----------------------------------------
0x1bi.net is partially blocked now
April 03rd, 2022
----------------------------------------
I have set my server to reject connections on IPv6 via TCP port 70 from
0x1bi.net
For some reason that host constantly access every resource on this
gopher server (which I don't mind), but it does so in a very bizarre way
Instead of a normaly gopher request, such as "/<CR><LF>" it sends all of
its requests like: "/\tEQUEST_URI=/gopher.zcrayfish.soy<CR><LF>"
This is a major problem, it's essentially the same as sending a type 7
search request to every resource on this server, naturally this appears
as junk on the guestbook and comments sections.
If this is an attempt at a vhosting type extension to gopher, it is
really fucking stupid, as it is being sent on IPv6, which has ZERO need
for vhosting ever.
A cursory search on IRC and gopher://0x1bi.net revealed no useful
contact information, and their gopher server's root clearly states:
``0x1bi is either dead, deprecated, or both´´... If that's so, why's it
still hammering this server?
In any case, I'm not sure what 0x1bi.net is doing, and I don't really
care... I absolutely welcome them to continue accessing any resources
on this server, but they must fix their request syntax before I revert
my firewall rule change.
If anyone knows who runs that server, could you kindly give them a
heads up so that the issue can be fixed?
Thanks!
BIN tcpdump of requests (768.1 KB)
----------------------------------------
DIR Back to phlog index
DIR gopher.zcrayfish.soy gopher root
This phlog entry has been read 2189 times.
Comments have been left on this post:
I have to clean the guestbook regularly on RPoD due to posts that look
exactly like this. Thanks for the info!
Posted Sun Apr 3 17:58:24 UTC 2022 by 164.sub-174-212-211.myvzw.com.
------------------------------------------------------------------------
Hi. Quick google search showed some person named Ben Raskin, his e-mail
is ben <at> 0x1bi.net.
Posted Tue Apr 5 19:59:16 UTC 2022 by
------------------------------------------------------------------------
I get those annoying requests in gopher live chat at magical.fish.
Posted Thu May 26 03:11:41 UTC 2022 by 70-40-46-238.arvig.net.
------------------------------------------------------------------------