IRC bot attack - Printable Version

IRC bot attack - Printable Version

+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: Other (https://sampforum.blast.hk/forumdisplay.php?fid=7)
+--- Forum: Everything and Nothing (https://sampforum.blast.hk/forumdisplay.php?fid=23)
+--- Thread: IRC bot attack (/showthread.php?tid=494791)

IRC bot attack - Face9000 - 14.02.2014

I'm an admin of a Sa-Mp server which has his own IRC server, we're having this kind of bot attacks almost 1 time a week:

Quote:

[21:30] * Join: HammerHammer (xvp@EXP-E65168C7.nr.satronet.sk)
[21:30] ** New Join: HammerHammer -- HammerHammer~*!*@EXP-E65168C7.nr.satronet.sk
[21:30] * Mini-Games imposta i mode: +v HammerHammer
[21:30] * Join: Wriggler_Grim (iujba@EXP-B1489AB9.proline.net.ua)
[21:30] ** New Join: Wriggler_Grim -- Wriggler_Grim~*!*@EXP-B1489AB9.proline.net.ua
[21:30] * Mini-Games imposta i mode: +v Wriggler_Grim
[21:30] * Join: ScissorScissor (zbkn@C1765C42.259BD261.3641704D.IP)
[21:30] ** New Join: ScissorScissor -- ScissorScissor~*!*@C1765C42.259BD261.3641704D.IP
[21:30] * Join: Wooden_Star (eep@132668B8.4E37CC3F.50DCF088.IP)
[21:30] ** New Join: Wooden_Star -- Wooden_Star~*!*@132668B8.4E37CC3F.50DCF088.IP
[21:30] * Join: Cobra_Thirsty (adum@5DC6715C.839F554D.8BDDEDCC.IP)
[21:30] ** New Join: Cobra_Thirsty -- Cobra_Thirsty~*!*@5DC6715C.839F554D.8BDDEDCC.IP
[21:30] * Join: Honey_Lost_Waterbuck (ngco@EXP-CD996C59.debaltsevo.net)
[21:30] ** New Join: Honey_Lost_Waterbuck -- Honey_Lost_Waterbuck~*!*@EXP-CD996C59.debaltsevo.net
[21:30] * Join: Warm_Lynx (ulg@EXP-CFBCFFB3.balticom.lv)
[21:30] ** New Join: Warm_Lynx -- Warm_Lynx~*!*@EXP-CFBCFFB3.balticom.lv
[21:30] * Join: Meaty_Pony (zat@EXP-CFBCFFB3.balticom.lv)
[21:30] ** New Join: Meaty_Pony -- Warm_Lynx~*!*@EXP-CFBCFFB3.balticom.lv
[21:30] * Join: Little_Screaming_Hurricane (qtkzw@975761F2.332172BD.AD876ED8.IP)
[21:30] ** New Join: Little_Screaming_Hurricane -- ScissorScissor~*!*@975761F2.332172BD.AD876ED8.IP
[21:30] * Mini-Games imposta i mode: +v ScissorScissor
[21:30] * Mini-Games imposta i mode: +v Wooden_Star
[21:30] * Mini-Games imposta i mode: +v Cobra_Thirsty
[21:30] * Mini-Games imposta i mode: +v Honey_Lost_Waterbuck
[21:30] * Mini-Games imposta i mode: +v Warm_Lynx
[21:30] * Mini-Games imposta i mode: +v Meaty_Pony
[21:30] * Join: Fisty_Mouse (hxk@EXP-CD996C59.debaltsevo.net)
[21:30] ** New Join: Fisty_Mouse -- Honey_Lost_Waterbuck~*!*@EXP-CD996C59.debaltsevo.net
[21:30] * Mini-Games imposta i mode: +v Little_Screaming_Hurricane
[21:30] * Join: Rayz_Cute (abg@EXP-CFBCFFB3.balticom.lv)
[21:30] ** New Join: Rayz_Cute -- Warm_Lynx~*!*@EXP-CFBCFFB3.balticom.lv
