoneyLabs

Akin HTTP request fingerprint

a11cun030_0000000e_21fe282e

Seen 2026-09-22 to 2026-09-23 across the retained window.

3

Source IPs

1

Networks

1

Countries

6

Ports hit

16

Events

3

IPs / network

Top networks

Countries

NL 3

Ports targeted

What it requests

GET/16
Source IPCCNetwork Last seenEvents
158.94.210.5AS0 Omegatech LTD2026-09-237
94.154.35.25AS0 Omegatech LTD2026-09-235
178.16.53.3AS0 Omegatech LTD2026-09-234

Fingerprint family: 2 shapes, 6 IPs, 43 events in 30 days

Every shape here is within one request header of the family's largest shape and comes from the same source addresses. One tool, several request shapes; a hashed fingerprint shows these as unrelated.

HTTP/1.1, 2 headers, no body: accept-encoding, host

asks for/ · /sitemap.xml · /.well-known/security.txt · /robots.txt (GET)
ports1199 · 80 · 311 · 8998
fromNL · US · Omegatech LTD · Cogent Communications, LLC · CariNet, Inc.
a11cun020_0000000c_5ff1c0a9/6 IPs27a11cun030_0000000e_21fe282e this one+/- connection · /3 IPs16

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

a11cun040_0000004e_608dab681 header apart457 IPs6.6Ka10cun020_0000000a_78f1f19c1 header apart102 IPs454a11cun040_0000004e_36fbce141 header apart353 IPs405a11cun040_0000000f_ac71f7cf1 header apart1 IPs67a11cun020_0000000a_78f1f19c1 header apart4 IPs37a11cun020_0000000c_5ff1c0a91 header apart6 IPs27a11cun020_0000000a_4e1a37331 header apart1 IPs8a11cun040_0000004e_dd8e68f31 header apart2 IPs6

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.