IRC bot attack
#1

I'm an admin of a Sa-Mp server which has his own IRC server, we're having this kind of bot attacks almost 1 time a week:

Quote:

[21:30] * Join: HammerHammer (xvp@EXP-E65168C7.nr.satronet.sk)
[21:30] ** New Join: HammerHammer -- HammerHammer~*!*@EXP-E65168C7.nr.satronet.sk
[21:30] * Mini-Games imposta i mode: +v HammerHammer
[21:30] * Join: Wriggler_Grim (iujba@EXP-B1489AB9.proline.net.ua)
[21:30] ** New Join: Wriggler_Grim -- Wriggler_Grim~*!*@EXP-B1489AB9.proline.net.ua
[21:30] * Mini-Games imposta i mode: +v Wriggler_Grim
[21:30] * Join: ScissorScissor (zbkn@C1765C42.259BD261.3641704D.IP)
[21:30] ** New Join: ScissorScissor -- ScissorScissor~*!*@C1765C42.259BD261.3641704D.IP
[21:30] * Join: Wooden_Star (eep@132668B8.4E37CC3F.50DCF088.IP)
[21:30] ** New Join: Wooden_Star -- Wooden_Star~*!*@132668B8.4E37CC3F.50DCF088.IP
[21:30] * Join: Cobra_Thirsty (adum@5DC6715C.839F554D.8BDDEDCC.IP)
[21:30] ** New Join: Cobra_Thirsty -- Cobra_Thirsty~*!*@5DC6715C.839F554D.8BDDEDCC.IP
[21:30] * Join: Honey_Lost_Waterbuck (ngco@EXP-CD996C59.debaltsevo.net)
[21:30] ** New Join: Honey_Lost_Waterbuck -- Honey_Lost_Waterbuck~*!*@EXP-CD996C59.debaltsevo.net
[21:30] * Join: Warm_Lynx (ulg@EXP-CFBCFFB3.balticom.lv)
[21:30] ** New Join: Warm_Lynx -- Warm_Lynx~*!*@EXP-CFBCFFB3.balticom.lv
[21:30] * Join: Meaty_Pony (zat@EXP-CFBCFFB3.balticom.lv)
[21:30] ** New Join: Meaty_Pony -- Warm_Lynx~*!*@EXP-CFBCFFB3.balticom.lv
[21:30] * Join: Little_Screaming_Hurricane (qtkzw@975761F2.332172BD.AD876ED8.IP)
[21:30] ** New Join: Little_Screaming_Hurricane -- ScissorScissor~*!*@975761F2.332172BD.AD876ED8.IP
[21:30] * Mini-Games imposta i mode: +v ScissorScissor
[21:30] * Mini-Games imposta i mode: +v Wooden_Star
[21:30] * Mini-Games imposta i mode: +v Cobra_Thirsty
[21:30] * Mini-Games imposta i mode: +v Honey_Lost_Waterbuck
[21:30] * Mini-Games imposta i mode: +v Warm_Lynx
[21:30] * Mini-Games imposta i mode: +v Meaty_Pony
[21:30] * Join: Fisty_Mouse (hxk@EXP-CD996C59.debaltsevo.net)
[21:30] ** New Join: Fisty_Mouse -- Honey_Lost_Waterbuck~*!*@EXP-CD996C59.debaltsevo.net
[21:30] * Mini-Games imposta i mode: +v Little_Screaming_Hurricane
[21:30] * Join: Rayz_Cute (abg@EXP-CFBCFFB3.balticom.lv)
[21:30] ** New Join: Rayz_Cute -- Warm_Lynx~*!*@EXP-CFBCFFB3.balticom.lv
[21:30] * Mini-Games imposta i mode: +v Fisty_Mouse
[21:30] * Join: Raccoon_Raw (uhyww@DD73B8A4.7E3AFE2A.DD1D0594.IP)
[21:30] ** New Join: Raccoon_Raw -- Raccoon_Raw~*!*@DD73B8A4.7E3AFE2A.DD1D0594.IP
[21:30] * Mini-Games imposta i mode: +v Rayz_Cute
[21:30] * Join: Bad_Kitten (ctb@132668B8.4E37CC3F.50DCF088.IP)
[21:30] ** New Join: Bad_Kitten -- Wooden_Star~*!*@132668B8.4E37CC3F.50DCF088.IP
[21:30] * Mini-Games imposta i mode: +v Raccoon_Raw
[21:30] * Join: Circus_Doe (hyv@5DC6715C.839F554D.8BDDEDCC.IP)
[21:30] ** New Join: Circus_Doe -- Cobra_Thirsty~*!*@5DC6715C.839F554D.8BDDEDCC.IP
[21:30] * Mini-Games imposta i mode: +v Bad_Kitten
[21:30] * Join: The_Knife (bvsh@975761F2.332172BD.AD876ED8.IP)
[21:30] ** New Join: The_Knife -- ScissorScissor~*!*@975761F2.332172BD.AD876ED8.IP
[21:30] * Mini-Games imposta i mode: +v Circus_Doe
[21:30] * Join: White_Slimy_Horse (cuv@EXP-CD996C59.debaltsevo.net)
[21:30] ** New Join: White_Slimy_Horse -- Honey_Lost_Waterbuck~*!*@EXP-CD996C59.debaltsevo.net
[21:30] * Mini-Games imposta i mode: +v The_Knife
[21:30] * Join: Stoned_Mole (ejhb@EXP-276E8337.tenet.odessa.ua)
[21:30] ** New Join: Stoned_Mole -- Stoned_Mole~*!*@EXP-276E8337.tenet.odessa.ua
[21:30] * Join: Cutie_Duck (bwm@11848EA8.1F2F87DF.CF82C63D.IP)
[21:30] ** New Join: Cutie_Duck -- Cutie_Duck~*!*@11848EA8.1F2F87DF.CF82C63D.IP
[21:30] * Join: Meaty_Elastic_Galaxy (dkwo@11848EA8.1F2F87DF.CF82C63D.IP)