[21:30] * Mini-Games imposta i mode: +v Fisty_Mouse
[21:30] * Join: Raccoon_Raw (uhyww@DD73B8A4.7E3AFE2A.DD1D0594.IP)
[21:30] ** New Join: Raccoon_Raw -- Raccoon_Raw~*!*@DD73B8A4.7E3AFE2A.DD1D0594.IP
[21:30] * Mini-Games imposta i mode: +v Rayz_Cute
[21:30] * Join: Bad_Kitten (ctb@132668B8.4E37CC3F.50DCF088.IP)
[21:30] ** New Join: Bad_Kitten -- Wooden_Star~*!*@132668B8.4E37CC3F.50DCF088.IP
[21:30] * Mini-Games imposta i mode: +v Raccoon_Raw
[21:30] * Join: Circus_Doe (hyv@5DC6715C.839F554D.8BDDEDCC.IP)
[21:30] ** New Join: Circus_Doe -- Cobra_Thirsty~*!*@5DC6715C.839F554D.8BDDEDCC.IP
[21:30] * Mini-Games imposta i mode: +v Bad_Kitten
[21:30] * Join: The_Knife (bvsh@975761F2.332172BD.AD876ED8.IP)
[21:30] ** New Join: The_Knife -- ScissorScissor~*!*@975761F2.332172BD.AD876ED8.IP
[21:30] * Mini-Games imposta i mode: +v Circus_Doe
[21:30] * Join: White_Slimy_Horse (cuv@EXP-CD996C59.debaltsevo.net)
[21:30] ** New Join: White_Slimy_Horse -- Honey_Lost_Waterbuck~*!*@EXP-CD996C59.debaltsevo.net
[21:30] * Mini-Games imposta i mode: +v The_Knife
[21:30] * Join: Stoned_Mole (ejhb@EXP-276E8337.tenet.odessa.ua)
[21:30] ** New Join: Stoned_Mole -- Stoned_Mole~*!*@EXP-276E8337.tenet.odessa.ua
[21:30] * Join: Cutie_Duck (bwm@11848EA8.1F2F87DF.CF82C63D.IP)
[21:30] ** New Join: Cutie_Duck -- Cutie_Duck~*!*@11848EA8.1F2F87DF.CF82C63D.IP
[21:30] * Join: Meaty_Elastic_Galaxy (dkwo@11848EA8.1F2F87DF.CF82C63D.IP)
[21:30] ** New Join: Meaty_Elastic_Galaxy -- Cutie_Duck~*!*@11848EA8.1F2F87DF.CF82C63D.IP
[21:30] * Mini-Games imposta i mode: +v White_Slimy_Horse
[21:30] * Join: Fatty_Larva (tymz@F026FF7E.CE1EC99D.606495BD.IP)
[21:30] ** New Join: Pilot_Skilled -- Pilot_Skilled~*!*@969B96A1.4439608E.3641704D.IP
[21:30] * Mini-Games imposta i mode: +v Fatty_Larva
[21:30] * Join: Los_Pig (ecx@EXP-276E8337.tenet.odessa.ua)
[21:30] ** New Join: Los_Pig -- Stoned_Mole~*!*@EXP-276E8337.tenet.odessa.ua
[21:30] * Mini-Games imposta i mode: +v Pilot_Skilled
[21:30] * Join: The_Gravy (mjq@11848EA8.1F2F87DF.CF82C63D.IP)
[21:30] ** New Join: The_Gravy -- Cutie_Duck~*!*@11848EA8.1F2F87DF.CF82C63D.IP
[21:30] * Mini-Games imposta i mode: +v Los_Pig
[21:30] * Join: Musk-ox_Pet (jurg@54F62D42.81B3DF42.788A664.IP)
[21:30] ** New Join: Musk-ox_Pet -- Musk-ox_Pet~*!*@54F62D42.81B3DF42.788A664.IP
[21:30] * Mini-Games imposta i mode: +v The_Gravy
[21:30] * Join: Hot_Angry_Camel (vfagi@969B96A1.4439608E.3641704D.IP)
[21:30] ** New Join: Hot_Angry_Camel -- Pilot_Skilled~*!*@969B96A1.4439608E.3641704D.IP
[21:30] * Mini-Games imposta i mode: +v Musk-ox_Pet
