Heads up.. spam bots

corndawg · none Joined: 14 Mar 2007 Posts: 16

Hi folks.
I know I'm not alone on this issue so any comments etc would be appreciated.

How many of you has someone from blitzx.net joined your network with a pile of bots, and spamming for his network? It's happend twice to me now. Once on dalnet (the spam/flood bots kept comming for weeks not to mention the threats) and just recently my network.

Not too sure what his problem is, but it seems hes been using searchirc to locate new targets and refuses to take a hint.. NO.

If ive peeked your intrest in this issue, pls feel free to let me know and I'll send logs

NBishop · none Joined: 11 Jun 2005 Posts: 6 Location: Johnstown, PA

Yeah, had the same issue, though I AKilled him right after he started trying to recruit people.

Then the silly prick though he could proxy in.

Just a heads up he's pretty lame, at least in his 'attempt' at my network, my proxyBot with DNSBL's caught his proxy and all his bots before they really got on, my suggestion would be to have the ircbl.ahbl.org DNSBL in like BOPM or any other scanner you might have, its what pretty much pwn'd all his bots.

Anyone who links to him also is likely going to either get taken over or just get sucked into a lot of legality issue someday too if anyone ever decides to turn in his US Servers for using spy modules which he seems to be stupid enough to think can legally use spy modules as long as a non-american 'Installed/Compiled' them in, I thought that was kinda funny : P

FBI · Posted: Apr 30, 2007 8:10pm Post subject:

It seems pretty interesting....

Send me the logs via pm please...

going around searchirc looking for targets isn't the problem

The problem is spambots using mirc.ini Razz

Raiden · none Joined: 22 Feb 2007 Posts: 32

Netadmin ie John from blitz.net joined our network on sunday offering we should link i refused nicely then he decided to stick around and started pming his network addie to our users and we got pasted this to us...
<Delicate^Flower> [17:57] <John> aye come to /server irc.blitzx.net
<PAHSCB> [17:57] *John* aye come to /server irc.blitzx.net
then he was glined. This sort of behaviour from netadmins to gain more users is unexceptable and should not be tolerated.

corndawg · none Joined: 14 Mar 2007 Posts: 16

K, easy way of doing this, ill post the logs for you folks, give me till tonight and ill reply here with the url.

And I fully agree with the last poster, behavior like this from netadmins or even staff is bs and shouldnt be tolerated. Its just surprising that he hasnt takin the time to think how it makes his network look.

As net admins and server admins, we spend sometimes large amounts of money, time, and resourses to see our networks through, why twits like this have to come in and ruin it for our networks is beyond me.

Xaphan · Newbie Joined: 12 Feb 2007 Posts: 60

Meanwhile on irc.sh3lls.net, #sh3lls I was speaking to a staff member, while he was in the channel.

[13:54 19] *** Now talking in #sh3lls
[13:54 19] *** ········································
[13:54 19] *** [#sh3lls] topic- '-= www.sh3lls.net =- | For support https://support.sh3lls.net/ | Do NOT give Info to anyone but @ and & | Congrats Sparsh'
[13:54 19] *** [#sh3lls] topic- set by Anon (Sat 21st Apr 2007 11:34p)
[13:54 19] *** [#sh3lls] users- 34 total user(s)
[13:54 19] *** [#sh3lls] users- 1 mode~ 2.94% - 2 mode& 5.88% - 5 op(s) 14.71% - 15 voice(s) 44.12% - 14 other(s) 41.18%
[13:54 19] *** ········································
[13:54 25] (@Maajid): F28 Please wait for few
[13:54 33] (@Maajid): you will get your information in few minutes
[13:54 46] (F28): kk thank you
[13:55 02] (Xaphan): Your customer 'John' is spamming a network I'm on. His IRCd IP is 66.252.6.68.
[13:55 17] (@Maajid): Xaphan Please wait
[13:55 40] (Xaphan): http://searchirc.com/boards/irc-5771.html -- theres what my friend just posted about him recently
[13:56 16] (^Weirdo^): me?
[13:56 26] (@Maajid): ^Weirdo^ not you
[13:58 22] (@Maajid): ^Weirdo^ that is the complain of yours
[13:58 27] (@Maajid): that is your account
[13:59 02] (^Weirdo^): yeah except i'v never spammed a network with mine
[13:59 08] (^Weirdo^): unless a user of mine did
[13:59 30] (^Weirdo^): the only thing i ever done was on dalnet to a channel had nothing to do with blitzx network
[14:00 29] (Xaphan): Maajid: Cool. I will foward the people who wish to complain about this user to here, and onto you when I receive a complaint.
[14:00 40] (@Maajid): Xaphan Please sent email at abuse@sh3lls.net with that link and proper proof
[14:00 42] (^Weirdo^): wait what user?

