HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

Akin HTTP request fingerprint

a11cun030_00000058_f74a6e72

Seen 2026-09-22 to 2026-09-23 across the retained window.

Open in lookup →

98

Source IPs

4

Networks

18

Countries

57

Ports hit

143

Events

24

IPs / network

Top networks

AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED89 IPs130
AS136907 HUAWEI CLOUDS6 IPs10
AS21859 Zenlayer Inc2 IPs2
AS16509 Amazon.com, Inc.1 IPs1

Countries

US 17KR 14HK 12TH 9TW 7IN 6JP 6? 5NG 4ZA 3

Ports targeted

587/tcp 102121/tcp 481/tcp 482/tcp 483/tcp 443080/tcp 451000/tcp 450999/tcp 418000/tcp 437443/tcp 45678/tcp 32107/tcp 3

What it requests

GET/143

User agents claimed

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.098 IPs143
Source IPCCNetwork Last seenEvents
118.194.234.29SGAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-235
118.193.68.247KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-234
150.107.38.40HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-234
152.32.139.228KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-233
213.250.140.76TRAS136907 HUAWEI CLOUDS2026-09-233
152.32.142.138NGAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-233
101.36.114.177KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-233
165.154.11.140NGAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-232
213.250.149.174TRAS136907 HUAWEI CLOUDS2026-09-232
152.32.131.245HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-232
150.107.38.5HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-232
165.154.51.134THAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-222
43.224.66.142HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-232
165.154.11.210NGAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-232
123.58.200.21KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-232
152.32.250.36VNAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-232
134.168.249.100HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-232
152.32.201.119JPAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-232
121.91.156.70ZAAS136907 HUAWEI CLOUDS2026-09-232
152.32.159.203INAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-232

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

a11cun020_00000048_724c10fb1 header apart96 IPs532a11cun064_00000048_f2f3ae251 header apart2 IPs95a11cun031_00000048_e62b6d851 header apart2 IPs95a10cun020_00000048_724c10fb1 header apart2 IPs16a11cun051_00000059_d97268c31 header apart1 IPs1a11cun030_00000049_03330a182 headers apart2 IPs15.3Ka11cun050_0000005b_09001b3e2 headers apart966 IPs4.7Ka11cun030_0000004c_13ee3d342 headers apart1.7K IPs4.1K

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.