[21:30] * Join: PiratePirate (ubljj@EXP-BA43F403.aa.f4.static.xlhost.com)
[21:30] ** New Join: PiratePirate -- PiratePirate~*!*@EXP-BA43F403.aa.f4.static.xlhost.com
[21:30] * Mini-Games imposta i mode: +v Hot_Angry_Camel
[21:30] * Join: The_Lamb (kxi@EXP-EAFB13D0.b6.static.xlhost.com)
[21:30] ** New Join: The_Lamb -- The_Lamb~*!*@EXP-EAFB13D0.b6.static.xlhost.com
[21:30] * Mini-Games imposta i mode: +v PiratePirate
[21:30] * Join: The_Pony (xsj@EXP-CCF25266.hsd1.ma.comcast.net)
[21:30] ** New Join: The_Pony -- The_Pony~*!*@EXP-CCF25266.hsd1.ma.comcast.net
[21:30] * Mini-Games imposta i mode: +v The_Lamb
[21:30] * Join: Chaos_Gladiator (tlp@EXP-7C43E229.c3-0.43d-ubr2.qens-43d.ny.cable.rcn.com)
[21:30] ** New Join: Chaos_Gladiator -- Chaos_Gladiator~*!*@EXP-7C43E229.c3-0.43d-ubr2.qens-43d.ny.cable.rcn.com
[21:30] * Mini-Games imposta i mode: +v The_Pony
[21:30] * Join: Willy_Zebra (kvuzd@D483FA8A.9C4EC26C.1784E45D.IP)
[21:30] ** New Join: Willy_Zebra -- Willy_Zebra~*!*@D483FA8A.9C4EC26C.1784E45D.IP
[21:30] * Join: Slidy_King (msnqe@EXP-3FB2D184.dyn.optonline.net)
[21:30] ** New Join: Slidy_King -- Slidy_King~*!*@EXP-3FB2D184.dyn.optonline.net
[21:30] * Join: Cute_Hatchling (iczim@EXP-30E955E4.dyn.optonline.net)
[21:30] ** New Join: Cute_Hatchling -- Cute_Hatchling~*!*@EXP-30E955E4.dyn.optonline.net
[21:30] * Mini-Games imposta i mode: +v Chaos_Gladiator
[21:30] * Join: Goldbeast_Wooden (mtb@EXP-D3F7972C.c3-0.wrx-ubr1.sbo-wrx.ma.cable.rcn.com)
[21:30] ** New Join: Goldbeast_Wooden -- Goldbeast_Wooden~*!*@EXP-D3F7972C.c3-0.wrx-ubr1.sbo-wrx.ma.cable.rcn.com
[21:30] * Mini-Games imposta i mode: +v Willy_Zebra
[21:30] * Mini-Games imposta i mode: +v Slidy_King
[21:30] * Mini-Games imposta i mode: +v Cute_Hatchling
[21:30] * Join: Homeless_Cat (kit@EXP-30E955E4.dyn.optonline.net)
[21:30] ** New Join: Homeless_Cat -- Cute_Hatchling~*!*@EXP-30E955E4.dyn.optonline.net
[21:30] * Join: Dusty_Tiger (liy@EXP-EAFB13D0.b6.static.xlhost.com)
[21:30] ** New Join: Dusty_Tiger -- The_Lamb~*!*@EXP-EAFB13D0.b6.static.xlhost.com
[21:30] * Mini-Games imposta i mode: +v Goldbeast_Wooden
[21:30] * Join: Judge_Gutsy (mubfs@EXP-30E955E4.dyn.optonline.net)
[21:30] ** New Join: Judge_Gutsy -- Cute_Hatchling~*!*@EXP-30E955E4.dyn.optonline.net
[21:30] * Mini-Games imposta i mode: +v Homeless_Cat
[21:30] * Mini-Games imposta i mode: +v Dusty_Tiger
[21:30] * Join: Tasty_Rhino (svxu@EXP-F17EA35E.hsd1.pa.comcast.net)
[21:30] ** New Join: Tasty_Rhino -- Tasty_Rhino~*!*@EXP-F17EA35E.hsd1.pa.comcast.net
[21:30] * Mini-Games imposta i mode: +v Judge_Gutsy
[21:30] * Join: Old_Sleepy_Spider (bczvt@EXP-EC865393.hsd1.de.comcast.net)