[21:30] ** New Join: Meaty_Elastic_Galaxy -- Cutie_Duck~*!*@11848EA8.1F2F87DF.CF82C63D.IP
[21:30] * Mini-Games imposta i mode: +v White_Slimy_Horse
[21:30] * Join: Fatty_Larva (tymz@F026FF7E.CE1EC99D.606495BD.IP)
[21:30] ** New Join: Pilot_Skilled -- Pilot_Skilled~*!*@969B96A1.4439608E.3641704D.IP
[21:30] * Mini-Games imposta i mode: +v Fatty_Larva
[21:30] * Join: Los_Pig (ecx@EXP-276E8337.tenet.odessa.ua)
[21:30] ** New Join: Los_Pig -- Stoned_Mole~*!*@EXP-276E8337.tenet.odessa.ua
[21:30] * Mini-Games imposta i mode: +v Pilot_Skilled
[21:30] * Join: The_Gravy (mjq@11848EA8.1F2F87DF.CF82C63D.IP)
[21:30] ** New Join: The_Gravy -- Cutie_Duck~*!*@11848EA8.1F2F87DF.CF82C63D.IP
[21:30] * Mini-Games imposta i mode: +v Los_Pig
[21:30] * Join: Musk-ox_Pet (jurg@54F62D42.81B3DF42.788A664.IP)
[21:30] ** New Join: Musk-ox_Pet -- Musk-ox_Pet~*!*@54F62D42.81B3DF42.788A664.IP
[21:30] * Mini-Games imposta i mode: +v The_Gravy
[21:30] * Join: Hot_Angry_Camel (vfagi@969B96A1.4439608E.3641704D.IP)
[21:30] ** New Join: Hot_Angry_Camel -- Pilot_Skilled~*!*@969B96A1.4439608E.3641704D.IP
[21:30] * Mini-Games imposta i mode: +v Musk-ox_Pet
[21:30] * Join: PiratePirate (ubljj@EXP-BA43F403.aa.f4.static.xlhost.com)
[21:30] ** New Join: PiratePirate -- PiratePirate~*!*@EXP-BA43F403.aa.f4.static.xlhost.com
[21:30] * Mini-Games imposta i mode: +v Hot_Angry_Camel
[21:30] * Join: The_Lamb (kxi@EXP-EAFB13D0.b6.static.xlhost.com)
[21:30] ** New Join: The_Lamb -- The_Lamb~*!*@EXP-EAFB13D0.b6.static.xlhost.com
[21:30] * Mini-Games imposta i mode: +v PiratePirate
[21:30] * Join: The_Pony (xsj@EXP-CCF25266.hsd1.ma.comcast.net)
[21:30] ** New Join: The_Pony -- The_Pony~*!*@EXP-CCF25266.hsd1.ma.comcast.net
[21:30] * Mini-Games imposta i mode: +v The_Lamb
[21:30] * Join: Chaos_Gladiator (tlp@EXP-7C43E229.c3-0.43d-ubr2.qens-43d.ny.cable.rcn.com)
[21:30] ** New Join: Chaos_Gladiator -- Chaos_Gladiator~*!*@EXP-7C43E229.c3-0.43d-ubr2.qens-43d.ny.cable.rcn.com
[21:30] * Mini-Games imposta i mode: +v The_Pony
[21:30] * Join: Willy_Zebra (kvuzd@D483FA8A.9C4EC26C.1784E45D.IP)
[21:30] ** New Join: Willy_Zebra -- Willy_Zebra~*!*@D483FA8A.9C4EC26C.1784E45D.IP
[21:30] * Join: Slidy_King (msnqe@EXP-3FB2D184.dyn.optonline.net)
[21:30] ** New Join: Slidy_King -- Slidy_King~*!*@EXP-3FB2D184.dyn.optonline.net
[21:30] * Join: Cute_Hatchling (iczim@EXP-30E955E4.dyn.optonline.net)
[21:30] ** New Join: Cute_Hatchling -- Cute_Hatchling~*!*@EXP-30E955E4.dyn.optonline.net
[21:30] * Mini-Games imposta i mode: +v Chaos_Gladiator
[21:30] * Join: Goldbeast_Wooden (mtb@EXP-D3F7972C.c3-0.wrx-ubr1.sbo-wrx.ma.cable.rcn.com)
[21:30] ** New Join: Goldbeast_Wooden -- Goldbeast_Wooden~*!*@EXP-D3F7972C.c3-0.wrx-ubr1.sbo-wrx.ma.cable.rcn.com
[21:30] * Mini-Games imposta i mode: +v Willy_Zebra
[21:30] * Mini-Games imposta i mode: +v Slidy_King
[21:30] * Mini-Games imposta i mode: +v Cute_Hatchling
[21:30] * Join: Homeless_Cat (kit@EXP-30E955E4.dyn.optonline.net)
[21:30] ** New Join: Homeless_Cat -- Cute_Hatchling~*!*@EXP-30E955E4.dyn.optonline.net
[21:30] * Join: Dusty_Tiger (liy@EXP-EAFB13D0.b6.static.xlhost.com)
[21:30] ** New Join: Dusty_Tiger -- The_Lamb~*!*@EXP-EAFB13D0.b6.static.xlhost.com
[21:30] * Mini-Games imposta i mode: +v Goldbeast_Wooden
[21:30] * Join: Judge_Gutsy (mubfs@EXP-30E955E4.dyn.optonline.net)
[21:30] ** New Join: Judge_Gutsy -- Cute_Hatchling~*!*@EXP-30E955E4.dyn.optonline.net
[21:30] * Mini-Games imposta i mode: +v Homeless_Cat
[21:30] * Mini-Games imposta i mode: +v Dusty_Tiger
[21:30] * Join: Tasty_Rhino (svxu@EXP-F17EA35E.hsd1.pa.comcast.net)
[21:30] ** New Join: Tasty_Rhino -- Tasty_Rhino~*!*@EXP-F17EA35E.hsd1.pa.comcast.net
[21:30] * Mini-Games imposta i mode: +v Judge_Gutsy
[21:30] * Join: Old_Sleepy_Spider (bczvt@EXP-EC865393.hsd1.de.comcast.net)

