HoneyLabs

Akin HTTP request fingerprint

b11cun030_00040018_f74a6e72

Seen 2026-02-16 to 2026-10-01 across the retained window.

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS135377 sends an email when it next hits a sensor.

564

Source IPs

7

Networks

27

Countries

2.8K

Ports hit

8.6K

Events

81

IPs / network

Top networks

Countries

US 123HK 72JP 43KR 41TH 39DE 29GB 26IN 25TW 24NG 19

Ports targeted

What it requests

GET/8.6K

User agents claimed

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0564 IPs8.6K
Source IPCCNetwork Last seenEvents
165.154.138.33DEAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2439
152.32.183.209USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1838
152.32.130.155HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1835
152.32.243.98KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2434
165.154.221.175VNAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1533
165.154.174.206GBAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1833
165.154.174.108GBAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1532
152.32.191.98HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2432
152.32.150.215USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2432
152.32.159.79INAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1732
165.154.138.34DEAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2431
152.32.149.118USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1831
165.154.12.127AEAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1531
152.32.233.95USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1531
152.32.206.49USAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2431
152.32.199.112BRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-2431
118.193.65.209GBAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1731
152.32.180.86AEAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1830
152.32.185.141HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1530
118.193.36.56HKAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED2026-09-1530

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

b11cun020_00040010_724c10fb1 header apart1.4K IPs70.5Kb11cun040_0004001c_61f767741 header apart2 IPs5.4Kb10cun020_00040010_724c10fb1 header apart14 IPs1.9Kb11cun040_0004001c_cdac4f661 header apart15 IPs29b11cun030_00040014_03330a182 headers apart3.9K IPs1.4Mb11cun030_00040012_13ee3d342 headers apart5.1K IPs225.9Kb11cun050_0004001d_5cbb346f2 headers apart977 IPs168.4Kb11cun050_0004001e_a647ba7f2 headers apart26 IPs138.7K

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.