 |
---------------------------------------- |
|
0x1bi.net is partially blocked now |
|
April 03rd, 2022 |
|
---------------------------------------- |
|
|
|
I have set my server to reject connections on IPv6 via TCP port 70 from |
|
0x1bi.net |
|
|
|
For some reason that host constantly access every resource on this |
|
gopher server (which I don't mind), but it does so in a very bizarre way |
|
|
|
Instead of a normaly gopher request, such as "/<CR><LF>" it sends all of |
|
its requests like: "/\tEQUEST_URI=/gopher.zcrayfish.soy<CR><LF>" |
|
|
|
This is a major problem, it's essentially the same as sending a type 7 |
|
search request to every resource on this server, naturally this appears |
|
as junk on the guestbook and comments sections. |
|
|
|
If this is an attempt at a vhosting type extension to gopher, it is |
|
really fucking stupid, as it is being sent on IPv6, which has ZERO need |
|
for vhosting ever. |
|
|
|
A cursory search on IRC and gopher://0x1bi.net revealed no useful |
|
contact information, and their gopher server's root clearly states: |
|
``0x1bi is either dead, deprecated, or both´´... If that's so, why's it |
|
still hammering this server? |
|
|
|
|
|
In any case, I'm not sure what 0x1bi.net is doing, and I don't really |
|
care... I absolutely welcome them to continue accessing any resources |
|
on this server, but they must fix their request syntax before I revert |
|
my firewall rule change. |
|
|
|
|
|
If anyone knows who runs that server, could you kindly give them a |
|
heads up so that the issue can be fixed? |
|
Thanks! |
|
|
 |
tcpdump of requests (768.1 KB) |
|
|
|
---------------------------------------- |
 |
Back to phlog index |
|
gopher.zcrayfish.soy gopher root |
|
This phlog entry has been read 1921 times. |
 |
Comments are enabled for this post, select here to leave yours |
|
|
|
Comments have been left on this post: |
|
|
|
I have to clean the guestbook regularly on RPoD due to posts that look |
|
exactly like this. Thanks for the info! |
|
Posted Sun Apr 3 17:58:24 UTC 2022 by 164.sub-174-212-211.myvzw.com. |
|
------------------------------------------------------------------------ |
|
Hi. Quick google search showed some person named Ben Raskin, his e-mail |
|
is ben <at> 0x1bi.net. |
|
Posted Tue Apr 5 19:59:16 UTC 2022 by |
|
------------------------------------------------------------------------ |
|
I get those annoying requests in gopher live chat at magical.fish. |
|
Posted Thu May 26 03:11:41 UTC 2022 by 70-40-46-238.arvig.net. |
|
------------------------------------------------------------------------ |