And other 50 bots which i not listed here (all with random names too).

Which they keep spamming like hell:

Quote:

[21:31] <+ScissorScissor> !s LOOOLL IDIOTS
[21:31] <+Pilot_Skilled> !s LOOOLL IDIOTS
[21:31] <+Wooden_Star> !s LOOOLL IDIOTS
[21:31] <+Cobra_Thirsty> !s LOOOLL IDIOTS
[21:31] <+Honey_Lost_Waterbuck> !s LOOOLL IDIOTS
[21:31] <+Stoned_Mole> !s LOOOLL IDIOTS
[21:31] <+Fisty_Mouse> !s LOOOLL IDIOTS
[21:31] <+Cutie_Duck> !s LOOOLL IDIOTS
[21:31] <+Meaty_Elastic_Galaxy> !s LOOOLL IDIOTS
[21:31] <+Raccoon_Raw> !s LOOOLL IDIOTS
[21:31] <+Warm_Lynx> !s LOOOLL IDIOTS
[21:31] <+Meaty_Pony> !s LOOOLL IDIOTS
[21:31] <+Wriggler_Grim> !s LOOOLL IDIOTS
[21:31] <+Little_Screaming_Hurricane> !s LOOOLL IDIOTS
[21:31] <+White_Slimy_Horse> !s LOOOLL IDIOTS
[21:31] <+HammerHammer> !s LOOOLL IDIOTS
[21:31] <+Rayz_Cute> !s LOOOLL IDIOTS
[21:31] <+The_Knife> !s LOOOLL IDIOTS
[21:31] <+Bad_Kitten> !s LOOOLL IDIOTS
[21:31] <+The_Lamb> !s LOOOLL IDIOTS
[21:31] <+Fatty_Larva> !s LOOOLL IDIOTS
[21:31] <+Cute_Hatchling> !s LOOOLL IDIOTS
[21:31] <+The_Pony> !s LOOOLL IDIOTS
[21:31] <+The_Gravy> !s LOOOLL IDIOTS
[21:31] <+Hot_Angry_Camel> !s LOOOLL IDIOTS
[21:31] <+Los_Pig> !s LOOOLL IDIOTS
[21:31] <+PiratePirate> !s LOOOLL IDIOTS
[21:31] <+Willy_Zebra> !s LOOOLL IDIOTS
[21:31] <+Slidy_King> !s LOOOLL IDIOTS
[21:31] <+Homeless_Cat> !s LOOOLL IDIOTS
[21:31] <+Dusty_Tiger> !s LOOOLL IDIOTS
[21:31] <+White_Rocky_Hatchling> !s LOOOLL IDIOTS
[21:31] <+Pink_Elephant> !s LOOOLL IDIOTS
[21:31] <+Goldbeast_Wooden> !s LOOOLL IDIOTS
[21:31] <+Tasty_Rhino> !s LOOOLL IDIOTS
[21:31] <+Judge_Gutsy> !s LOOOLL IDIOTS
[21:31] <+Cute_Whelp> !s LOOOLL IDIOTS
[21:31] <+Old_Sleepy_Spider> !s LOOOLL IDIOTS
[21:31] <+Cute_Green_Dancer> !s LOOOLL IDIOTS
[21:31] <+Musk-ox_Pet> !s LOOOLL IDIOTS
[21:31] <+Nasty_Romeo> !s LOOOLL IDIOTS
[21:31] <+Horse_Rusty> !s LOOOLL IDIOTS
[21:31] <+Supersonic_Wolverine> !s LOOOLL IDIOTS
[21:31] <+Rusty_Jackal> !s LOOOLL IDIOTS
[21:31] <+Der_Fairy> !s LOOOLL IDIOTS
[21:31] <+Der_Impala> !s LOOOLL IDIOTS
[21:31] <+The_Pink> !s LOOOLL IDIOTS
[21:31] <+Los_Pup> !s LOOOLL IDIOTS
[21:31] <+Cute_Pure_Girl> !s LOOOLL IDIOTS
