HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

Akin HTTP request fingerprint

a11cun040_0000004e_608dab68

Seen 2026-09-22 to 2026-09-23 across the retained window.

Open in lookup →

432

Source IPs

24

Networks

16

Countries

1.4K

Ports hit

5.2K

Events

18

IPs / network

Top networks

AS398324 Censys, Inc.246 IPs2.0K
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED67 IPs660
AS398722 Censys, Inc.59 IPs267
AS398705 Censys, Inc.16 IPs1.7K
AS142002 Scloud Pte Ltd6 IPs56
AS14061 DigitalOcean, LLC6 IPs11
AS202425 IP Volume inc4 IPs25
AS213790 Limited Network LTD4 IPs10
AS48090 Techoff Srv Limited3 IPs156
AS214664 JSC F63 IPs34
AS136180 Beijing Tiantexin Tech. Co., Ltd.3 IPs5
AS63199 CDS Global Cloud Co., Ltd2 IPs8

Countries

US 349HK 37TH 14NL 7RU 4DE 4CN 4SC 3BG 2IR 2

Ports targeted

443/tcp 6980/tcp 601961/tcp 241080/tcp 2220548/tcp 183306/tcp 184153/tcp 188080/tcp 1610801/tcp 1610800/tcp 161962/tcp 1522922/tcp 15

What it requests

GET/favicon.ico4.2K
GET/207
GET/sitemap.xml179
GET/robots.txt179
GEThttp://proxy.flarevpn.digital:8080/judge144
GEThttp://httpbin.org/get116
GET/aab931
GET/aaa929
GET/login6
GET/v1/models4
GET/env4
GET/.env4

User agents claimed

Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)321 IPs4.0K
Go-http-client/1.183 IPs812
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.366 IPs58
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.361 IPs21
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:129.0) Gecko/20100101 Firefox/129.01 IPs16
Source IPCCNetwork Last seenEvents
167.94.146.60USAS398705 Censys, Inc.2026-09-23145
167.94.146.62USAS398705 Censys, Inc.2026-09-23129
167.94.146.56USAS398705 Censys, Inc.2026-09-23126
167.94.146.49USAS398705 Censys, Inc.2026-09-23125
167.94.146.58USAS398705 Censys, Inc.2026-09-23123
167.94.146.61USAS398705 Censys, Inc.2026-09-23123
95.214.53.196PLAS201814 MEVSPACE sp. z o.o.2026-09-23116
167.94.146.51USAS398705 Censys, Inc.2026-09-23112
45.148.10.5NLAS48090 Techoff Srv Limited2026-09-22110
167.94.146.50USAS398705 Censys, Inc.2026-09-23104
167.94.146.57USAS398705 Censys, Inc.2026-09-23103
167.94.146.59USAS398705 Censys, Inc.2026-09-23101
167.94.146.55USAS398705 Censys, Inc.2026-09-2399
167.94.146.53USAS398705 Censys, Inc.2026-09-2393
167.94.146.63USAS398705 Censys, Inc.2026-09-2393
167.94.146.54USAS398705 Censys, Inc.2026-09-2391
167.94.146.48USAS398705 Censys, Inc.2026-09-2389
176.65.134.48DEAS51396 Pfcloud UG (haftungsbeschrankt)2026-09-2378
167.94.146.52USAS398705 Censys, Inc.2026-09-2357
45.148.10.175NLAS48090 Techoff Srv Limited2026-09-2344

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

a11cun040_0000004e_36fbce14same header set286 IPs323a11cun040_0000004e_dd8e68f3same header set2 IPs4a11cun040_0000004e_96e5f17bsame header set1 IPs2a11cun117_0000004e_d140c656same header set1 IPs1a11cun040_0000004e_e9e60c84same header set1 IPs1a11cun117_0000004e_d17eaa69same header set1 IPs1a11cun030_0000004c_13ee3d341 header apart1.7K IPs4.0Ka11cun050_0000004f_0d8a8ff51 header apart73 IPs716

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.