----------------------------------------
0x1bi.net is partially blocked now
April 03rd, 2022
----------------------------------------

I have set my server to reject connections on IPv6 via TCP port 70 from
0x1bi.net

For some reason that host constantly access every resource on this
gopher server (which I don't mind), but it does so in a very bizarre way

Instead of a normaly gopher request, such as "/" it sends all of
its requests like: "/\tEQUEST_URI=/gopher.zcrayfish.soy"

This is a major problem, it's essentially the same as sending a type 7
search request to every resource on this server, naturally this appears
as junk on the guestbook and comments sections.

If this is an attempt at a vhosting type extension to gopher, it is
really fucking stupid, as it is being sent on IPv6, which has ZERO need
for vhosting ever.

A cursory search on IRC and gopher://0x1bi.net revealed no useful
contact information, and their gopher server's root clearly states:
``0x1bi is either dead, deprecated, or both´´... If that's so, why's it
still hammering this server?


In any case, I'm not sure what 0x1bi.net is doing, and I don't really
care... I absolutely  welcome them to continue accessing any resources
on this server, but they must fix their request syntax before I revert
my firewall rule change.


If anyone knows who runs that server, could you kindly give them a
heads up so that the issue can be fixed?
Thanks!
tcpdump of requests (768.1 KB)
----------------------------------------
Back to phlog index
gopher.zcrayfish.soy gopher root
This phlog entry has been read 1547 times.
Comments have been left on this post:

I have to clean the guestbook regularly on RPoD due to posts that look 
exactly like this. Thanks for the info!
Posted Sun Apr  3 17:58:24 UTC 2022 by 164.sub-174-212-211.myvzw.com.
------------------------------------------------------------------------
Hi. Quick google search showed some person named Ben Raskin, his e-mail 
is ben  0x1bi.net. 
Posted Tue Apr  5 19:59:16 UTC 2022 by 
------------------------------------------------------------------------
I get those annoying requests in gopher live chat at  magical.fish.
Posted Thu May 26 03:11:41 UTC 2022 by 70-40-46-238.arvig.net.
------------------------------------------------------------------------