Last visit was: Mon Jul 22, 2019 9:45 pm It is currently Mon Jul 22, 2019 9:45 pm

All times are UTC [ DST ]




 Page 4 of 10 [ 144 posts ]  Go to page Previous  1, 2, 3, 4, 5, 6, 7 ... 10  Next
Author Message
 Post subject: Re: Undernet Drones
PostPosted: Wed Feb 20, 2008 9:32 am 

Joined: Tue Jul 04, 2006 2:41 pm
Posts: 33
Drones are not eggdrops....
Eggdrops aren't those who infect....


Offline
  
 
 Post subject: Re: Undernet Drones
PostPosted: Wed Feb 20, 2008 2:50 pm 
Senior Cservice Admin
User avatar

Joined: Sun Jul 06, 2003 2:47 am
Posts: 564
Location: Hamilton, New Zealand
nonesense huh? I'm not the one trying to get myself g-lined when it doesn't solve the problem.



_________________
xplora @ undernet.org
Past Co-ordinator
Undernet Channel Services Committee
Offline
  
 
 Post subject: Re: Undernet Drones
PostPosted: Wed Feb 20, 2008 3:29 pm 

Joined: Tue Jan 03, 2006 7:02 am
Posts: 42
Those 2 glines I posted in RED will solve the problem of those 2 types of drone. You will never see another spambot like those 2 types again. It will NOT match any human users. Eggdrops will evade it, you're right... that's cuz the regex targets specific spambots, NOT eggdrops or humans!

If you're going to post complete BS and make yourself look even more like an idiot clinging to their freshly appointed power, at least talk to someone with knowledge so you can back your BS up.


Offline
  
 
 Post subject: Re: Undernet Drones
PostPosted: Wed Feb 20, 2008 11:57 pm 
User avatar

Joined: Thu Aug 11, 2005 7:27 pm
Posts: 12
Location: Massachusetts, USA
I agree 100% with Sanitarium. It's time that someone on this network did something that made sense. REGEX patterns that San is speaking of, are indeed 99.999% accurate, they will stop these specific types of drones (the ones in red he posted especially).

I challenge every server admin to try it, and when these drones no longer appear on the network, then it's time to sit down with someone and discuss further the options to eliminate the other possible drones on this network. Sitting on your hands and saying "it's too hard, or it's too complicated" is NOT a viable solution.

Action is.


Last edited by CrayonMan on Fri Feb 22, 2008 1:13 am, edited 1 time in total.


_________________
-Crayon
Offline
  
 
 Post subject: Re: Undernet Drones
PostPosted: Thu Feb 21, 2008 3:41 am 
User avatar

Joined: Mon Jun 04, 2007 1:06 am
Posts: 182
Location: Behind You!
/me Allmost Faint

