bun/1.4.2

[[TODO: MAP ONE SENTENCE SUMMARY]]

Category: [[TODO: MAP CATEGORY]] Avg 0.6 req/min Seen on 56 systems 1,217 observed requests 6 exact variants First seen August 3, 2026 Last seen October 19, 2026

[[TODO: MAP INTRODUCTION PARAGRAPH 1]]

[[TODO: MAP INTRODUCTION PARAGRAPH 2]]

What is bun/1.4.2?

[[TODO: MAP DEFINITION SUMMARY]]

[[TODO: MAP SHORT REFERENCE SUMMARY]]

Analyst summary: [[TODO: MAP ANALYST REPORT SUMMARY]]
User-agent
bun/1.4.2
Observed source IPs
0
Observed requests
1,217
Source networks
80
Exact variants
6
Latest hit count
1,154
Latest miss count
4
Latest 404 count
0
Unique paths
4
Related campaigns
[[TODO: MAP RELATED CAMPAIGN COUNT]]

Observed exact user-agent strings

bun/1.4.2 First seen September 9, 2026 · Last seen October 19, 2026
bun/1.3.3 First seen October 13, 2026 · Last seen October 18, 2026
bun/1.4.0 First seen August 26, 2026 · Last seen October 17, 2026
bun/1.3.14 First seen August 3, 2026 · Last seen October 17, 2026
bun/1.4.3 First seen October 12, 2026 · Last seen October 16, 2026
bun/1.3.13 First seen September 14, 2026 · Last seen September 19, 2026

Behavior profile

[[TODO: MAP BEHAVIOR PROFILE INTRO]]

Category
[[TODO: MAP CATEGORY]]
Average request rate
0.6 requests per minute
HTTP and HTTPS support
[[TODO: MAP HTTP HTTPS SUPPORT]]
HTTP version support
[[TODO: MAP PROTOCOL SUPPORT SUMMARY]]
Redirect behavior
[[TODO: MAP REDIRECT BEHAVIOR]]
Robots.txt behavior
[[TODO: MAP ROBOTS TXT BEHAVIOR]]
Crawl-rate behavior
[[TODO: MAP CRAWL RATE BEHAVIOR]]
JavaScript execution
[[TODO: MAP JAVASCRIPT SUPPORT]]
Form submission activity
[[TODO: MAP FORM SUBMISSION ACTIVITY]]
Malformed URL requests
[[TODO: MAP MALFORMED URL BEHAVIOR]]
HTTP/1.0: [[TODO: MAP HTTP 1.0 SUPPORT]] HTTP/1.1: [[TODO: MAP HTTP 1.1 SUPPORT]] HTTP/2: [[TODO: MAP HTTP 2 SUPPORT]] HTTP/3: [[TODO: MAP HTTP 3 SUPPORT]] [[TODO: MAP HEADER ORDER FINGERPRINTED]]

Source distribution

[[TODO: MAP SOURCE DISTRIBUTION INTRO]]

Top countries

Country Networks Site sightings Share
United States 63 306 96.1%
United Kingdom 4 4 1.4%
Unknown 5 5 1.2%
United Arab Emirates 1 1 0.4%
Israel 1 1 0.3%
Slovakia 2 2 0.2%
France 1 1 0.2%
Germany 2 2 0.2%
Canada 1 1 0.1%

Top ASNs

ASN Organization Networks Share
AS396982 [[TODO: MAP ASN ORGANIZATION]] 59 94.8%
AS202044 [[TODO: MAP ASN ORGANIZATION]] 2 1.2%
AS14618 [[TODO: MAP ASN ORGANIZATION]] 2 0.9%
AS28753 [[TODO: MAP ASN ORGANIZATION]] 1 0.4%
AS12400 [[TODO: MAP ASN ORGANIZATION]] 1 0.3%
AS5650 [[TODO: MAP ASN ORGANIZATION]] 1 0.2%
AS42841 [[TODO: MAP ASN ORGANIZATION]] 2 0.2%
AS51167 [[TODO: MAP ASN ORGANIZATION]] 2 0.2%
AS16276 [[TODO: MAP ASN ORGANIZATION]] 1 0.2%
AS15128 [[TODO: MAP ASN ORGANIZATION]] 1 0.1%

