Conversation

Notices

1. pistolero :thispersondoesnotexist: (p@freespeechextremist.com)'s status on Sunday, 14-Jan-2024 21:10:21 JST pistolero :thispersondoesnotexist:
   fucking already are you dicks serious the server literally just came back
   
   > 192.241.223.4 - [2024-01-14T12:07:13+00:00] "GET /owa/auth/logon.aspx HTTP/1.1" 402 9 "-" "Mozilla/5.0 zgrab/0.x" 0.000 - - -
   •  (mint@ryona.agency)'s status on Sunday, 14-Jan-2024 21:10:18 JST 

     in reply to
     @p Meanwhile someone was trying to sell curl -H "User-Agent" on Tor.
     Screenshot_20240112_162811.png
   • pistolero :thispersondoesnotexist: (p@freespeechextremist.com)'s status on Sunday, 14-Jan-2024 22:22:23 JST pistolero :thispersondoesnotexist:

     in reply to

     • 
     @mint Holy shit, man.
     
     This is moderately interesting: I have seen recently some hosts and UAs of the form "$myhostname.jc.0e1.uk" and it was apparently an attempt to see if anything is automatically triggered by hostname. So you'd hit, say, ryona.agency's IP but pass "Host: ryona.agency.whatever-hostname-you-set-up" and you can see if this triggers a DNS lookup or HTTP request or soemthing.
      likes this.