HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

Akin HTTP request fingerprint

a11cun050_0000005d_361dcb62

Seen 2026-09-22 to 2026-09-23 across the retained window.

Open in lookup →

94

Source IPs

4

Networks

18

Countries

56

Ports hit

530

Events

24

IPs / network

Top networks

AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED85 IPs478
AS136907 HUAWEI CLOUDS6 IPs40
AS21859 Zenlayer Inc2 IPs8
AS16509 Amazon.com, Inc.1 IPs4

Countries

US 17KR 13HK 12TH 9TW 7IN 6? 5JP 5ZA 3TR 3

Ports targeted

51000/tcp 1643080/tcp 1618000/tcp 1650999/tcp 1637443/tcp 1683/tcp 1681/tcp 162121/tcp 1682/tcp 152601/tcp 122107/tcp 123128/tcp 12

What it requests

GET/config.json133
GET/sitemap.xml133
GET/robots.txt132
GET/favicon.ico132

User agents claimed

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.094 IPs397
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.1194 IPs133
Source IPCCNetwork Last seenEvents
150.107.38.40HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2316
118.193.68.247KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2316
101.36.114.177KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2312
152.32.142.138NGAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2312
213.250.140.76TRAS136907 HUAWEI CLOUDS2026-09-2312
118.194.234.29SGAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2312
152.32.139.228KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2312
165.154.51.134THAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-228
107.150.110.121USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-238
43.224.66.142HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-238
165.154.11.210NGAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-238
152.32.159.203INAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-238
134.168.249.100HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-238
123.58.200.21KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-238
150.107.38.5HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-238
121.91.156.70ZAAS136907 HUAWEI CLOUDS2026-09-238
101.36.114.150KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-238
128.1.47.89USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-238
128.14.227.209TWAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-238
43.224.66.209HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-238

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

a11cun050_0000005d_7266f93asame header set1 IPs34a11cun050_0000005d_fecf3944same header set3 IPs3a11cun061_0000005d_e51d7db3same header set1 IPs1a11cun040_0000004d_aa48e2c81 header apart1.4K IPs10.3Ka11cun040_0000004d_4110f1561 header apart10 IPs3.7Ka11cun060_0000005f_7d5e642b1 header apart89 IPs463a11cun040_0000004d_c2bd490f1 header apart30 IPs245a11cun040_0000004d_f36dd82e1 header apart6 IPs165

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.