    There are 21298 users and 86559 invisible on 28 servers
    71 operator(s) online
    180 unknown connection(s)
    31194 channels formed
    I have 4152 clients and 1 servers
    -
    /me will type -> /who ??9????????? n%nuhr
    -
    here is the result
    -
    ~king pool-141-151-179-188.pitt.east.verizon.net Yk9uM22akm2l Steaua e pe primu loc !!!
    ~stf ool-44c1e603.dyn.optonline.net St9uB12bjc8b Am drone cate vreau
    bwkegnqhqw 71.239.250.246 Sn9hH33cpg2j Hj2dM42ufg0ap
    ~alterate adsl-065-012-198-106.sip.bct.bellsouth.net Jn9rM33rbo7c complementarity
    ~guy 71-213-184-161.albq.qwest.net Gz9qC53him1p sermon
    ~kernel 71-219-8-174.slkc.qwest.net Qs9nD37xxs3c 13st|ll d0n`t g|v3 4 hello.
    ~pico pool-71-246-208-106.washdc.fios.verizon.net Bh9cQ29wrd4h 4Sunt Scl4v4 M4r3 D3 T0t ! :">
    ~splash 12.110.178.168 Dq9pK30rfn6y baptistery
    ~vasione pool-71-251-227-194.rcmdva.fios.verizon.net Np9jI61dgt6d -= vai de pula ta =-
    ~mata 64.234.73.225 Hp9sW60xef3u Mata e o scorpie
    ~psy pool-141-151-179-188.pitt.east.verizon.net Li9qV60myw6g Te pish in cur fraiere
    htwlxjhfip cpe-74-77-82-164.buffalo.res.rr.com Nq9pI32wff7y Ih6rI89goj8gq
    ~inbox adsl-76-230-2-121.dsl.milwwi.sbcglobal.net Mz9iO89gsf2d d0|ng dr0gs *
    ~vione cpe-66-25-150-206.austin.res.rr.com Kw9pD76yno3u -= drona rapida =-
    flesh c-98-193-243-124.hsd1.tn.comcast.net Hd9mT49ahf7e Ellwood
    ~send 69.237.92.160 Zu9uP59fpi3o Fut pr04st3 :))
    ~gasca 64-60-201-114.static-ip.telepacific.net Gv9eQ36rwt2n hey sweety , can you make me "o mufa" ?
    ~valione d149-67-28-31.nap.wideopenwest.com Fx9aO84nnt1q -= Cele mei smechere drone =-
    ~haxoru cpe-76-170-248-113.socal.res.rr.com Nc9oL11stb1a Vin a 3 a dupa mata
    ~drone 74-130-170-247.dhcp.insightbb.com Ab9wQ88zqu4a -= ___ =-
    ~open 74.95.4.86 Wh9zR46coc2s 4Such 4 B4st4rd ! ;(
    ~me 156.110.142.58 Tz9tN65knl7m 13st|ll d0n`t g|v3 4 hello.
    jzirakel S010600142a33635b.ed.shawcable.net Om9cR66nhp1h Gk7gL24npn4ki
    ~homeone pool-72-82-166-99.cmdnnj.east.verizon.net Nm9bM57blw2y -= hy =-
    ~sggygimr c-68-55-133-123.hsd1.md.comcast.net Rc9oA21bdc7n Yl6pY49bjd5kv
    ~adenine c-24-5-154-150.hsd1.ca.comcast.net Oi9eF54etl7e scramming
    ~misconduc 68-190-180-162.static.reno.nv.charter.com Ob9rF67nhj6a maim
    ~yawn 208.96.86.206 Ae9iV10kjk3s python
    ~apologeti CPE001d7e1f4ac2-CM001225d88b9a.cpe.net.cable.rogers.com Ka9nC83jns1e steal
    ~drank 96.33.72.119 Ym9dI98svl4y dos
    ~unmoved c-68-81-157-119.hsd1.pa.comcast.net Ro9eM37daz3a synonym
    ~smitten 69.77.251.194 Lu9oR04akv8i dilute
    ~smitten ip70-181-104-183.oc.oc.cox.net Xg9lM82hvt6n ohm
    ~loom ppp-70-246-78-167.dsl.ksc2mo.swbell.net Up9nQ34xmn1k fiscal
