Akin HTTP request fingerprint

b10cun020_00040001_78f1f19c

Seen 2026-03-02 to 2026-09-28 across the retained window.

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS45102 sends an email when it next hits a sensor.

604

Source IPs

Networks

Countries

534

Ports hit

2.9K

Events

IPs / network

Top networks

AS45102 Alibaba (US) Technology Co., Ltd.433 IPs2.6K

AS31898 Oracle Corporation16 IPs25

AS4837 CHINA UNICOM China169 Backbone10 IPs15

AS4134 Chinanet10 IPs13

AS45090 Shenzhen Tencent Computer Systems Company Limited9 IPs12

AS4808 China Unicom Beijing Province Network8 IPs12

AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED6 IPs27

AS9808 China Mobile Communications Group Co., Ltd.6 IPs6

AS16276 OVH SAS5 IPs12

AS132203 Tencent Building, Kejizhongyi Avenue5 IPs12

AS14061 DigitalOcean, LLC5 IPs9

AS37963 Hangzhou Alibaba Advertising Co.,Ltd.5 IPs7

Countries

SG 243US 229CN 59KR 15IN 10FR 9RU 4ES 4VN 3IR 3

Ports targeted

8000/tcp 62 9090/tcp 57 5700/tcp 42 4000/tcp 40 8188/tcp 36 8080/tcp 35 3333/tcp 29 7547/tcp 26 23956/tcp 20 24456/tcp 19 24756/tcp 17 24156/tcp 17

What it requests

GET/2.9K

GET/api/version4

Source IPCCNetwork Last seenEvents

47.77.177.220USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-1825

47.254.37.72USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2822

43.98.205.217SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-1320

43.106.48.44SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-1319

43.106.58.188SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2818

47.251.120.117USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-1818

47.77.231.118USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2818

47.251.6.51USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-1817

43.98.199.249SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-1316

47.251.246.235USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-1815

47.77.184.107USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2815

47.251.83.137USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-1815

47.77.177.14USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2815

47.251.244.243USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-1814

47.85.104.213USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-2314

47.237.0.46SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-1314

47.251.32.230USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-1814

43.106.53.209SGAS45102 Alibaba (US) Technology Co., Ltd.2026-09-1314

47.85.188.157USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-0514

47.251.93.9USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-1813

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

b11cun020_00040001_78f1f19csame header set49 IPs3.3K b11cun020_00040001_4e1a3733same header set11 IPs186 b11cun010_00040000_c4b2c4aa1 header apart647 IPs63.7K b11cun030_00040011_c91eaf541 header apart547 IPs12.1K b10cun010_00040000_c4b2c4aa1 header apart365 IPs2.0K b11cun030_00040003_21fe282e1 header apart17 IPs1.4K b11cun031_00040001_c91eaf54_x74db1 header apart1 IPs402 b10cun030_00040011_c91eaf541 header apart14 IPs111

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.