autoupdate botnet (all files)

Alchera · Post by **Alchera** » Sun Sep 26, 2004 7:30 pm

awyeah does that mean myself and every other channel founder will have to add yet more "sticky" bans to stop those annoying cycling things? I have managed to block every single one of them on DALnet so far.

PS: Anyone getting hold of such a script will use it for the exact opposite intention. It just makes spamming channels so much easier.

awyeah · Post by **awyeah** » Sun Sep 26, 2004 8:47 pm

Yes you can, but spambuster's bots do not cycle fast, they have a delay, which makes them hard to detect.

On DALnet just add: *!starship@*, *!charliem@*, *!massads@* to chanserv's akick. These are a few ident's which I remember are used by 'aHa' and his massads bots.

Yes it can be used the other way around, but I don't think it has the ability to message and spam only if modified. It just retreive spam messages, paste them on a specific massads channel or to specific opers or kline the host themself if they are opered.

Alchera · Post by **Alchera** » Sun Sep 26, 2004 9:14 pm

This stops almost all of those cyclers: *!*@dalnet-rox.org

PS: It doesn't "rox" me one little bit.

awyeah · Post by **awyeah** » Sun Sep 26, 2004 9:18 pm

Yes, but all aren't using the same vhost are they. The idents are common throughout the network so there akicked on almost every channel, heh.

Plus one thing, the bots have girly nicks with letters in the nicks replaced by ], [, }, or { somewhere, which make them more easier to spot.

Alchera · Post by **Alchera** » Sun Sep 26, 2004 9:23 pm

Here's the full list:

*!*@*.straynet.com
*!*@*.azcappy.com
*!*starship@*
*!*@*.inactive.org
*!*@*.faint.org
*!*@high-explosives.com
*!*@laggin.com
*!*@dalnet-rox.org
*!*charliem@*

And enjoy peace and quiet from aHa and his stupid ideas forever!

awyeah · Post by **awyeah** » Sun Sep 26, 2004 9:26 pm

Haha, okay I will implement some of these. However, adding all of these would really piss aHa badly.

demond · Post by **demond** » Sun Sep 26, 2004 9:26 pm

Alchera wrote:PS: Anyone getting hold of such a script will use it for the exact opposite intention. It just makes spamming channels so much easier.

nothing could be further from truth - unless by "anyone" you mean those who will modify the script to actually spam instead of scanning for spam - and I believe those would be very few, petty individuals - as opposed to all others who will use it on its intended purpose

Alchera · Post by **Alchera** » Sun Sep 26, 2004 9:44 pm

demond, I use DALnet and if you also do you'd know what these "petty" little individuals get up to and to make it worse they are getting access to shells (sharing) and setting up eggdrops which, up until recently they couldn't because of financial restraints etc etc and eggdrop does it so much better than mIRC.

demond · Post by **demond** » Sun Sep 26, 2004 10:01 pm

well, you might have a point here... still, IMHO it's much easier (and much more practised, I'd imagine) using windrones for masspam than writing/modifying tcl scripts and setting up eggdrops - and quite more effective, since you can't really ban/kline thousands of infected hosts

Alchera · Post by **Alchera** » Sun Sep 26, 2004 10:20 pm

I agree but we're not dealing with intelligence here LOL