    ~journal 72-48-199-64.dyn.grandenetworks.net Yr9mZ44rmi3v knelt
    ~ecliptic adsl-75-2-17-240.dsl.ipltin.sbcglobal.net Pa9eF15dsa8z plea
    ~thirteen cpe-66-66-13-52.rochester.res.rr.com Ys9mU59xom4w ensue
    ~fed 71-218-85-202.hlrn.qwest.net Fs9wA59gsp8k call
    ~thirteen cpe-66-66-13-52.rochester.res.rr.com Bw9bK27efh1h chasm
    ~verify S0106004005490e2c.ed.shawcable.net Md9gR34bnc0r phase
    ~child 207-195-76-247.nbfr.hsdb.sasknet.sk.ca Tv9iQ75pyh7e turtle
    ~aware ip68-231-95-44.ph.ph.cox.net Gk9aO60imh7u magnitude
    ~alpha adsl-69-224-183-167.dsl.irvnca.pacbell.net Ss9nY14qcu2v unbridled
    ~verify S0106004005490e2c.ed.shawcable.net Rx9jS34qww0j sardine
    ~mammoth CPE-70-92-235-230.wi.res.rr.com Jw9lS66atk9i spore
    ~clique user-0ce2aee.cable.mindspring.com Kx9uP64vya5n emasculate
    ~beleone 68.121.58.246 Ya9cA07wou9q -= ___ =-
    ~feresc adsl-76-221-199-228.dsl.frs2ca.sbcglobal.net Vm9zV73afr9c reboot
    ~amuse kgldgaambas07-pool20-a11.kgldgaam.tds.net Uv9zE50ohp1b monster
    ~stand cpe-72-224-245-134.maine.res.rr.com He9qJ18ode8i lmao
    ~commutati 168-103-254-75.clsp.qwest.net Fr9nO02ehp2b box
    ~scaly pool-72-87-133-26.lsanca.dsl-w.verizon.net Mm9vM29eyv3k egalitarian
    ~fruit 71-35-141-171.tukw.qwest.net Iy9yC92flf9z travel
    ~suicidal d207-216-4-101.bchsia.telus.net Mr9jM55hey6l unarmed
    ~unprofita c-76-127-13-64.hsd1.ga.comcast.net Fu9oY71qlk2a admissible
    ~homeone 72-2-70-22.suite224.net Ag9oJ79kzk2y -= tears from the moon =-
    ~end cm-24-121-34-64.flagstaff.az.npgco.com Vx9kB95scf4m Mu|st4 m|c4 :">
    synapse ool-18bdb3db.dyn.optonline.net Xu9eE54nni5y top
    ~info ool-4579f2e0.dyn.optonline.net Nd9vA56jar5p By y0ur s|d3 ..
    irritate 123.sub-70-220-25.myvzw.com Dv9aS84zhh7d fritter
    ~rone 72.168.126.57 Uq9tT46stg2w -= tarfa =-
    foaxcwlpkk 12-210-12-116.client.mchsi.com Ew9eJ35kjd3v Vg5nV81ywu0yd
    ~ice 198.69.241.14 Jt9rL24rkr2e Sa vad acuma cum imi mai dati gline?
    ~rone dpc6714320118.direcpc.com Zh9hB65tmp7i -= o sugi =-
    ~lavender cpe-66-27-91-47.san.res.rr.com Xb9gX11bxj1e rebuilt
    ~exhibit cpe-66-65-135-113.nyc.res.rr.com Zj9bE49smd7r decimation
    ~valione d36-178-235.home1.cgocable.net Hc9nD40pxz3t -= away =-
    ~fasione adsl-68-88-68-51.dsl.rcsntx.swbell.net Ol9gB71nok2o -= tears from the moon =-
    ~lubricati CPE-75-86-224-195.wi.res.rr.com Cg9rR65ohw1b bleak
    ~rift pool-71-119-76-238.lsanca.dsl-w.verizon.net Wh9gC22bfq8x secret
    bobbyuser CPE0015f2a3d398-CM00122541823c.cpe.net.cable.rogers.com Lo9iV17ulu2w De ce Ti`au Inghetat Sarutarile Fierbinti?!
    ~thegod 24.229.140.200.res-cmts.mlf.ptd.net Np9gG20wxw7i w3 0wn y0u =)
    ~bear c-24-128-217-178.hsd1.ma.comcast.net Ag9oT37rii8g bottle
