LRDD template log flood

a1batross commented

2022-11-23 20:14:54 +00:00

Hello!

Was checking Akkoma backend logs for suspicious lines and found this.

It doesn't stop, seems stuck in endless loop following redirects.

ноя 23 20:51:09 UwU mix[2283665]: 20:51:09.716 [warning] Can't find LRDD template in "https://beta.4201337.xyz/.well-known/host-meta": {:ok, %Tesla.Env{__client__: %Tesla.Client{adapter: nil, fun: nil, post: [], pre: [{Tesla.Middleware.FollowRedirects, :call, [[]]}]}, __module__: Tesla, body: "{\"detail\":\"Not Found\"}", headers: [{"server", "nginx"}, {"date", "Wed, 23 Nov 2022 19:51:24 GMT"}, {"content-type", "application/json"}, {"content-length", "22"}, {"connection", "keep-alive"}, {"x-request-id", "6f8699e7afb83613"}, {"x-powered-by", "microblogpub"}, {"referrer-policy", "no-referrer, strict-origin-when-cross-origin"}, {"x-content-type-options", "nosniff"}, {"x-xss-protection", "1; mode=block"}, {"x-frame-options", "DENY"}, {"permissions-policy", "interest-cohort=()"}, {"content-security-policy", "default-src 'self'; style-src 'self' 'sha256-xnifK0WnajdVtYMQwSZBOG+Fgh+666u3gKAy2L2Jaew='; frame-ancestors 'none'; base-uri 'self'; form-action 'self';"}, {"strict-transport-security", "max-age=63072000;"}, {"strict-transport-security", "max-age=31536000; includeSubDomains"}], method: :get, opts: [adapter: [name: MyFinch, pool_timeout: 5000, receive_timeout: 5000]], query: [], status: 404, url: "https://beta.4201337.xyz/.well-known/host-meta"}}
ноя 23 20:51:09 UwU mix[2283665]: 20:51:09.700 [warning] Can't find LRDD template in "https://beta.4201337.xyz/.well-known/host-meta": {:ok, %Tesla.Env{__client__: %Tesla.Client{adapter: nil, fun: nil, post: [], pre: [{Tesla.Middleware.FollowRedirects, :call, [[]]}]}, __module__: Tesla, body: "{\"detail\":\"Not Found\"}", headers: [{"server", "nginx"}, {"date", "Wed, 23 Nov 2022 19:51:24 GMT"}, {"content-type", "application/json"}, {"content-length", "22"}, {"connection", "keep-alive"}, {"x-request-id", "e5776bb270d9eda1"}, {"x-powered-by", "microblogpub"}, {"referrer-policy", "no-referrer, strict-origin-when-cross-origin"}, {"x-content-type-options", "nosniff"}, {"x-xss-protection", "1; mode=block"}, {"x-frame-options", "DENY"}, {"permissions-policy", "interest-cohort=()"}, {"content-security-policy", "default-src 'self'; style-src 'self' 'sha256-xnifK0WnajdVtYMQwSZBOG+Fgh+666u3gKAy2L2Jaew='; frame-ancestors 'none'; base-uri 'self'; form-action 'self';"}, {"strict-transport-security", "max-age=63072000;"}, {"strict-transport-security", "max-age=31536000; includeSubDomains"}], method: :get, opts: [adapter: [name: MyFinch, pool_timeout: 5000, receive_timeout: 5000]], query: [], status: 404, url: "https://beta.4201337.xyz/.well-known/host-meta"}}
ноя 23 20:51:09 UwU mix[2283665]: 20:51:09.393 [warning] Can't find LRDD template in "https://beta.4201337.xyz/.well-known/host-meta": {:ok, %Tesla.Env{__client__: %Tesla.Client{adapter: nil, fun: nil, post: [], pre: [{Tesla.Middleware.FollowRedirects, :call, [[]]}]}, __module__: Tesla, body: "{\"detail\":\"Not Found\"}", headers: [{"server", "nginx"}, {"date", "Wed, 23 Nov 2022 19:51:24 