|
|
| Author |
Message |
mage
Newbie
Joined: 04 Oct 2006
Posts: 71
|
 Posted: Jun 16, 2007 3:26pm Post subject: SPAM AND DDoS THREAT!! Beware! |
 |
|
I've sent the logs to Scotland Yard and the administrator of the US side of my network has sent the logs to the FBI in the hope that these kind of things doesn't happen again. But still I'd like to warn you all of a network administrator of chataolic.
He joined one important room of the network I'm admin on and spammed freely as if it was his network.
| 08:51:49:pm | Enters: Robert (Robert@88921F2.16FB1356.49070432.IP) (#Chat)
| 08:52:00:pm | (Mode) Smith sets mode » +v « Robert
| 09:12:50:pm | [+Robert] wow
| 09:12:52:pm | [+Robert] dead chattttttttt
| 09:13:23:pm | [+Robert] irc.chataholic.net is just like you
| 09:13:24:pm | [@GrImRePo] oh faking Nik the bitch is back
| 09:13:25:pm | [+Robert] with all the bots
| 09:13:36:pm | [+Robert] who runs
| 09:13:38:pm | [+Robert] NikBot
| 09:13:39:pm | [+Robert] anyways
| 09:14:21:pm | [mage] Robert
| 09:14:25:pm | [mage] don't do that again ok
After a while of being in silence he acts arrogant towards the administrators and channel ops:
| 09:52:16:pm | [%Pum`Away] whos spammin
| 09:54:26:pm | [mage] Robert was
| 09:54:55:pm | [%Pum`Away] -.-
| 09:54:58:pm | [%Pum`Away] speak to him then
| 09:55:01:pm | [%Pum`Away] lmfao
| 09:55:04:pm | [mage] I have warned him
| 09:55:10:pm | [mage] take it easy
| 09:55:32:pm | [%Pum`Away] sorry
| 09:55:37:pm | [mage] dont be lol
| 09:55:43:pm | [%Pum`Away] im just a abit agitated atm
| 09:55:44:pm | [mage] u got pissed rightfully
| 09:55:45:pm | [mage] 
| 09:55:51:pm | [mage] so did I but oh well
| 09:55:55:pm | [%Pum`Away] 
| 09:56:52:pm | [%Pum`Away] !dehalfop
| 09:56:54:pm | (Mode) X sets mode » -h « Pum`Away
| 09:56:56:pm | ¤ Krystin[a] remembers how funny it was when mage was explaining how his name was pronounced
| 10:02:08:pm | [Robert] mage, don't complain
| 10:02:19:pm | [mage] Robert excuse me?
| 10:02:34:pm | [efectodoppler] que ta pasando?
| 10:02:39:pm | [Robert] was it really that hard to comprehend, mage?
| 10:02:45:pm | [mage] after your lame attempt to spam don't be expecting any respect from my side
| 10:02:47:pm | [mage] my advice though
| 10:02:50:pm | [mage] shut up while you can
| 10:04:25:pm | [Robert] wow
| 10:04:26:pm | [Robert] you have a shitty bopm
| 10:04:27:pm | [mage] jumping bans robbie?
| 10:04:28:pm | [+Pum`Away] LOL
| 10:04:33:pm | [Robert] lets try my 5,000 socks5
| 10:04:37:pm | Quit: Robert (Robert@502DC538.4133E603.6A1AEBB7.IP) - (User has been banned from FusionChat (bye bye))
| 10:04:55:pm | [+Pum`Away] mage reason: Violation Of Fusionchat Rules!
| 10:05:01:pm | [+Pum`Away] be profesional
| 10:05:04:pm | Enters: Robert (Robert@A4083CBF.9C04076D.96BABF96.IP) (#Chat)
| 10:05:04:pm | [+Pum`Away]  }
| 10:05:09:pm | Quit: Robert (Robert@A4083CBF.9C04076D.96BABF96.IP) - (User has been banned from FusionChat (bye bye))
| 10:05:18:pm | (Mode) mage sets mode » +b « *!Robert@*
What follows to this is him connecting using random IP addresses to the network and a lame attempt to flood me via NOTICE.