Go talk to Maajid about this user, and email them with the logs. They welcome your input into their customers wrong-doings.

dacay · none Joined: 09 Jun 2004 Posts: 35

im one of the netadmins at blitzx.net if any of you have a problem vist irc.blitzx.net channel #Help

corndawg · none Joined: 14 Mar 2007 Posts: 16

Decay, your one of the people behind all this. want proof?

* ^Weirdo^ (dacay@is.the.leetest.dalnet.abus3r.us) has joined #partychat

We oviously struck a nerve becuase all of a sudden our network is being bombarded with flood blots.

dacay · none Joined: 09 Jun 2004 Posts: 35

Well its not me i called a truce along time ago with you you have problems with alot of people from #FlirtZ on dalnet and there botnets thats not my problem ur users came to irc.blitzx.net if u really want ill remove my server from sh3lls and put it under my frineds dedi its not a big deal but ur users like wickedgirl notj all go to blitzx i havent invited them

corndawg · none Joined: 14 Mar 2007 Posts: 16

Hey folks..
The logs that i spoke of can be found here..

http://reality-irc.com/blitzx/privatelog.txt
http://reality-irc.com/blitzx/partychat.txt
http://reality-irc.com/blitzx/log.txt

and no sooner then the trouble maker found out about this thread, this happens on my network..
http://reality-irc.com/blitzx/updateserverlog.txt

Take your time reading folks, the proof is right there about that network, its admin, and its policies.

corndawg · none Joined: 14 Mar 2007 Posts: 16

Decay, where my users chat isnt the problem, nor do i care where they cha, I cant control thatt, the problem is your abuse. I'm sure that I'm not the only one that youve managed to piss off with your tactics.

dacay · none Joined: 09 Jun 2004 Posts: 35

well first off when i offered about the dedi thats off a different provider not hosted by sh3lls thats hosted by a buddy ninjaa

corndawg · none Joined: 14 Mar 2007 Posts: 16

Decay, make your mind up already, your making me dizzy.. first you claim..

"Well its not me i called a truce along time ago with you you have problems with alot of people from #FlirtZ on dalnet and there botnets thats not my problem ur users came to irc.blitzx.net if u really want ill remove my server from sh3lls and put it under my frineds dedi its not a big deal but ur users like wickedgirl notj all go to blitzx i havent invited them"

NOW you claim..

"well first off when i offered about the dedi thats off a different provider not hosted by sh3lls thats hosted by a buddy ninjaa"

By your second responce, you just admitted that you did infact send the bots in when you joined my network, and you also admitted to spamming for your server on MY network.. oh and lets not forget about the attacks on Dalnet.

Why do you feel the need to act this way decay? are you trying to ruin everyone elses hard work? trying to flush other peoples hard earned money down the drain? Seriously, whats the deal?

dacay · none Joined: 09 Jun 2004 Posts: 35

no i never said i sent bots there i said people form #Flirtz did i called a truce along time ago when i use to flood #partychar on dalnet and no i never spamme di asked if anyone heerd of th network if i knew it was thids big of a deal i wouldnt of asked

corndawg · none Joined: 14 Mar 2007 Posts: 16

Spamming here already I see. Boy, you just dont give up.

Under "IRC abuse" then "Clone attacks" page 3.

dacay

Joined: 09 Jun 2004
Posts: 8

PostPosted: Apr 30, 2007 11:22pm Post subject: need help Reply with quote
aye im good with that kind of stuff need my help you can find me at irc.blitzx.net