How we dealt with a script kiddie

fattony · none Joined: 13 May 2006 Posts: 12

I've been a part of an IRC network for around 5 years and from time to time we get kids coming on and trying to prove something so they flood us with bots and such. One in particular was arrogant enough to brag about it before hand, not only that but was dumb enough to advertise the other IRC networks he used and his status on them.

He flooded several times, we attempted to just ban the bots but he kept coming with them over and over, they were clearly zombies on infected PCs. Finally we got fed up with it and we tried to contact his ISP (a major American one) but they basically told us they can't do anything at all, so then we decided to fix it on a more personal level.

I went on to one of these networks he had talked about and I had logged and I hung out for a while and figured out it was a network basically full of kiddies, in fact it was even announced on these forums, but will remain nameless. I spoke to one of the ircops there and he told me that they also hated this kid, who we will call kiddie101. He even had delinked kiddie101's server from the network. He also mentioned that out of anger towards this ircop that kiddie101 had registered several domains related to his IRC network, and he told me what they were.

I tried to check this whois information for the domains but it was all fake and the registrar refused to do anything about it.

Then convinced the ircop to give me a copy of the nickname database, which he never should have done and luckily (for me, but nobody else) he didn't use password encryption in the database (it was atheme services). So I did a little research and found that the password he used on this network also worked on all the other networks he used, then I passed all that information I gathered in that area to my girlfriend.

She in turn found that he was ircop (somehow) on an even larger network (unreal network, but not that large) and we made a massive list of all the things he had, such as email addresses, accounts at various blogging sites, etc. She found out the password got into his email, which he only used for registering things, no personal information. That was used to find out what his passwords to his domains were. She logged in and found out his real phone number, address, father's name, etc.

So, we called up his parents and told them what he had done and what all we had gone through to find out who he really was so we could put a stop to it. Nobody has seen him on IRC since, and I heard from a few of his IRC buddies that I had met that he is banned from the computer for at least until his 17th birthday, he was 16 at the time.

Of course, all this pushes the moral and legal boundaries, but it became such a problem and the people who should have done something refused to do anything, so we had to resort to vigilantism.

So, I'm curious if anyone else has done something similar or even beyond that such as going to the guys house (somebody suggest we do that). Or if you refuse to go that far, and if you refuse to go that far what would you have done instead?

Please no flaims or anything like that, the purpose of this is to get people thinking about how far they'd go to keep someone from flooding their network and harassing users.

flux · Posted: Jul 11, 2006 11:46am Post subject:

nice way to go about things, lol, good one.

Ty · none Joined: 15 Nov 2005 Posts: 47

You need a hobby.

fattony · none Joined: 13 May 2006 Posts: 12

chaz · Idler Joined: 15 Jun 2005 Posts: 282 Location: IRC

tony, I was fairly intrigued by your approach to your script kiddie, I disagreed with ty, but to be honest, your reply was just as bad. I have far more posts than him, but I feel my contribution (if you read my posts) warrants something that others enjoy as a hobby.

fattony · none Joined: 13 May 2006 Posts: 12

PingBad · Guru Joined: 05 Feb 2005 Posts: 2031 Location: New Zealand

*scribbles this down*

Very nice way of purging the Internet of immature kiddies -- one kid @ a time. Very Happy

ORenyRen · none Joined: 28 Jun 2004 Posts: 38

What you did was underhanded and sneaky, but I definatly think that you taught the kid a lesson, so it's ok.

Mary · SearchIRC Admin Joined: 03 May 2003 Posts: 692

fattony, since you are new, I'm going to GENTLY turn your head to the left so you can see "Forum Rules". Click on that link and read it all, but especially this part:

Attack ideas, not people:

This is okay: "Your idea won't work."
This is not okay: "You are an idiot."

A word to the wise is sufficient. :)

ARcanUSNUMquam · none Joined: 25 Mar 2006 Posts: 42

Too bad what you did is probably illegal in the US.

FBI · Posted: Jul 11, 2006 8:36pm Post subject:

Who cares its not like he caused billions of dollars in damage all he did was scared the living hell out of a wanna be bad script kiddie....

Is that illegal?

Its kinda a shame that he didn't encrypt his passwords in the first place Razz

katsklaw · Guru Joined: 28 Jun 2004 Posts: 1095

Ty · none Joined: 15 Nov 2005 Posts: 47

fattony · none Joined: 13 May 2006 Posts: 12

Ty · none Joined: 15 Nov 2005 Posts: 47