Also in the notice (which was blocked thanks to the spamfilter feature)
he threatens us of DDoS'ing us which is a felony in most of countries in this world.
| 10:07:03:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:07:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:07:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:07:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:07:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:07:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:07:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:08:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:08:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:19:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:19:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:19:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:19:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:19:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:28:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:28:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
| 10:07:28:pm | [Server@earthquake.de.fusionchat.org] [Spamfilter] Robert!Robert@81.190.104.221 matches filter '*chataholic.net*': [NOTICE mage: 'botnet by the chataholic network coming soon'] [Spam/Advertising]
beware admins and send the logs to the local authorities without doubting it. It's time these kind of people face the bars.
|
|
| Back to top |
|
 |
FBI
Guru
Joined: 19 Aug 2005
Posts: 1494
Location: Federation Of Bored IRC'ers
|
|
| Back to top |
|
|
mage
Newbie
Joined: 04 Oct 2006
Posts: 71
|
| Posted: Jun 16, 2007 7:32pm Post subject: |
|
|
| Hey FBI, good to see you around. I'll be looking at your links |
|
| Back to top |
|
|
mage
Newbie
Joined: 04 Oct 2006
Posts: 71
|
| Posted: Jun 16, 2007 10:50pm Post subject: |
|
|
| I had a talk with Josh who is the admin of the network and apparently they don't know who this robert person is who is making them look bad. We have so far sorted the issue. We will see how this goes. And remember kids I see it all |
|
| Back to top |
|
|
greg27
Lurker
Joined: 07 Oct 2006
Posts: 148
Location: Australia
|
| Posted: Jun 17, 2007 4:12am Post subject: |
|
|
i know of both josh and robert. take a look at the chataholic staff page at http://chataholic.org/staff - robert is a netadmin there. i can guarantee that josh knows robert, and also knows of his spamming.
robert scans for his own open proxies and manages to get some clones around bopms, but you'll notice that all of his clones share a common ident. one of his tricks is to use the same ident as an oper, so the oper glines the ident and ends up glining themselves as well as the clones, so it's a good idea to add an except line for yourself (i already had one when he pulled this trick on me )
just add some spamfilters for 'chataholic' (he may also put spaces between the letters) and he will likely move on to a different network. |
|
| Back to top |
|
|
pacey
none
Joined: 12 Jun 2007
Posts: 3
|
| Posted: Jun 17, 2007 5:47am Post subject: |
|
|
| like greg27 above aka xander said. robert and josh were linked a couple of months back, they then seperated so josh had atalantica and robert had chataholic. now atalantica and chataholic linked again, robert and josh have being friends for months, on different networks, both are owners of their linked servers. both are owners of the network they're on, so trust me robert and josh know each other. they're the owners. |
|
| Back to top |
|
|
Ben``
none
Joined: 17 Jun 2007
Posts: 7
|
| Posted: Jun 17, 2007 6:00am Post subject: |
|
|
Ah yes, robert & Josh the two numb skulls of the IRC world. They are in doubt friends, Josh is probably the smarter one of the two. They have been friends for very many months. Robert has indeed DoS'ed me and 2 others. He has also Bot-netted our Server many a'time. Something should be done about Robert, he is a complete pain.
Josh is infact lying when he says about not knowing Robert, as Greg has said add a spamfilter for Chataholic, and even Atlantica. I belive the two servers are still linked. |
|
| Back to top |
|
|
Mulle142
none
Joined: 17 Jun 2007
Posts: 1
|
| Posted: Jun 17, 2007 6:36am Post subject: |
|
|
Yes. Robert and Josh.
Don't believe either of them when they say "we don't know each other", because they do, very much indeed.
I am one of those lucky, lucky former Chataholic users (note sarcasm, anyone using chataholic isn't lucky) who was banned because of a huge disagreement concerning botnetting and spamming.
I have also personally been DDoS'ed by Robert. I have oper'ed with Josh on irc.ewfs.net before it died the second time around, where Josh gave Robert my IP.
Something should indeed have been done about Robert and Chataholic a long time ago, but I am in lack of decent logs. |
|
| Back to top |
|
|
Ben``
none
Joined: 17 Jun 2007
Posts: 7
|
| Posted: Jun 17, 2007 7:53am Post subject: |
|
|
As what Mulle said indeed Chataholic should be shut down, Robbie should be locked up. I also have been DoS'ed by Robbie as josh gave robbie my IP, i think something should be done about "Josh/Duquesne" as he is partiatly to blame for DoS attacks.
I unfortunatley Formated so i don't have clear logs of robbie doing so. |
|
| Back to top |
|
|
pacey
none
Joined: 12 Jun 2007
Posts: 3
|
| Posted: Jun 18, 2007 9:37am Post subject: |
|
|
yeah i also got ddosed by robert, i remember my admin ben banned robert for harrassing him and attacking the server, robert then ddosed ben, robert then decided to ddos me claiming i should have stopped ben banning him, even though the ban was legit.
robert is someone who says he takes irc as fun, but then he attacks irc servers and ddoses people because they banned him for fair and legitimate reasons.
he preys on the people who don't take irc as their life because he does. |
|
| Back to top |
|
|
Ben``
none
Joined: 17 Jun 2007
Posts: 7
|
| Posted: Jun 18, 2007 9:39am Post subject: |
|
|
| Yes that was rather annoying that time, had a nice little Online ICT Test i had too do, which was delayed due to my DdoS attakcs.. |
|
| Back to top |
|
|
chataholic
none
Joined: 27 Feb 2007
Posts: 4
|
| Posted: Jun 18, 2007 3:52pm Post subject: |
|
|
My intentions here are not to flame, harass, or abuse anyone but more so to set the record straight and stop the lies that are being said by Ex Staff members who were fired, or people who were glined for continued harassment.
