127.0.0.1 in eight headers: what attackers hide in X-Forwarded-For · HackerTrans