Forum Moderators: open

Message Too Old, No Replies

zstd in Accept-Encoding request header

Is this new? Anyone else seeing it?

         

SumGuy

11:02 pm on Feb 25, 2024 (gmt 0)

5+ Year Member Top Contributors Of The Month



I've seen this for one hit on Jan 9, then a couple of hits on Feb 22 and one today.

Accept-Encoding is "gzip, deflate, br, zstd"
Normally it's just "gzip, deflate, br"

User-agents were
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

One hit looked legit (asked for all the right files) but it came from a ZScaler VPN IP. Another looks like a scrape. So I'm not sure yet if this is diagnostic for a bot.