Starting With Mage:
| Quote: | | I've sent the logs to Scotland Yard and the administrator of the US side of my network has sent the logs to the FBI in the hope that these kind of things doesn't happen again. But still I'd like to warn you all of a network administrator of chataolic. |
For this part I'd like to inform you that sending logs to Scotland Yard, or the FBI is quite pointless as to they wont do anything about it unless you have actual evidence ( IRC logs aren't considered evidence ) and have damage more than 5,000 dollars USD. You might have better luck contacting the users ISP but then again that probably wont help at all either.
| Quote: | | He joined one important room of the network I'm admin on and spammed freely as if it was his network. |
As your logs show.. it seems like he joined -a- room, and not 'rooms' you can hardly call that spamming.
| Quote: | | After a while of being in silence he acts arrogant towards the administrators and channel ops: |
Yes the person who is impersonating me does seem rather cocky, but when they are trying to piss off other networks in my name they usually are.
| Quote: | What follows to this is him connecting using random IP addresses to the network and a lame attempt to flood me via NOTICE.
Also in the notice (which was blocked thanks to the spamfilter feature)
he threatens us of DDoS'ing us which is a felony in most of countries in this world. |
Could be a few things, proxies or tor... Your best bet is to use a proxy scanning utility like BOPM.
http://wiki.blitzed.org/BOPM
If the person was really trying to flood his network I highly doubt he'd spam you via notice.. Obviously the person was attacking the administrator on duty to annoy you with my network. As you may be right about DDoS, he most likely would use clonesxs which is a proxy flooding tool that runs in mIRC. This will doubtfully get him in any trouble. What you need is better preventive action because kids like this are everywhere and aren't just limited to this imposter.
Moving on to FBI
I'm glad to see someone here is at least addressing the proper issues and helping him handle the problems at hand. Those are all excellent links to help people who are new to BOPM to get on their feet at ease.
| Quote: | | I had a talk with Josh who is the admin of the network and apparently they don't know who this robert person is who is making them look bad. We have so far sorted the issue. We will see how this goes. And remember kids I see it all |
Mage, when you spoke to Josh he informed you he doesn't know who that Robert person is who is threatening/spamming you under our staffs name. You must have misunderstood what he told you.
And I think I'm going to stop here because the rest are just immature and childish attacks to try and get a rise out of us. Search IRC forums for abuse is here to help users stop abuse, not flame people and act like idiots, so please just grow up. |
|
| Back to top |
|
|
Ben``
none
Joined: 17 Jun 2007
Posts: 7
|
| Posted: Jun 19, 2007 2:02pm Post subject: |
|
|
ACtually i'm gonna agree with chataholic here. We have been comming under attacks, by someone using "Robert" & "spy" which we all presumed were, robbie and spy, but actually we've looked in to it, and things are turning to be a bit different.
We got Botnetted by someone using the name "WhiteWhInE" who seems to be causing alot of un-nessicary caffufle recently. I'm under the though that, he is trying to cause stuff between the servers.
I'm actually gonna apologise towards Robbie & Possibly Josh. I personally shouldn't have jumped to conclusions, seeing as i have known you for a while.
I know they probably won't accept this. But it's worth it anyway |
|
| Back to top |
|
|
pacey
none
Joined: 12 Jun 2007
Posts: 3
|
| Posted: Jun 19, 2007 2:10pm Post subject: |
|
|
ive spoken to chataholic and they havent attacked anyone.
someone use dproxy to insult us last night using weird nicks then they used the nick spy.
me and jake spoke to robert and spy and they told us it wasnt them using proxies and we believe them as
1- person didnt talk like them.
2- they'd admit it if it was them.
so i myself am cool with robert, spy and chataholic, they havent done anything
robert and spy think someones impersonating them and attacking them people as them, i believe them, it wasnt robert or spy. |
|
| Back to top |
|
|
FBI
Guru
Joined: 19 Aug 2005
Posts: 1494
Location: Federation Of Bored IRC'ers
|
| Posted: Jun 19, 2007 3:05pm Post subject: |
|
|
I sense this thread is gonna be locked...
Now go play in your sandbox kids
Brought to you by SearchIRC |
|
| Back to top |
|
|
|
Register
Log in
