Akin HTTP request fingerprint
b11cun060_00140017_c8769eba
Seen 2026-08-07 to 2026-09-29 across the retained window.
The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked.
Or watch the top network: AS45102 sends an email when it next hits a sensor.
User agents claimed
Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Mobile Safari/537.3618 IPs35
Source IPCCNetwork
Last seenEvents
47.251.14.232USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-234 47.251.15.21USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-294 47.88.78.6USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-233 47.88.93.234USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-293 47.251.11.3USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-232 47.254.85.182USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-192 47.88.101.3USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-192 47.89.195.210USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-232 47.251.13.32USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-182 47.88.86.63USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-172 47.88.6.178USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-102 47.254.74.59USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-021 47.88.94.28USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-171 47.88.90.156USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-231 47.89.193.239USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-021 47.254.16.187USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-231 47.89.193.162USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-021 47.88.94.161USAS45102 Alibaba (US) Technology Co., Ltd.2026-09-181
About this fingerprint
Akin fingerprints an HTTP client from the request head alone: the protocol version, line endings, body framing, which headers are present, and the grammar of the negotiation header values. The User-Agent string and the request path are deliberately excluded, because both are trivially changed and both were measured varying within a single operator, so a scanner that rotates either keeps one fingerprint. The middle section is a presence bitmap rather than a hash, so two tokens can be compared directly to see how many headers the clients differ by.