User-Agent

libredtail-http

first seen 2026-06-11 04:20 · last seen 2026-09-15 21:45 · JSON

Last 7 days (36 observations)

Distinct clients per day (last 30 days, peak 5/day)

Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.

Decomposed attributes

Browser / clientlibredtail-http
Noteinferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13i170900_5b57614c22b0_78e6aca7449b160

HTTP request (JA4H)

fingerprintco-occurrences
ge11nn070000_d0d63ed74832_000000000000_00000000000031
ge11nn050000_c71bbc472f37_000000000000_00000000000029
po11nn060000_8c1b2e3f6532_000000000000_00000000000010
ge11nn050000_e81ae831f766_000000000000_00000000000010
ge11nn070000_f395b2c4bb38_000000000000_00000000000010
ge11nn070000_07b5c846fda8_000000000000_0000000000008
ge11nn050000_0c34b9a6def6_000000000000_0000000000008
ge11nn070000_ca40d4d1460e_000000000000_0000000000008
ge11nn050000_889622e8388c_000000000000_0000000000007
ge11nn070000_fd2827074311_000000000000_0000000000005

TCP SYN (p0f)

fingerprintco-occurrences
4:47+17:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:012
4:48+16:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:011
4:51+13:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:09
4:54+10:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:09
4:43+21:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:09
4:53+11:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:08
4:46+18:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:08
4:49+15:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:05
4:41+23:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:05
4:46+18:0:1424:mss*44,7:mss,sok,ts,nop,ws:df,id+:04

TCP SYN (JA4T)

fingerprintco-occurrences
64240_2-4-8-1-3_1460_788
29200_2-4-8-1-3_1460_78
64240_2-4-8-1-3_1424_76
32120_2-4-8-1-3_1460_76
64952_2-4-8-1-3_1412_76
65280_2-4-8-1-3_1360_74
29200_2-4-8-1-3_1400_74
64240_2-4-8-1-3_1460_104
42340_2-4-8-1-3_1412_112
64240_2-4-8-1-3_1460_92

Country

fingerprintco-occurrences
US · United States35
VN · Vietnam14
PK · Pakistan13
CN · China10
ID · Indonesia9
TH · Thailand9
FR · France7
SG · Singapore6
HK · Hong Kong SAR China6
DE · Germany5

Network (ASN)

fingerprintco-occurrences
AS45102 · Alibaba (US) Technology Co., Ltd.12
AS59257 · CMPak Limited11
AS150862 · VPSTTT COMPUTER COMPANY LIMITED8
AS51167 · Contabo GmbH7
AS45090 · Shenzhen Tencent Computer Systems Company Limited6
AS135377 · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED6
AS174 · Cogent Communications, LLC6
AS36352 · HostPapa6
AS9009 · M247 Europe SRL4
AS53667 · FranTech Solutions4