Top datacenters

Provider Type Snapshots Share

Representative source IPs

[[TODO: MAP REPRESENTATIVE IPS INTRO]]

HTTP fingerprint and request characteristics

[[TODO: MAP HTTP FINGERPRINT INTRO]]

Observed header order
[[TODO: MAP HTTP HEADER ORDER SUMMARY]]
Common headers sent
[[TODO: MAP COMMON HEADERS SUMMARY]]
TLS and HTTPS behavior
[[TODO: MAP TLS HTTPS SUMMARY]]
URL normalization behavior
[[TODO: MAP URL NORMALIZATION SUMMARY]]
Malformed request patterns
[[TODO: MAP MALFORMED REQUEST SUMMARY]]
[[TODO: MAP OBSERVED HTTP HEADERS]]

Observed sample requests

[[TODO: MAP SAMPLE REQUESTS INTRO]]

GET
/retail-media-nueva-frontera-publicitaria-mexico/
Status pattern: HTTP 200
Seen 2 times, Last seen August 20, 2026
GET
/aqara-bosch-philips-matter/
Status pattern: HTTP 200
Seen 1 times, Last seen August 20, 2026
GET
/travel-guide/best-travel-groups-for-solo-female-travelers-2026-guide/
Status pattern: HTTP 200
Seen 3 times, Last seen August 19, 2026
GET
/ki-infrastruktur-sicherheitskosten/
Status pattern: HTTP 200
Seen 4 times, Last seen August 19, 2026
GET
/npu-processeur-ia-pc-portables/
Status pattern: HTTP 200
Seen 2 times, Last seen August 19, 2026
GET
/autologous-stem-cell-injections-for-back-pain-can-they-help/
Status pattern: HTTP 200
Seen 1 times, Last seen August 18, 2026
GET
/seo-content-retainer-monatsumsatz/
Status pattern: HTTP 200
Seen 2 times, Last seen August 18, 2026
GET
/versicherer-ki-schadensbearbeitung/
Status pattern: HTTP 200
Seen 4 times, Last seen August 16, 2026
GET
/saas-onboarding-tools-refine-in-app-guidance-to-improve-retention/
Status pattern: HTTP 200
Seen 2 times, Last seen August 16, 2026
GET
/air-france-antilles-hiver/
Status pattern: HTTP 200
Seen 2 times, Last seen August 15, 2026
GET
/ki-daten-prognosen-marketing/
Status pattern: HTTP 200
Seen 2 times, Last seen August 15, 2026
GET
/about/
Status pattern: HTTP 200
Seen 3 times, Last seen August 15, 2026

Related campaigns and associations

[[TODO: MAP RELATED CAMPAIGNS INTRO]]

[[TODO: MAP RELATED CAMPAIGN NAME]]

[[TODO: MAP RELATED CAMPAIGN SUMMARY]]
Related IPs: [[TODO: MAP RELATED CAMPAIGN IP COUNT]], Systems seen: [[TODO: MAP RELATED CAMPAIGN SYSTEMS SEEN]]
Confidence: [[TODO: MAP RELATED CAMPAIGN CONFIDENCE]]

Detailed analyst report

[[TODO: MAP ANALYST REPORT PARAGRAPH 1]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 2]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 3]]

Frequently asked questions about bun/1.4.2

What is bun/1.4.2?

[[TODO: MAP FAQ WHAT IS ANSWER]]

Is bun/1.4.2 considered malicious?

[[TODO: MAP FAQ MALICIOUS ANSWER]]

Does bun/1.4.2 respect robots.txt and crawl-rate controls?

[[TODO: MAP FAQ ROBOTS ANSWER]]

What infrastructure is commonly associated with bun/1.4.2?

[[TODO: MAP FAQ INFRASTRUCTURE ANSWER]]