GMT"}, {"content-type", "application/json"}, {"content-length", "22"}, {"connection", "keep-alive"}, {"x-request-id", "f49e03109ed41a71"}, {"x-powered-by", "microblogpub"}, {"referrer-policy", "no-referrer, strict-origin-when-cross-origin"}, {"x-content-type-options", "nosniff"}, {"x-xss-protection", "1; mode=block"}, {"x-frame-options", "DENY"}, {"permissions-policy", "interest-cohort=()"}, {"content-security-policy", "default-src 'self'; style-src 'self' 'sha256-xnifK0WnajdVtYMQwSZBOG+Fgh+666u3gKAy2L2Jaew='; frame-ancestors 'none'; base-uri 'self'; form-action 'self';"}, {"strict-transport-security", "max-age=63072000;"}, {"strict-transport-security", "max-age=31536000; includeSubDomains"}], method: :get, opts: [adapter: [name: MyFinch, pool_timeout: 5000, receive_timeout: 5000]], query: [], status: 404, url: "https://beta.4201337.xyz/.well-known/host-meta"}}
ноя 23 20:51:09 UwU mix[2283665]: 20:51:09.378 [warning] Can't find LRDD template in "https://beta.4201337.xyz/.well-known/host-meta": {:ok, %Tesla.Env{__client__: %Tesla.Client{adapter: nil, fun: nil, post: [], pre: [{Tesla.Middleware.FollowRedirects, :call, [[]]}]}, __module__: Tesla, body: "{\"detail\":\"Not Found\"}", headers: [{"server", "nginx"}, {"date", "Wed, 23 Nov 2022 19:51:24 GMT"}, {"content-type", "application/json"}, {"content-length", "22"}, {"connection", "keep-alive"}, {"x-request-id", "aa125cf571d201d6"}, {"x-powered-by", "microblogpub"}, {"referrer-policy", "no-referrer, strict-origin-when-cross-origin"}, {"x-content-type-options", "nosniff"}, {"x-xss-protection", "1; mode=block"}, {"x-frame-options", "DENY"}, {"permissions-policy", "interest-cohort=()"}, {"content-security-policy", "default-src 'self'; style-src 'self' 'sha256-xnifK0WnajdVtYMQwSZBOG+Fgh+666u3gKAy2L2Jaew='; frame-ancestors 'none'; base-uri 'self'; form-action 'self';"}, {"strict-transport-security", "max-age=63072000;"}, {"strict-transport-security", "max-age=31536000; includeSubDomains"}], method: :get, opts: [adapter: [name: MyFinch, pool_timeout: 5000, receive_timeout: 5000]], query: [], status: 404, url: "https://beta.4201337.xyz/.well-known/host-meta"}}
ноя 23 20:51:09 UwU mix[2283665]: 20:51:09.355 [warning] Can't find LRDD template in "https://beta.4201337.xyz/.well-known/host-meta": {:ok, %Tesla.Env{__client__: %Tesla.Client{adapter: nil, fun: nil, post: [], pre: [{Tesla.Middleware.FollowRedirects, :call, [[]]}]}, __module__: Tesla, body: "{\"detail\":\"Not Found\"}", headers: [{"server", "nginx"}, {"date", "Wed, 23 Nov 2022 19:51:24 GMT"}, {"content-type", "application/json"}, {"content-length", "22"}, {"connection", "keep-alive"}, {"x-request-id", "13985e34ef24d7d0"}, {"x-powered-by", "microblogpub"}, {"referrer-policy", "no-referrer, strict-origin-when-cross-origin"}, {"x-content-type-options", "nosniff"}, {"x-xss-protection", "1; mode=block"}, {"x-frame-options", "DENY"}, {"permissions-policy", "interest-cohort=()"}, {"content-security-policy", "default-src 'self'; style-src 'self' 'sha256-xnifK0WnajdVtYMQwSZBOG+Fgh+666u3gKAy2L2Jaew='; frame-ancestors 'none'; base-uri 'self'; form-action 'self';"}, {"strict-transport-security", "max-age=63072000;"}, {"strict-transport-security", "max-age=31536000; includeSubDomains"}], method: :get, opts: [adapter: [name: MyFinch, pool_timeout: 5000, receive_timeout: 5000]], query: [], status: 404, url: "https://beta.4201337.xyz/.well-known/host-meta"}}

