Medium Network Looking for Botnet Killers

trmade98- · Guest

Ok here is a very unique situation. We are a smaller network of 3000 users. Last night someone thought that a botnet of 3500 users would hide just nice on our servers. As you can imaine, 3500 users doesnt go undetected when its more then you currently have online. So here is what we are looking for.

1: Someone to kill it.

Mind you I would like to see it KILLED. I hate botnets. They are the scourge of the IRC world. I removed the owner of the botnet from his bots. Now I`m asking for someone to !die this botnet.

If you think you have the skills, join irc.orbitalfire.net and pop in channel #atolondra0

I dont think normally this is a good idea, but i`m putting faith that most people dont think botnets are cool and there are some good people who are willing to help fight against them. I`m being honest and open hoping to get the same back.

I know there are many things we could do to get rid of it, but I dont want to just let it sit and wait to be used against someone. I want to find people who can kill it and set the PC`s free.

If this sounds like you? Then consider this a challenege to kill a useless botnet. If you are a script kiddie looking for a new botnet, FORGET IT. We dont want to see this around, grow up or join undernet.

Thanks in advance,

trmade98
irc.orbitalfire.net
Network Administrator

trmade98 · none Joined: 11 Aug 2003 Posts: 49

We had many helpful offers of help.

The botnet had been "!die" `d. Its shutting down and dropping offline.

Thanks for all the help.

This rids the world of a 4,000 memeber USELESS botnet.

trmade98
irc.orbitalfire.net
Network Admin

Uncle Sam · Guest

http://frwebgate.access.gpo.gov/cgi-bin/getdoc.cgi?dbname=browse_usc&docid=Cite:+18USC1030

trmade98 · none Joined: 11 Aug 2003 Posts: 49

Oh wait, Botnets are illegal...

Wow, thanks for the update...

Thats why we wanted those PC`s set free and the botnet destroyed.

Thanks for your wicked smart and helpful reply.

TheEvil · none Joined: 10 Jul 2003 Posts: 14

Thanks Uncle Sam for pointing out something that was already known to us. Your mastery of the Google search is impressive. We were trying to GET RID of computers that were ALREADY compromised.

I think maybe there should be a USC for wasting bandwidth posting superfluous comments in a help forum. :roll:

The tidal wave looking peak in the image below is the botnet.

Jason · Posted: Aug 25, 2003 8:28am Post subject:

On the bright side, you ended up with more users after the botnet than before. Maybe invite them over a few more times :)

trmade98 · none Joined: 11 Aug 2003 Posts: 49

I will have to say, I would prefer that not to happen.

We can deal with gaining users more naturally.

I`m just glad its gone.

I would suggest that other networks look for a channel with that same name. Seems this one makes its way around.

I am hoping its been killed, but might not hurt to have Admins check their own networks.

Only way to rid IRC of botnets is to deny them a home.

Thanks again,

trmade98
Network Administrator
irc.orbitalfire.net

Uncle Sam · Guest

Uncle Sam · Guest

Verbal attacks deleted. Please see http://searchirc.com/forum-rules.php for forum rules.

trmade98 · none Joined: 11 Aug 2003 Posts: 49

Since I had nothing to do with it. It was on our servers and it was disbanded. The Network and its admins did nothing wrong since we had no part in any of it, building or destroying.

I do pose the question :

What is worse?

Breaking the law to make a botnet to ddos servers and people?

or

Breaking the law to destroy a botnet?

Both are illegal, the question is what would you prefer to see?

As far as name calling, grow up. We didnt ask for opinions on the subject, we asked for solutions.

We have our solution.

trmade98
irc.orbitalfire.net
Network Administrator

gtpnos · Newbie Joined: 05 Aug 2003 Posts: 67 Location: USA

heh, none to worry, the government has no place stepping in unless whatever is happening is creating such a loss of revenue for someone which I believe is around 5k or so, which has been brought up from ddos attack reports. would be nice for the government to step in and lower some prices, im payin nearly 1/4 of my earnings for internet, the last thing i'd wanna hear is how the government is gonna use yet another thing against me :twisted:

U · Eleet Joined: 18 Jun 2003 Posts: 521 Location: IRC

Botnet killing and/or rapid removal is something you may want to talk to your services coder about. I know anope recently added some kind of function to allow for killing of non-registered clients, or setting of a 'defcon' to temporarily stop connections if they are massive, or mass killing of a channel if they all sit in one.

If possible with anope, I'm sure its possible with any services with some tweaking......

trmade98 · none Joined: 11 Aug 2003 Posts: 49

We have Anope, we could do that. The issue with that is, even if glined or akilled they will CONTINUE to try to connect. When you have 4,000 bots trying to connect, its actually better on bandwidth to let them connect then to block them.

Thanks for the suggestion, we could have glined and akilled them. We just didnt think it would help much. They would continue to try to connect.

:wink:

trmade98
irc.orbitalfire.net
Network Administrator

Devil · none Joined: 12 Aug 2003 Posts: 35

I know where there is a bot net

trmade98 · none Joined: 11 Aug 2003 Posts: 49

If you look at the top 100 channels you will see botnets on SALTEK and UNDERNET and EFNET and RIZON and many many more.

Botnets are nothing but trouble.

trmade98