And other 50 bots which i not listed here (all with random names too).

Which they keep spamming like hell:

Quote:

[21:31] <+ScissorScissor> !s LOOOLL IDIOTS
[21:31] <+Pilot_Skilled> !s LOOOLL IDIOTS
[21:31] <+Wooden_Star> !s LOOOLL IDIOTS
[21:31] <+Cobra_Thirsty> !s LOOOLL IDIOTS
[21:31] <+Honey_Lost_Waterbuck> !s LOOOLL IDIOTS
[21:31] <+Stoned_Mole> !s LOOOLL IDIOTS
[21:31] <+Fisty_Mouse> !s LOOOLL IDIOTS
[21:31] <+Cutie_Duck> !s LOOOLL IDIOTS
[21:31] <+Meaty_Elastic_Galaxy> !s LOOOLL IDIOTS
[21:31] <+Raccoon_Raw> !s LOOOLL IDIOTS
[21:31] <+Warm_Lynx> !s LOOOLL IDIOTS
[21:31] <+Meaty_Pony> !s LOOOLL IDIOTS
[21:31] <+Wriggler_Grim> !s LOOOLL IDIOTS
[21:31] <+Little_Screaming_Hurricane> !s LOOOLL IDIOTS
[21:31] <+White_Slimy_Horse> !s LOOOLL IDIOTS
[21:31] <+HammerHammer> !s LOOOLL IDIOTS
[21:31] <+Rayz_Cute> !s LOOOLL IDIOTS
[21:31] <+The_Knife> !s LOOOLL IDIOTS
[21:31] <+Bad_Kitten> !s LOOOLL IDIOTS
[21:31] <+The_Lamb> !s LOOOLL IDIOTS
[21:31] <+Fatty_Larva> !s LOOOLL IDIOTS
[21:31] <+Cute_Hatchling> !s LOOOLL IDIOTS
[21:31] <+The_Pony> !s LOOOLL IDIOTS
[21:31] <+The_Gravy> !s LOOOLL IDIOTS
[21:31] <+Hot_Angry_Camel> !s LOOOLL IDIOTS
[21:31] <+Los_Pig> !s LOOOLL IDIOTS
[21:31] <+PiratePirate> !s LOOOLL IDIOTS
[21:31] <+Willy_Zebra> !s LOOOLL IDIOTS
[21:31] <+Slidy_King> !s LOOOLL IDIOTS
[21:31] <+Homeless_Cat> !s LOOOLL IDIOTS
[21:31] <+Dusty_Tiger> !s LOOOLL IDIOTS
[21:31] <+White_Rocky_Hatchling> !s LOOOLL IDIOTS
[21:31] <+Pink_Elephant> !s LOOOLL IDIOTS
[21:31] <+Goldbeast_Wooden> !s LOOOLL IDIOTS
[21:31] <+Tasty_Rhino> !s LOOOLL IDIOTS
[21:31] <+Judge_Gutsy> !s LOOOLL IDIOTS
[21:31] <+Cute_Whelp> !s LOOOLL IDIOTS
[21:31] <+Old_Sleepy_Spider> !s LOOOLL IDIOTS
[21:31] <+Cute_Green_Dancer> !s LOOOLL IDIOTS
[21:31] <+Musk-ox_Pet> !s LOOOLL IDIOTS
[21:31] <+Nasty_Romeo> !s LOOOLL IDIOTS
[21:31] <+Horse_Rusty> !s LOOOLL IDIOTS
[21:31] <+Supersonic_Wolverine> !s LOOOLL IDIOTS
[21:31] <+Rusty_Jackal> !s LOOOLL IDIOTS
[21:31] <+Der_Fairy> !s LOOOLL IDIOTS
[21:31] <+Der_Impala> !s LOOOLL IDIOTS
[21:31] <+The_Pink> !s LOOOLL IDIOTS
[21:31] <+Los_Pup> !s LOOOLL IDIOTS
[21:31] <+Cute_Pure_Girl> !s LOOOLL IDIOTS
