HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

Akin HTTP request fingerprint

a11cun040_0000004d_f36dd82e

Seen 2026-09-22 to 2026-09-23 across the retained window.

Open in lookup →

6

Source IPs

2

Networks

2

Countries

31

Ports hit

160

Events

3

IPs / network

Top networks

AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED3 IPs100
AS63199 CDS Global Cloud Co., Ltd3 IPs60

Countries

US 4HK 2

Ports targeted

9081/tcp 108096/tcp 58099/tcp 58765/tcp 564210/tcp 59998/tcp 511000/tcp 517000/tcp 59292/tcp 527016/tcp 518264/tcp 532459/tcp 5

What it requests

GET/llms.txt32
GET/robots.txt32
GET/sitemap.xml32
GET/favicon.ico32
GET/.well-known/security.txt32

User agents claimed

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.366 IPs160
Source IPCCNetwork Last seenEvents
150.107.36.236HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2345
150.107.38.251HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2340
148.153.56.174USAS63199 CDS Global Cloud Co., Ltd2026-09-2340
148.153.188.254USAS63199 CDS Global Cloud Co., Ltd2026-09-2315
165.154.163.10USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2315
148.153.56.170USAS63199 CDS Global Cloud Co., Ltd2026-09-235

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

a11cun040_0000004d_aa48e2c8same header set1.4K IPs9.5Ka11cun040_0000004d_4110f156same header set10 IPs3.0Ka11cun040_0000004d_c2bd490fsame header set29 IPs235a11cun040_0000004d_c5bb04c5same header set3 IPs70a11cun051_0000004d_a7cb51b4same header set1 IPs12a11cun051_0000004d_6289c865same header set6 IPs6a11cun062_0000004d_c61c0cf4same header set1 IPs4a11cun040_0000004d_50f90888same header set2 IPs2

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.