Hello! Was checking Akkoma backend logs for suspicious lines and found this. It doesn't stop, seems stuck in endless loop following redirects. ``` ноя 23 20:51:09 UwU mix[2283665]: 20:51:09.716 [warning] Can't find LRDD template in "https://beta.4201337.xyz/.well-known/host-meta": {:ok, %Tesla.Env{__client__: %Tesla.Client{adapter: nil, fun: nil, post: [], pre: [{Tesla.Middleware.FollowRedirects, :call, [[]]}]}, __module__: Tesla, body: "{\"detail\":\"Not Found\"}", headers: [{"server", "nginx"}, {"date", "Wed, 23 Nov 2022 19:51:24 GMT"}, {"content-type", "application/json"}, {"content-length", "22"}, {"connection", "keep-alive"}, {"x-request-id", "6f8699e7afb83613"}, {"x-powered-by", "microblogpub"}, {"referrer-policy", "no-referrer, strict-origin-when-cross-origin"}, {"x-content-type-options", "nosniff"}, {"x-xss-protection", "1; mode=block"}, {"x-frame-options", "DENY"}, {"permissions-policy", "interest-cohort=()"}, {"content-security-policy", "default-src 'self'; style-src 'self' 'sha256-xnifK0WnajdVtYMQwSZBOG+Fgh+666u3gKAy2L2Jaew='; frame-ancestors 'none'; base-uri 'self'; form-action 'self';"}, {"strict-transport-security", "max-age=63072000;"}, {"strict-transport-security", "max-age=31536000; includeSubDomains"}], method: :get, opts: [adapter: [name: MyFinch, pool_timeout: 5000, receive_timeout: 5000]], query: [], status: 404, url: "https://beta.4201337.xyz/.well-known/host-meta"}} ноя 23 20:51:09 UwU mix[2283665]: 20:51:09.700 [warning] Can't find LRDD template in "https://beta.4201337.xyz/.well-known/host-meta": {:ok, %Tesla.Env{__client__: %Tesla.Client{adapter: nil, fun: nil, post: [], pre: [{Tesla.Middleware.FollowRedirects, :call, [[]]}]}, __module__: Tesla, body: "{\"detail\":\"Not Found\"}", headers: [{"server", "nginx"}, {"date", "Wed, 23 Nov 2022 19:51:24 GMT"}, {"content-type", "application/json"}, {"content-length", "22"}, {"connection", "keep-alive"}, {"x-request-id", "e5776bb270d9eda1"}, {"x-powered-by", "microblogpub"}, {"referrer-policy", "no-referrer, strict-origin-when-cross-origin"}, {"x-content-type-options", "nosniff"}, {"x-xss-protection", "1; mode=block"}, {"x-frame-options", "DENY"}, {"permissions-policy", "interest-cohort=()"}, {"content-security-policy", "default-src 'self'; style-src 'self' 'sha256-xnifK0WnajdVtYMQwSZBOG+Fgh+666u3gKAy2L2Jaew='; frame-ancestors 'none'; base-uri 'self'; form-action 'self';"}, {"strict-transport-security", "max-age=63072000;"}, {"strict-transport-security", "max-age=31536000; includeSubDomains"}], method: :get, opts: [adapter: [name: MyFinch, pool_timeout: 5000, receive_timeout: 5000]], query: [], status: 404, url: "https://beta.4201337.xyz/.well-known/host-meta"}} ноя 23 20:51:09 UwU mix[2283665]: 20:51:09.393 [warning] Can't find LRDD template in "https://beta.4201337.xyz/.well-known/host-meta": {:ok, %Tesla.Env{__client__: %Tesla.Client{adapter: nil, fun: nil, post: [], pre: [{Tesla.Middleware.FollowRedirects, :call, [[]]}]}, __module__: Tesla, body: "{\"detail\":\"Not Found\"}", headers: [{"server", "nginx"}, {"date", "Wed, 23 Nov 2022 19:51:24 GMT"}, {"content-type", "application/json"}, {"content-length", "22"}, {"connection", "keep-alive"}, {"x-request-id", "f49e03109ed41a71"}, {"x-powered-by", "microblogpub"}, {"referrer-policy", "no-referrer, strict-origin-when-cross-origin"}, {"x-content-type-options", "nosniff"}, {"x-xss-protection", "1; mode=block"}, {"x-frame-options", "DENY"}, {"permissions-policy", "interest-cohort=()"}, {"content-security-policy", "default-src 'self'; style-src 'self' 'sha256-xnifK0WnajdVtYMQwSZBOG+Fgh+666u3gKAy2L2Jaew='; frame-ancestors 'none'; base-uri 'self'; form-action 'self';"}, {"strict-transport-security", "max-age=63072000;"}, {"strict-transport-security", "max-age=31536000; includeSubDomains"}], method: :get, opts: [adapter: [name: MyFinch, pool_timeout: 5000, receive_timeout: 5000]], query: [], status: 404, url: "https://beta.4201337.xyz/.well-known/host-meta"}} ноя 23 20:51:09 UwU mix[2283665]: 20:51:09.378 [warning] Can't find LRDD template in "https://beta.4201337.xyz/.well-known/host-meta": {:ok, %Tesla.Env{__client__: %Tesla.Client{adapter: nil, fun: nil, post: [], pre: [{Tesla.Middleware.FollowRedirects, :call, [[]]}]}, __module__: Tesla, body: "{\"detail\":\"Not Found\"}", headers: [{"server", "nginx"}, {"date", "Wed, 23 Nov 2022 19:51:24 GMT"}, {"content-type", "application/json"}, {"content-length", "22"}, {"connection", "keep-alive"}, {"x-request-id", "aa125cf571d201d6"}, {"x-powered-by", "microblogpub"}, {"referrer-policy", "no-referrer, strict-origin-when-cross-origin"}, {"x-content-type-options", "nosniff"}, {"x-xss-protection", "1; mode=block"}, {"x-frame-options", "DENY"}, {"permissions-policy", "interest-cohort=()"}, {"content-security-policy", "default-src 'self'; style-src 'self' 'sha256-xnifK0WnajdVtYMQwSZBOG+Fgh+666u3gKAy2L2Jaew='; frame-ancestors 'none'; base-uri 'self'; form-action 'self';"}, {"strict-transport-security", "max-age=63072000;"}, {"strict-transport-security", "max-age=31536000; includeSubDomains"}], method: :get, opts: [adapter: [name: MyFinch, pool_timeout: 5000, receive_timeout: 5000]], query: [], status: 404, url: "https://beta.4201337.xyz/.well-known/host-meta"}} ноя 23 20:51:09 UwU mix[2283665]: 20:51:09.355 [warning] Can't find LRDD template in "https://beta.4201337.xyz/.well-known/host-meta": {:ok, %Tesla.Env{__client__: %Tesla.Client{adapter: nil, fun: nil, post: [], pre: [{Tesla.Middleware.FollowRedirects, :call, [[]]}]}, __module__: Tesla, body: "{\"detail\":\"Not Found\"}", headers: [{"server", "nginx"}, {"date", "Wed, 23 Nov 2022 19:51:24 GMT"}, {"content-type", "application/json"}, {"content-length", "22"}, {"connection", "keep-alive"}, {"x-request-id", "13985e34ef24d7d0"}, {"x-powered-by", "microblogpub"}, {"referrer-policy", "no-referrer, strict-origin-when-cross-origin"}, {"x-content-type-options", "nosniff"}, {"x-xss-protection", "1; mode=block"}, {"x-frame-options", "DENY"}, {"permissions-policy", "interest-cohort=()"}, {"content-security-policy", "default-src 'self'; style-src 'self' 'sha256-xnifK0WnajdVtYMQwSZBOG+Fgh+666u3gKAy2L2Jaew='; frame-ancestors 'none'; base-uri 'self'; form-action 'self';"}, {"strict-transport-security", "max-age=63072000;"}, {"strict-transport-security", "max-age=31536000; includeSubDomains"}], method: :get, opts: [adapter: [name: MyFinch, pool_timeout: 5000, receive_timeout: 5000]], query: [], status: 404, url: "https://beta.4201337.xyz/.well-known/host-meta"}} ```