[21:31] <+Streaming_Joey> !s LOOOLL IDIOTS
[21:31] <+Puglet_Rocky> !s LOOOLL IDIOTS
[21:31] <+Cool_Lion> !s LOOOLL IDIOTS
[21:31] <+Intense_Tiger> !s LOOOLL IDIOTS
[21:31] <+Strong_Puma> !s LOOOLL IDIOTS
[21:31] <+Tainted_Doll> !s LOOOLL IDIOTS
[21:31] <+Circus_Flower_Tumbler> !s LOOOLL IDIOTS
[21:31] <+Silly_Solid_Larva> !s LOOOLL IDIOTS
[21:31] <+Rusty_Rabbit> !s LOOOLL IDIOTS
[21:31] <+Brave_Springbok> !s LOOOLL IDIOTS
[21:31] <+Rat_Young> !s LOOOLL IDIOTS
[21:31] <+Crow_Purple> !s LOOOLL IDIOTS
[21:31] <+Chicken_Hippopotamus> !s LOOOLL IDIOTS
[21:31] <+Chaos_Gladiator> !s LOOOLL IDIOTS
[21:31] <+Drunken_Man> !s LOOOLL IDIOTS
[21:31] <+Vicious_Ape> !s LOOOLL IDIOTS
[21:31] <+Screaming_Wildcat> !s LOOOLL IDIOTS
[21:31] <+Los_Weasel> !s LOOOLL IDIOTS
[21:31] <+Flapper_Sunny> !s LOOOLL IDIOTS
[21:31] <+Baroness_Unique> !s LOOOLL IDIOTS
[21:31] <+The_Waterbuck> !s LOOOLL IDIOTS
[21:31] <+Dangerous_Spider> !s LOOOLL IDIOTS
[21:31] <+Color_Orange_Elf> !s LOOOLL IDIOTS
[21:31] <+The_Prophet> !s LOOOLL IDIOTS
[21:31] <+Knife_Rusty> !s LOOOLL IDIOTS
[21:31] <+Bare_Camel> !s LOOOLL IDIOTS
[21:31] <+Worthy_Musk-ox> !s LOOOLL IDIOTS
[21:31] <+Risky_Honey> !s LOOOLL IDIOTS
[21:31] <+Red_Foal> !s LOOOLL IDIOTS
[21:31] <+Der_Dog> !s LOOOLL IDIOTS
[21:31] <+Moon_Silver> !s LOOOLL IDIOTS
[21:31] <+Brutal_Stony_Man> !s LOOOLL IDIOTS
[21:31] <+Darling_Forsaken> !s LOOOLL IDIOTS
[21:31] <+Small_Space> !s LOOOLL IDIOTS
[21:31] <+El_Kangaroo> !s LOOOLL IDIOTS
[21:31] <+Purple_Doll> !s LOOOLL IDIOTS
[21:31] <+Der_Toad> !s LOOOLL IDIOTS
[21:31] <+Seriously_Cub> !s LOOOLL IDIOTS
[21:31] <+Toddler_Cute> !s LOOOLL IDIOTS
[21:31] <+Tiger_Loose> !s LOOOLL IDIOTS
[21:31] <+Bare_Lion> !s LOOOLL IDIOTS
[21:31] <+Los_Burst> !s LOOOLL IDIOTS
[21:31] <+Drunken_Whale> !s LOOOLL IDIOTS
[21:31] <+Endless_Shadow> !s LOOOLL IDIOTS
[21:31] <+Dromedary_Strong> !s LOOOLL IDIOTS
[21:31] <+Deer_Foxy> !s LOOOLL IDIOTS
[21:31] <+Der_Panther> !s LOOOLL IDIOTS
[21:31] <+Liquid_Grim_Empire> !s LOOOLL IDIOTS
[21:31] <+Reborn_Mustang> !s LOOOLL IDIOTS
[21:31] <+Los_Pet> !s LOOOLL IDIOTS
[21:31] <+Rat_Pet> !s LOOOLL IDIOTS

