Some annoying bots

Ib3N · Guest

Braindigitalis has developed a module called Defender, that take care of these and more.

http://ircdefender.sf.net/

..or check out irc.chatspike.net:#defender to ask the developers

Ib3N · Lurker Joined: 10 Mar 2004 Posts: 157 Location: ChatSpike

supports both unreal and bahamut now.
https://sourceforge.net/docman/display_doc.php?docid=21680&group_id=102825

chun-lee · Guest

U · Eleet Joined: 18 Jun 2003 Posts: 521 Location: IRC

Only took 8 pages for someone to beg. Thats gotta be a new record. Smile

LIQUID_NiTrO · none Joined: 06 Apr 2004 Posts: 34

Can someone please post a copy of the PM they're sending so I can set up a bot to disable it?

Mew · Guest

Well, I'm getting them on my network, EliteIRC. They don't reg nicks, But they do spam about WebCams. Anyone getting the same exact prob as me? They do have the odd nicks.
-Mew

uchat · Idler Joined: 17 Mar 2004 Posts: 335

as mentioned earlier in this thread. Use IRC Defender.

http://ircdefender.sf.net

Mew · Guest

Uhm, I checked the /ns list and 19 of them have regged nicks. Nitro:
Use something like
on *:open:?:*watch me on my webcam*:{ gline $nick Spammer | close -m $nick }
on *:NOTICE:*watch me on my webcam*:?:{ gline $nick Spammer }
I dont have an EXACT Copy of the msg, but I've gotten it so yeah.
Make sure you're not Op'd and don't have any nicks with "spam" in it, They'll avoid it. Make it a random nick like "jakbob" or something. Razz

~Mew

Dr-Voodo · Eleet Joined: 07 Nov 2003 Posts: 535 Location: IRC

When I first started my network I didn't get any bots, but in like a month after they was coming, but now I am lucky that they have stopped, but anyway my network is only listed on SearchIRC and I heard that most of the attackers are finding the servers from IFIRC. Anyway my suggestion is that you should try to use a proxy scanner because that will block most of them.

Mary · SearchIRC Admin Joined: 03 May 2003 Posts: 692

Dr-Voodo, IFIRC has closed, AFAIK.

I don't think merely being listed on SearchIRC is enough to attract bots, as we go out of our way to make it difficult for scanners to get connection information. If being listed here did attract bots, I suspect we'd be getting a LOT of complaints, and that just isn't the case at all. :)

A Google Search is often informative. Look through the Google listings to see if your network is mentioned in association with XDCC, warez, or otherwise might raise the interest of those looking to scan for files. Its really amazing how many admins will swear they aren't listed anywhere, then I see a page of results showing their round robin or connect servers on Google:

http://www.google.com/search?sourceid=navclient&ie=UTF-8&oe=UTF-8&q=mystiquenet+irc

No matter where they come from, I do agree that the best defense is the use of services that will detect and eliminate unwanted connections.

Ashen · Idler Joined: 05 Jan 2004 Posts: 285

If I temember rightly, there is a module for anope or another services package out there that prevents anyone from registering with nickserv or chanserv in the first minitue after they have signed on.

This is useful forr preventing clonebot attacks, you might want to look into it.

Also, some ircds have the no-invite mode, which prevents the user from being invited to channels.

-Ashen

Howard · none Joined: 16 Nov 2003 Posts: 34

The 'end of list' numeric is working well for me, you see them come in and drop out near instantly.

And thanks to the crew here for putting a touch of delay into their indexers to come around it, I had the send going out as early as I could see it being effective, but it was still glitching the indexers.

Y'all done good here.

Fyle · none Joined: 17 Jan 2004 Posts: 1

tiko is ignorant