209.182.239.124 - - [19/Aug/2019:18:24:53 +0100] "GET /.well-known/nodeinfo HTTP/1.1" 200 239 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"

you ain't fuckin' real. yeet

alright escalating this thread to because after inspecting my logs I found several thousand of these, going back to March 11. Someone's doing a piss-poor job of disguising the fact they're scraping fedi for metadata.

IPs are 172.93.51.164 209.182.239.124 209.240.111.146 67.185.88.73

@flussence for 209.182 I'm getting GET /.well-known/x-social-relay HTTP/1.1" 404 36 "-" "Social-Relay/1.6.0-dev - https://github.com/jaywink/social-relay, which seems to be some Diaspora thing

Follow

@noiob yeah, I see that in mine now too. But if it's a legit thing, why are they faking the UA in half the requests?

· Web · 1 · 0 · 0

@noiob @flussence Could also be they are simply using different libraries for some things that emit different UAs? Anyone on feed know anything about diaspora dev?

Sign in to participate in the conversation
nulled.red

nulled.red is an any-topic moderated Mastodon instance made by me, Ami. Hosted in Roubaix, France.