People are sending HTTP requests with X-Forwarded-For across the Internet