<story><title>Google DNS at 010.010.010.010</title><url>https://010.010.010.010/</url></story><parent_chain><item><author>makeworld</author><text>Google&amp;#x27;s server handles the octal case if it&amp;#x27;s provided directly. Not sure if this is an explicit code path or if the server handles all IP forms.&lt;p&gt;Try this:&lt;p&gt;&lt;pre&gt;&lt;code&gt;  curl -v -H &amp;quot;Host: 010.010.010.010&amp;quot; https:&amp;#x2F;&amp;#x2F;8.8.8.8
&lt;/code&gt;&lt;/pre&gt;
Trying to do the same with other websites doesn&amp;#x27;t seem to work.</text></item><item><author>neilk</author><text>Octal 010 is 8. Dotted quads can apparently be in octal, so that’s just 8.8.8.8 .&lt;p&gt;What are we looking at here that’s new?</text></item></parent_chain><comment><author>anderskaseorg</author><text>Google’s server doesn’t handle that as a special case; it redirects any host other than dns.google to dns.google.  These give the same result:&lt;p&gt;&lt;pre&gt;&lt;code&gt;    curl -v -H &amp;quot;Host: 010.010.010.010&amp;quot; https:&amp;#x2F;&amp;#x2F;8.8.8.8
    curl -v -H &amp;quot;Host: 222.222.222.222&amp;quot; https:&amp;#x2F;&amp;#x2F;8.8.8.8
    curl -v -H &amp;quot;Host: example.com&amp;quot; https:&amp;#x2F;&amp;#x2F;8.8.8.8&lt;/code&gt;&lt;/pre&gt;</text></comment>
<story><title>Google DNS at 010.010.010.010</title><url>https://010.010.010.010/</url></story><parent_chain><item><author>makeworld</author><text>Google&amp;#x27;s server handles the octal case if it&amp;#x27;s provided directly. Not sure if this is an explicit code path or if the server handles all IP forms.&lt;p&gt;Try this:&lt;p&gt;&lt;pre&gt;&lt;code&gt;  curl -v -H &amp;quot;Host: 010.010.010.010&amp;quot; https:&amp;#x2F;&amp;#x2F;8.8.8.8
&lt;/code&gt;&lt;/pre&gt;
Trying to do the same with other websites doesn&amp;#x27;t seem to work.</text></item><item><author>neilk</author><text>Octal 010 is 8. Dotted quads can apparently be in octal, so that’s just 8.8.8.8 .&lt;p&gt;What are we looking at here that’s new?</text></item></parent_chain><comment><author>lucb1e</author><text>Not sure what you mean about other websites, it works fine on Apache and Nginx, e.g. on my server:&lt;p&gt;&lt;pre&gt;&lt;code&gt;    curl -kiH Host:1348764566 https:&amp;#x2F;&amp;#x2F;1348764566
&lt;/code&gt;&lt;/pre&gt;
(-k flag needed because I didn&amp;#x27;t get a valid cert for this variant of the IP. One could also specify the fingerprint but let&amp;#x27;s keep the demo simple.)&lt;p&gt;It&amp;#x27;ll give you a 404 because of the unknown vhost, but it would also do that if you access it using the &amp;#x27;normal&amp;#x27; dotted decimal notation: &lt;a href=&quot;http:&amp;#x2F;&amp;#x2F;80.100.131.150&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;80.100.131.150&lt;/a&gt;&lt;p&gt;I used to detect this number actually and it would give you a small easter egg, but nobody triggered it and nowadays Firefox doesn&amp;#x27;t send it as a host header anymore when you specify the IP as such so I didn&amp;#x27;t check how to port that over to my new web server stack.</text></comment>