Roadrunner ban on Undernet

U · Eleet Joined: 18 Jun 2003 Posts: 521 Location: IRC

Must be massive abuse, or something.

I recall dalnet doing the same thing to AOL because they were unresponsive to abuse complaints, but it only lasted about a week Smile

sprinkler · SearchIRC Staff Joined: 20 Jun 2003 Posts: 1

Hi,

I'm a server admin on undernet, and I recognise the problem you stated.
The servers that have/had these klines in place really had good reasons to place them because not too long ago there were massive dronenets connecting to undernet where 99% of the infected connections originated from roadrunner.
These bot would connect suddenly to a certain server in such large numbers that it was a ddos attack. servers split because of it, and it cost the servers a LOT of extra bandwidth.

I've removed the ban on roadrunner clients a while ago, as I found out who ran them, and kindly asked him to stop Smile

but this only goes for my server Smile

I hope this clears some things up for you.

Cheers,

sprinkler

moonman · Lurker Joined: 15 Jul 2003 Posts: 212

i had forgotten i ever posted this. i figured there was a good reason for doing it. i was just wondering what that reason was. i rarely use undernet anyway.

U · Eleet Joined: 18 Jun 2003 Posts: 521 Location: IRC

Asked them to stop and they did? Not bad...must be some semi-kind drone runners out there. Most of them wouldn't have, they just would have kept doing it.

Or were visions of handcuffs and the grey bar motel used as 'influence'?

VorteX · none Joined: 14 Oct 2003 Posts: 11

Heh, yer, kind indeed ;o
Either that or some other form of persuasion... =P

Guest · Posted: Feb 09, 2004 11:56pm Post subject:

Whats the undernet?

Cobi · Lurker Joined: 30 Dec 2003 Posts: 121 Location: IRC

Jay · none Joined: 14 Jan 2004 Posts: 43

well you might be surprised how scared script kiddies are.
I've encountered some on my network , talked nicly to them, played along, then telling them who you are. All of a sudden they are nice , friendly and cooperatieve Smile

that's the way I like it. We all experimentate a bit ... it doesn't mean you are a bad person.

Grtz

U · Eleet Joined: 18 Jun 2003 Posts: 521 Location: IRC

Most 'botmasters' that do load bots are friendly about it simply because not being so may mean losing the bots. Some networks are getting a bit more savvy when it comes to bot eradication, and if they stick around where they aren't wanted, it may mean them looking into it well enough that they may figure out what the bots are, and take action against them.

I've watched my staff knock out 200 bot botnets simply by sitting in the channel with a nick similar to one of the bots, and waiting for the messages from the botmaster to come in with the botnet password. Some of them have an uninstall command that just requires the password, once its obtained, its just a matter of sending the correct command to the bot-200 bots uninstalled. Sure, those computers will get reinfected eventually, but it probably took the botmaster a while to find 200 suckers, and now he has to start over again.

Alot of ircd shell providers are now actively checking to make sure servers purchased aren't just being used to house these bots, so kudos to them too-most networks won't let them park on them, so with less places to hide them, the less bots there are out there that can be used to cause problems. Networks that knowingly allow them to park are the only problem now-I know most networks here wouldn't allow it, but some do just to get the usercount increase....get users the honest way, don't house people running bots that can be used to attack others!