HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

Akin HTTP request fingerprint

a11cuq061_0000064a_ffe60107

Seen 2026-09-22 to 2026-09-23 across the retained window.

Open in lookup →

13

Source IPs

1

Networks

2

Countries

14

Ports hit

20

Events

13

IPs / network

Top networks

AS14061 DigitalOcean, LLC13 IPs20

Countries

DE 10US 3

Ports targeted

5060/tcp 327017/tcp 29092/tcp 28087/tcp 29202/tcp 25432/tcp 110086/tcp 15984/tcp 19201/tcp 12525/tcp 11911/tcp 15000/tcp 1

What it requests

POST/20

User agents claimed

Go-http-client/1.113 IPs20
Source IPCCNetwork Last seenEvents
162.243.166.118USAS14061 DigitalOcean, LLC2026-09-234
165.22.6.104USAS14061 DigitalOcean, LLC2026-09-233
137.184.74.141USAS14061 DigitalOcean, LLC2026-09-233
161.35.72.179DEAS14061 DigitalOcean, LLC2026-09-221
159.223.26.113DEAS14061 DigitalOcean, LLC2026-09-231
201.79.6.182DEAS14061 DigitalOcean, LLC2026-09-231
209.38.199.55DEAS14061 DigitalOcean, LLC2026-09-231
159.89.105.69DEAS14061 DigitalOcean, LLC2026-09-231
209.38.194.23DEAS14061 DigitalOcean, LLC2026-09-231
161.35.221.174DEAS14061 DigitalOcean, LLC2026-09-231
209.38.206.89DEAS14061 DigitalOcean, LLC2026-09-231
46.101.193.182DEAS14061 DigitalOcean, LLC2026-09-231
64.226.119.31DEAS14061 DigitalOcean, LLC2026-09-231

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

a11cuq050_0000064a_9b8c433asame header set3 IPs24a11cuq062_00000648_f2f3ae251 header apart2 IPs102a11cuq060_0000064b_9e42e2331 header apart2 IPs102a11cuq040_0000024a_2daa70d61 header apart52 IPs72a11cuq060_0800064a_d0fc923b1 header apart51 IPs71a11cun040_0000044a_bf8a4cbb1 header apart3 IPs24a11cuq071_0000064b_0f6de22c1 header apart1 IPs12a11cuq137_0000064e_d10db4251 header apart3 IPs10

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.