HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

Akin HTTP request fingerprint

b10cun020_00040004_0a8d7f11

Seen 2026-02-19 to 2026-09-28 across the retained window.

Open in lookup → Addresses as a feed

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS4837 sends an email when it next hits a sensor.

26

Source IPs

7

Networks

1

Countries

9

Ports hit

28

Events

4

IPs / network

Top networks

AS4837 CHINA UNICOM China169 Backbone11 IPs11
AS4808 China Unicom Beijing Province Network6 IPs8
AS4134 Chinanet5 IPs5
AS9808 China Mobile Communications Group Co., Ltd.1 IPs1
AS140061 Qinghai Telecom1 IPs1
AS4812 China Telecom (Group)1 IPs1
AS24445 Henan Mobile Communications Co.,Ltd1 IPs1

Countries

CN 26

Ports targeted

8040/tcp 625000/tcp 68025/tcp 58032/tcp 48030/tcp 35000/tcp 18000/tcp 18010/tcp 19000/tcp 1

What it requests

GET/28
Source IPCCNetwork Last seenEvents
106.75.8.124CNAS4808 China Unicom Beijing Province Network2026-09-212
106.75.3.148CNAS4808 China Unicom Beijing Province Network2026-09-142
180.167.46.168CNAS4812 China Telecom (Group)2026-09-111
113.206.146.102CNAS4837 CHINA UNICOM China169 Backbone2026-09-091
106.75.9.126CNAS4808 China Unicom Beijing Province Network2026-09-111
121.29.149.25CNAS4837 CHINA UNICOM China169 Backbone2026-09-051
123.178.210.96CNAS4134 Chinanet2026-09-141
39.129.8.131CNAS9808 China Mobile Communications Group Co., Ltd.2026-09-131
117.159.9.6CNAS24445 Henan Mobile Communications Co.,Ltd2026-09-011
144.123.77.195CNAS4134 Chinanet2026-09-071
106.75.18.165CNAS4808 China Unicom Beijing Province Network2026-09-281
111.162.140.180CNAS4837 CHINA UNICOM China169 Backbone2026-09-231
124.88.113.183CNAS4837 CHINA UNICOM China169 Backbone2026-09-071
220.174.31.92CNAS4134 Chinanet2026-09-281
106.75.24.225CNAS4808 China Unicom Beijing Province Network2026-09-191
182.54.23.218CNAS4837 CHINA UNICOM China169 Backbone2026-09-271
60.16.204.125CNAS4837 CHINA UNICOM China169 Backbone2026-09-011
122.96.28.172CNAS4837 CHINA UNICOM China169 Backbone2026-09-041
110.179.80.100CNAS4134 Chinanet2026-09-091
113.140.251.74CNAS4134 Chinanet2026-09-041

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

b11cun020_00040004_0a8d7f11same header set4.0K IPs8.8Kb10cun020_00040004_be1ad017same header set9 IPs462b10cun020_00040004_1fdb23c0same header set403 IPs438b11cun020_00040004_1cae80d4same header set14 IPs94b11cun020_00040004_65c9480asame header set1 IPs3b11cun030_00040014_03330a181 header apart3.9K IPs1.4Mb11cun030_00040014_54d07b6d1 header apart3.7K IPs135.9Kb11cun010_00040000_c4b2c4aa1 header apart648 IPs63.7K

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.