floatingghost commented

2022-11-23 20:30:12 +00:00

Owner

wahaaaaay you got it too!

this beta.4201337.xyz instance is buggy and is repeatedly trying to fetch your /internal/fetch - just IP ban it

it did the same to me

wahaaaaay you got it too! this beta.4201337.xyz instance is buggy and is repeatedly trying to fetch your `/internal/fetch` - just IP ban it it did the same to me

floatingghost commented

2022-11-23 20:30:55 +00:00

Owner

(incidentally, check your access logs for an amusing spam report)

a1batross commented

2022-11-23 20:40:03 +00:00

Author

Thx, dropping packets from that IP.

Should this be closed now?

Thx, dropping packets from that IP. Should this be closed now?

floatingghost commented

2022-11-23 20:40:56 +00:00

Owner

let's keep it open just to keep track of issues with microblogpub, until we know why it happened

ref https://todo.sr.ht/~tsileo/microblog.pub/63#event-214913

let's keep it open just to keep track of issues with microblogpub, until we know why it happened ref https://todo.sr.ht/~tsileo/microblog.pub/63#event-214913

tnhh commented

2022-11-25 16:10:00 +00:00

I am seeing this behaviour from a couple of other IP addresses - both also seem to microblogpub. I've banned the addresses for now and will also comment on the other bug report.

floatingghost commented

2022-12-03 22:29:54 +00:00

Owner

seems they fixed it their side, so we can probably close this

hopefully it doesn't happen again

seems they fixed it their side, so we can probably close this hopefully it doesn't happen again

floatingghost closed this issue

2022-12-03 22:29:54 +00:00

a1batross commented

2022-12-07 12:45:03 +00:00

Author

The same error message now happens with Streams, for example with instance at streams.cats-home.net.

It looks like something is really wrong with that host-meta request thing.

The same error message now happens with Streams, for example with instance at streams.cats-home.net. It looks like something is really wrong with that host-meta request thing.

LRDD template log flood #303