[21:31] <+Streaming_Joey> !s LOOOLL IDIOTS
[21:31] <+Puglet_Rocky> !s LOOOLL IDIOTS
[21:31] <+Cool_Lion> !s LOOOLL IDIOTS
[21:31] <+Intense_Tiger> !s LOOOLL IDIOTS
[21:31] <+Strong_Puma> !s LOOOLL IDIOTS
[21:31] <+Tainted_Doll> !s LOOOLL IDIOTS
[21:31] <+Circus_Flower_Tumbler> !s LOOOLL IDIOTS
[21:31] <+Silly_Solid_Larva> !s LOOOLL IDIOTS
[21:31] <+Rusty_Rabbit> !s LOOOLL IDIOTS
[21:31] <+Brave_Springbok> !s LOOOLL IDIOTS
[21:31] <+Rat_Young> !s LOOOLL IDIOTS
[21:31] <+Crow_Purple> !s LOOOLL IDIOTS
[21:31] <+Chicken_Hippopotamus> !s LOOOLL IDIOTS
[21:31] <+Chaos_Gladiator> !s LOOOLL IDIOTS
[21:31] <+Drunken_Man> !s LOOOLL IDIOTS
[21:31] <+Vicious_Ape> !s LOOOLL IDIOTS
[21:31] <+Screaming_Wildcat> !s LOOOLL IDIOTS
[21:31] <+Los_Weasel> !s LOOOLL IDIOTS
[21:31] <+Flapper_Sunny> !s LOOOLL IDIOTS
[21:31] <+Baroness_Unique> !s LOOOLL IDIOTS
[21:31] <+The_Waterbuck> !s LOOOLL IDIOTS
[21:31] <+Dangerous_Spider> !s LOOOLL IDIOTS
[21:31] <+Color_Orange_Elf> !s LOOOLL IDIOTS
[21:31] <+The_Prophet> !s LOOOLL IDIOTS
[21:31] <+Knife_Rusty> !s LOOOLL IDIOTS
[21:31] <+Bare_Camel> !s LOOOLL IDIOTS
[21:31] <+Worthy_Musk-ox> !s LOOOLL IDIOTS
[21:31] <+Risky_Honey> !s LOOOLL IDIOTS
[21:31] <+Red_Foal> !s LOOOLL IDIOTS
[21:31] <+Der_Dog> !s LOOOLL IDIOTS
[21:31] <+Moon_Silver> !s LOOOLL IDIOTS
[21:31] <+Brutal_Stony_Man> !s LOOOLL IDIOTS
[21:31] <+Darling_Forsaken> !s LOOOLL IDIOTS
[21:31] <+Small_Space> !s LOOOLL IDIOTS
[21:31] <+El_Kangaroo> !s LOOOLL IDIOTS
[21:31] <+Purple_Doll> !s LOOOLL IDIOTS
[21:31] <+Der_Toad> !s LOOOLL IDIOTS
[21:31] <+Seriously_Cub> !s LOOOLL IDIOTS
[21:31] <+Toddler_Cute> !s LOOOLL IDIOTS
[21:31] <+Tiger_Loose> !s LOOOLL IDIOTS
[21:31] <+Bare_Lion> !s LOOOLL IDIOTS
[21:31] <+Los_Burst> !s LOOOLL IDIOTS
[21:31] <+Drunken_Whale> !s LOOOLL IDIOTS
[21:31] <+Endless_Shadow> !s LOOOLL IDIOTS
[21:31] <+Dromedary_Strong> !s LOOOLL IDIOTS
[21:31] <+Deer_Foxy> !s LOOOLL IDIOTS
[21:31] <+Der_Panther> !s LOOOLL IDIOTS
[21:31] <+Liquid_Grim_Empire> !s LOOOLL IDIOTS
[21:31] <+Reborn_Mustang> !s LOOOLL IDIOTS
[21:31] <+Los_Pet> !s LOOOLL IDIOTS
[21:31] <+Rat_Pet> !s LOOOLL IDIOTS