The thing is, each of this bot has a different IP, so even if we ban them, they come back. We set already +R mode, but we can't keep it like that forever, many FAIR players from this server joins IRC too.

Any help?

Is possible to trace the original IP? (The one of who started this attack).
Reply
#2

What IRC Network is this on?
Reply
#3

irc.exp-gaming.net

Also, this bots floods CTPs requests that makes the users getting kicked for "Excess Flood"

Quote:

[21:46] [ksjxcvr TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [ksjxcvr TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]
-
[21:46] [cfhofi TIME]

Reply
#4

Umm you should ask them to install BOPM (http://www.irc-wiki.org/BOPM).
Reply
#5

Quote:
Originally Posted by Djole1337
Посмотреть сообщение
Umm you should ask them to install BOPM (http://www.irc-wiki.org/BOPM).
Thanks.


Quote:
Originally Posted by KyleSmith
Посмотреть сообщение
What IRC Network is this on?
Why do you ask ?
Reply
#6

Quote:
Originally Posted by Michael@Belgium
Посмотреть сообщение
Thanks.




Why do you ask ?
Because I would have recommended speaking to an IRC op.
Reply
#7

Couldn't you just ban the user's part of host?
Reply
#8

Quote:
Originally Posted by Dr.Einstein
Посмотреть сообщение
Couldn't you just ban the user's part of host?
I think Michael@Belgium did it already.
Reply
#9

I used to get bot attacks on my net. So i had to set mode +R in all channels and Defcon for a while until they stopped.
Reply
#10

Do:

Код:
/mode $chan +f [5c#C120,5j#R60,10m#m60,5n#N60]:15
(replace $chan with your channel name, eg #SA-MP)

+f is flood control mode. The :15 in the end means that it counts per 15 seconds.

Код:
5c#C120
If you get 5 CTCP requests (ping/version/time/...) per 15 seconds in your channel, it will set mode +C for 120 seconds. Mode +C disables CTCP requests

Код:
5j#R60
If you get 5 joins per 15 seconds in your channel, it will set mode +R for 60 seconds. Mode +R allows only registered nicknames to join. If it's a server echo channel, you should also take notice of the bots joining on server restart, which may be more than this limit.

Код:
10m#m60
If you get 10 messages per 15 seconds in your channel, it will set mode +m for 60 seconds. Mode +m means moderated, aka people who do not have a voice set (+v) will not be able to send messages in the channel. Again you should increase this probably since it is an echo channel, which will post more than 10 messages per 15 seconds.

Код:
5n#N60
If you get 5 nickname changes per 15 seconds in your channel, it will set mode +N for 60 seconds. Mode +N will disallow nickname changes. Don't leave this on for too long, since it is extremely annoying for most people. It's also not really necessary so you can leave it out

Documentation about this feature can be found here: http://www.unrealircd.com/files/docs...ture_antiflood
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)