Akin HTTP request fingerprint

b10cun020_00040004_1fdb23c0

Seen 2026-02-17 to 2026-10-01 across the retained window.

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS4766 sends an email when it next hits a sensor.

393

Source IPs

Networks

Countries

Ports hit

431

Events

IPs / network

Top networks

AS4766 Korea Telecom158 IPs165

AS17858 LG POWERCOMM67 IPs76

AS4713 NTT DOCOMO BUSINESS,Inc.22 IPs23

AS3786 LG DACOM Corporation19 IPs19

AS2518 BIGLOBE Inc.7 IPs7

AS2514 NTT PC Communications, Inc.6 IPs10

AS2519 ARTERIA Networks Corporation5 IPs7

AS17511 OPTAGE Inc.5 IPs5

AS17676 SoftBank Corp.5 IPs5

AS2527 Sony Network Communications Inc.4 IPs5

AS2497 Internet Initiative Japan Inc.3 IPs5

AS9824 JCOM Co., Ltd.3 IPs4

Countries

KR 261JP 86FR 8BR 7DK 4AL 4SG 3IN 3SE 2AE 2

Ports targeted

8080/tcp 26 2194/tcp 23 8000/tcp 22 82/tcp 22 83/tcp 22 557/tcp 22 35300/tcp 21 81/tcp 20 8282/tcp 19 65008/tcp 19 443/tcp 19 85/tcp 18

What it requests

GET/431

Source IPCCNetwork Last seenEvents

210.131.181.74JPAS2519 ARTERIA Networks Corporation2026-09-303

150.31.64.177JPAS2497 Internet Initiative Japan Inc.2026-09-273

115.136.132.51KRAS17858 LG POWERCOMM2026-09-273

182.230.13.204KRAS17858 LG POWERCOMM2026-09-293

128.28.148.4JPAS2514 NTT PC Communications, Inc.2026-09-243

223.171.80.132KRAS17853 LGTELECOM2026-09-302

125.180.43.77KRAS17858 LG POWERCOMM2026-10-012

180.4.28.212JPAS4713 NTT DOCOMO BUSINESS,Inc.2026-09-232

82.65.99.189FRAS12322 Free SAS2026-09-302

183.91.119.235JPAS18278 Cable TV Corporation2026-09-222

222.114.236.62KRAS4766 Korea Telecom2026-09-142

217.21.155.173ALAS29238 Nisatel LTD2026-09-282

120.74.206.128JPAS2527 Sony Network Communications Inc.2026-09-272

195.198.73.66SEAS3301 Telia Company AB2026-09-272

211.248.51.41KRAS4766 Korea Telecom2026-09-202

119.47.165.191JPAS7679 QTnet,Inc.2026-09-292

85.202.68.220DKAS31027 GlobalConnect A/S2026-09-212

89.249.87.82LTAS15440 UAB Baltnetos komunikacijos2026-09-172

61.78.240.223KRAS4766 Korea Telecom2026-09-172

222.112.56.146KRAS4766 Korea Telecom2026-09-272

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

b11cun020_00040004_0a8d7f11same header set3.9K IPs8.8K b10cun020_00040004_be1ad017same header set9 IPs476 b11cun020_00040004_1cae80d4same header set14 IPs94 b10cun020_00040004_0a8d7f11same header set27 IPs28 b11cun030_00040014_03330a181 header apart3.9K IPs1.4M b11cun030_00040014_54d07b6d1 header apart3.7K IPs105.0K b11cun010_00040000_c4b2c4aa1 header apart654 IPs64.5K b10cun010_00040000_c4b2c4aa1 header apart365 IPs2.0K

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.