HoneyLabs

Akin HTTP request fingerprint

b11cun060_00140017_c8769eba

Seen 2026-08-07 to 2026-09-29 across the retained window.

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS45102 sends an email when it next hits a sensor.

18

Source IPs

1

Networks

1

Countries

1

Ports hit

35

Events

18

IPs / network

Top networks

Countries

US 18

Ports targeted

What it requests

GET/12

User agents claimed

Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Mobile Safari/537.3618 IPs35
Source IPCCNetwork Last seenEvents
47.251.14.232USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-234
47.251.15.21USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-294
47.88.78.6USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-233
47.88.93.234USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-293
47.251.11.3USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-232
47.254.85.182USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-192
47.88.101.3USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-192
47.89.195.210USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-232
47.251.13.32USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-182
47.88.86.63USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-172
47.88.6.178USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-102
47.254.74.59USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-021
47.88.94.28USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-171
47.88.90.156USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-231
47.89.193.239USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-021
47.254.16.187USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-231
47.89.193.162USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-021
47.88.94.161USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-181

Related fingerprints

Clients whose header set is within two of this one, measured from the tokens themselves.

b11cun050_00040017_976354f01 header apart1.3K IPs19.0Kb11cun050_00040017_6b90553b1 header apart1.3K IPs9.4Kb11cun050_00040017_e873236c1 header apart686 IPs6.1Kb11cun050_00040017_d1f380a61 header apart4 IPs3.4Kb11cun050_00040017_eba289fe1 header apart19 IPs2.8Kb11cun050_00040017_345c845b1 header apart468 IPs2.6Kb11cun050_00040017_97f1d74f1 header apart38 IPs2.0Kb11cun050_00040017_2015d6b21 header apart524 IPs1.2K

About this fingerprint

Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.