okhttp/4.12.0

[[TODO: MAP ONE SENTENCE SUMMARY]]

Category: [[TODO: MAP CATEGORY]] Avg 2.7 req/min Seen on 128 systems 3,337 observed requests 8 exact variants First seen August 3, 2026 Last seen October 19, 2026

[[TODO: MAP INTRODUCTION PARAGRAPH 1]]

[[TODO: MAP INTRODUCTION PARAGRAPH 2]]

What is okhttp/4.12.0?

[[TODO: MAP DEFINITION SUMMARY]]

[[TODO: MAP SHORT REFERENCE SUMMARY]]

Analyst summary: [[TODO: MAP ANALYST REPORT SUMMARY]]
User-agent
okhttp/4.12.0
Observed source IPs
0
Observed requests
3,337
Source networks
594
Exact variants
8
Latest hit count
21,372
Latest miss count
9
Latest 404 count
0
Unique paths
70
Related campaigns
[[TODO: MAP RELATED CAMPAIGN COUNT]]

Observed exact user-agent strings

okhttp/4.12.0 First seen August 7, 2026 · Last seen October 19, 2026
okhttp/3.0 First seen August 3, 2026 · Last seen October 18, 2026
okhttp/5.3.0 First seen August 3, 2026 · Last seen October 17, 2026
okhttp/4.9.3 First seen October 10, 2026 · Last seen October 10, 2026
okhttp First seen August 10, 2026 · Last seen September 29, 2026
okhttp/3.14.9 First seen August 15, 2026 · Last seen September 21, 2026
okhttp/5.3.2 First seen August 14, 2026 · Last seen September 5, 2026
okhttp/4.11.0 First seen August 9, 2026 · Last seen September 3, 2026

Behavior profile

[[TODO: MAP BEHAVIOR PROFILE INTRO]]

Category
[[TODO: MAP CATEGORY]]
Average request rate
2.7 requests per minute
HTTP and HTTPS support
[[TODO: MAP HTTP HTTPS SUPPORT]]
HTTP version support
[[TODO: MAP PROTOCOL SUPPORT SUMMARY]]
Redirect behavior
[[TODO: MAP REDIRECT BEHAVIOR]]
Robots.txt behavior
[[TODO: MAP ROBOTS TXT BEHAVIOR]]
Crawl-rate behavior
[[TODO: MAP CRAWL RATE BEHAVIOR]]
JavaScript execution
[[TODO: MAP JAVASCRIPT SUPPORT]]
Form submission activity
[[TODO: MAP FORM SUBMISSION ACTIVITY]]
Malformed URL requests
[[TODO: MAP MALFORMED URL BEHAVIOR]]
HTTP/1.0: [[TODO: MAP HTTP 1.0 SUPPORT]] HTTP/1.1: [[TODO: MAP HTTP 1.1 SUPPORT]] HTTP/2: [[TODO: MAP HTTP 2 SUPPORT]] HTTP/3: [[TODO: MAP HTTP 3 SUPPORT]] [[TODO: MAP HEADER ORDER FINGERPRINTED]]

Source distribution

[[TODO: MAP SOURCE DISTRIBUTION INTRO]]

Top countries

Country Networks Site sightings Share
United States 320 1,247 80.3%
Hong Kong SAR China 56 56 5.3%
Unknown 112 136 4.7%
China 23 53 4.6%
United Kingdom 12 15 1.0%
Brazil 18 18 0.7%
Australia 7 7 0.6%
Germany 7 7 0.5%
Singapore 5 5 0.5%
France 4 4 0.4%

Top ASNs

ASN Organization Networks Share
AS396982 [[TODO: MAP ASN ORGANIZATION]] 148 48.3%
AS14618 [[TODO: MAP ASN ORGANIZATION]] 85 18.4%
AS16509 [[TODO: MAP ASN ORGANIZATION]] 45 10.5%
AS135377 [[TODO: MAP ASN ORGANIZATION]] 59 5.5%
AS45090 [[TODO: MAP ASN ORGANIZATION]] 4 3.0%
AS5650 [[TODO: MAP ASN ORGANIZATION]] 15 1.8%
AS4134 [[TODO: MAP ASN ORGANIZATION]] 13 1.0%
AS14593 [[TODO: MAP ASN ORGANIZATION]] 8 0.7%
AS132203 [[TODO: MAP ASN ORGANIZATION]] 3 0.4%
AS1221 [[TODO: MAP ASN ORGANIZATION]] 2 0.3%