The thing is, each of this bot has a different IP, so even if we ban them, they come back. We set already +R mode, but we can't keep it like that forever, many FAIR players from this server joins IRC too.

Any help?

Is possible to trace the original IP? (The one of who started this attack).

Re: IRC bot attack - Kyle - 14.02.2014

What IRC Network is this on?

Re: IRC bot attack - Face9000 - 14.02.2014

irc.exp-gaming.net

Also, this bots floods CTPs requests that makes the users getting kicked for "Excess Flood"

Quote:

[21:46] [ksjxcvr TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]

Re: IRC bot attack - Djole1337 - 14.02.2014

Umm you should ask them to install BOPM (http://www.irc-wiki.org/BOPM).

Re: IRC bot attack - Michael@Belgium - 14.02.2014

Quote:

Originally Posted by Djole1337

Umm you should ask them to install BOPM (http://www.irc-wiki.org/BOPM).

Thanks.

Quote:

Originally Posted by KyleSmith

What IRC Network is this on?

Why do you ask ?

Re: IRC bot attack - Kyle - 14.02.2014

Quote:

Originally Posted by Michael@Belgium

Thanks.

Why do you ask ?

Because I would have recommended speaking to an IRC op.

Re: IRC bot attack - Dr.Einstein - 14.02.2014

Couldn't you just ban the user's part of host?

Re: IRC bot attack - Face9000 - 14.02.2014

Quote:

Originally Posted by Dr.Einstein

Couldn't you just ban the user's part of host?

I think Michael@Belgium did it already.

Re: IRC bot attack - Kirollos - 15.02.2014

I used to get bot attacks on my net. So i had to set mode +R in all channels and Defcon for a while until they stopped.

Re: IRC bot attack - [MM]IKKE - 15.02.2014

Do:

Код:

/mode $chan +f [5c#C120,5j#R60,10m#m60,5n#N60]:15

(replace $chan with your channel name, eg #SA-MP)

+f is flood control mode. The :15 in the end means that it counts per 15 seconds.

Код:

5c#C120

If you get 5 CTCP requests (ping/version/time/...) per 15 seconds in your channel, it will set mode +C for 120 seconds. Mode +C disables CTCP requests

Код:

5j#R60

If you get 5 joins per 15 seconds in your channel, it will set mode +R for 60 seconds. Mode +R allows only registered nicknames to join. If it's a server echo channel, you should also take notice of the bots joining on server restart, which may be more than this limit.

Код:

10m#m60

If you get 10 messages per 15 seconds in your channel, it will set mode +m for 60 seconds. Mode +m means moderated, aka people who do not have a voice set (+v) will not be able to send messages in the channel. Again you should increase this probably since it is an echo channel, which will post more than 10 messages per 15 seconds.

Код:

5n#N60

If you get 5 nickname changes per 15 seconds in your channel, it will set mode +N for 60 seconds. Mode +N will disallow nickname changes. Don't leave this on for too long, since it is extremely annoying for most people. It's also not really necessary so you can leave it out

Documentation about this feature can be found here: http://www.unrealircd.com/files/docs...ture_antiflood