Top datacenters

Provider Type Snapshots Share

Representative source IPs

[[TODO: MAP REPRESENTATIVE IPS INTRO]]

HTTP fingerprint and request characteristics

[[TODO: MAP HTTP FINGERPRINT INTRO]]

Observed header order
[[TODO: MAP HTTP HEADER ORDER SUMMARY]]
Common headers sent
[[TODO: MAP COMMON HEADERS SUMMARY]]
TLS and HTTPS behavior
[[TODO: MAP TLS HTTPS SUMMARY]]
URL normalization behavior
[[TODO: MAP URL NORMALIZATION SUMMARY]]
Malformed request patterns
[[TODO: MAP MALFORMED REQUEST SUMMARY]]
[[TODO: MAP OBSERVED HTTP HEADERS]]

Observed sample requests

[[TODO: MAP SAMPLE REQUESTS INTRO]]

GET
/
Status pattern: HTTP 200
Seen 43 times, Last seen September 24, 2026
GET
/
Status pattern: HTTP 301
Seen 10 times, Last seen September 24, 2026
GET
/favicon.png
Status pattern: HTTP 404
Seen 37 times, Last seen September 24, 2026
POST
/wp-json/bitfire/v1/browser-verify?_fn=xhr&_bfa=71f1204658be9f68154588a1.e68cpqg6plwm.1789279200&per=0&_bfg=%5B%5D
Status pattern: HTTP 200
Seen 1 times, Last seen September 13, 2026
POST
/wp-admin/admin-ajax.php?action=wppv_counter&post_id=2009&nonce=%2A%2A%2A
Status pattern: HTTP 200
Seen 3 times, Last seen August 31, 2026
POST
/wp-json/bitfire/v1/browser-verify?_fn=xhr&_bfa=68cac2b74a23c533eeee5319.1ggxb5jrhiyd.1788206400&per=0&_bfg=%5B%5D
Status pattern: HTTP 200
Seen 1 times, Last seen August 31, 2026
POST
/wp-json/bitfire/v1/browser-verify?_fn=xhr&_bfa=25d1bc3e5c403efd280f829c.emasmy8ixzdd.1787940000&per=0&_bfg=%5B%5D
Status pattern: HTTP 200
Seen 1 times, Last seen August 29, 2026
GET
/sitemap_index.xml
Status pattern: HTTP 404
Seen 27 times, Last seen August 26, 2026
GET
/sitemap.xml
Status pattern: HTTP 404
Seen 2 times, Last seen August 26, 2026
GET
/robots.txt
Status pattern: HTTP 200
Seen 5 times, Last seen August 26, 2026
GET
/sitemap_index.xml
Status pattern: HTTP 200
Seen 1 times, Last seen August 25, 2026
POST
/wp-json/bitfire/v1/browser-verify?_fn=xhr&_bfa=0f0f8218b7f710f08caa3dca.padviaj6dvmn.1787659200&per=0&_bfg=%5B%5D
Status pattern: HTTP 200
Seen 1 times, Last seen August 25, 2026

Related campaigns and associations

[[TODO: MAP RELATED CAMPAIGNS INTRO]]

[[TODO: MAP RELATED CAMPAIGN NAME]]

[[TODO: MAP RELATED CAMPAIGN SUMMARY]]
Related IPs: [[TODO: MAP RELATED CAMPAIGN IP COUNT]], Systems seen: [[TODO: MAP RELATED CAMPAIGN SYSTEMS SEEN]]
Confidence: [[TODO: MAP RELATED CAMPAIGN CONFIDENCE]]

Detailed analyst report

[[TODO: MAP ANALYST REPORT PARAGRAPH 1]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 2]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 3]]

Frequently asked questions about okhttp/4.12.0

What is okhttp/4.12.0?

[[TODO: MAP FAQ WHAT IS ANSWER]]

Is okhttp/4.12.0 considered malicious?

[[TODO: MAP FAQ MALICIOUS ANSWER]]

Does okhttp/4.12.0 respect robots.txt and crawl-rate controls?

[[TODO: MAP FAQ ROBOTS ANSWER]]

What infrastructure is commonly associated with okhttp/4.12.0?

[[TODO: MAP FAQ INFRASTRUCTURE ANSWER]]