    ~Muie pool-72-70-160-227.hrbgpa.east.verizon.net Ca9oN25lzu5h ai vrea ? sau ti-ai dorii ;¬)
    ~fasione h139.83.29.71.ip.alltel.net Ot9oM62dfy6r -= muista =-
    ~crnskyho doc-72-47-28-15.lv.tx.cebridge.net Lz9tC41mfz2y Ev6jB94tks2dg
    ~conf ool-4350a9da.dyn.optonline.net Ww9jW41aal6c s0 n4sty ..
    ~cd ip70-171-188-195.om.om.cox.net Km9oQ45gnj9k 4M u|3 12;)
    ~amputate ip72-204-46-89.fv.ks.cox.net Ws9aE64szv0b lovable
    ~vbkzbqap user-0cevb7r.cable.mindspring.com Py9aT17gss8n Xd8aF28mav6yb
    ~spike cpe-65-25-28-40.neo.res.rr.com Ok9xW24ixy7c preliminary
    ~accordion CPE-65-28-92-121.kc.res.rr.com Ef9qK98vfy1j detail
    ~nwvggmkz cpe-71-79-231-32.woh.res.rr.com Vl9yP46bqn3u Sq2tW74jaz1gh
    ~slap 99-206-2-108.area7.spcsdns.net Yg9iT13pcg7w hood
    ~reassembl cpe-204-210-210-101.neo.res.rr.com Df9iW79pod3d via
    ~Darwin 71-212-243-38.hlrn.qwest.net Sq9uS91ccw5t slitting
    ~usvohobf ool-182e51f0.dyn.optonline.net Kt9mR96fxc9b Xm9yO68twg9id
    ~classic ip68-98-137-149.dc.dc.cox.net Iz9nX49lzy6v intramuscular
    ~distraugh 153-130.35-65.tampabay.res.rr.com Oz9tY96tvf7j cruel
    mircone ip68-102-194-198.ks.ok.cox.net As9eT84paf8f -= chip angelic =-
    ~Doom ool-44c2de73.dyn.optonline.net Ds9cY64ppb4s principle
    ~alum 115-252-223-66.prudvista.static.gci.net Nl9dL11ejj8f gel
    ~concern adsl-068-213-016-088.sip.asm.bellsouth.net Ec9fV96uul5v This
    ~Jacob 207-172-131-83.c3-0.brl-ubr1.sbo-brl.ma.cable.rcn.com Df9mE73bby7g advisory
    ~Piranda OTWAON23-1177862286.sdsl.bell.ca Bh9bJ05ggr6x decor
    ~receipt adsl-074-166-118-236.sip.asm.bellsouth.net Pc9gG79uql7b Aesop
    ~mircone 24-116-95-240.cpe.cableone.net Lh9rJ05koq8n -= take my breath away.. =-
    ~one c-67-173-235-56.hsd1.co.comcast.net Te9bC16xwl1q -= faci o mufa ? =-
    ~friable ool-182c15c2.dyn.optonline.net Zw9mU87mqe4v mike
    ~smitten 70.225.203.153 Yj9oZ39vdg1v circa
    ~reception cpe-69-202-98-169.twcny.res.rr.com Ya9rH41sia9g deflate
    ~standby ip70-171-188-195.om.om.cox.net Ox9mO83nbn8a pl4y|ng
    ~Hard 71-215-88-242.hlrn.qwest.net Qh9gU65cof9m ai vrea ? sau ti-ai dorii ;¬)
    ~adione ppp-70-250-124-255.dsl.wchtks.swbell.net So9gH58lof8f -= in iubire nu sunt legi =-
    ~platonic 70.103.200.226 Ev9sH08gvo5v acquit
    ~van c-67-177-55-118.hsd1.ut.comcast.net Vf9lS42ldb4d saunter
    ~dirijone pool-71-126-101-191.phlapa.east.verizon.net It9iC74zlx3y -= Te Quiero Mucho Mi Amor Cristina ! =-
    asylum 139-159-26-72-txsps.xanadoo.com Hg9lQ27vwu6j exasperation
    ~escape 74.197.97.192 Fq9aB16rjg7n dominion
    ~burial c-76-119-99-46.hsd1.ma.comcast.net Nw9hL15nne2x annotate
    jzjpebqw modemcable080.12-58-74.mc.videotron.ca Mp9bD00ngu4l Qq8vO04udl0yi
    ~pursue adsl-75-16-54-247.dsl.irvnca.sbcglobal.net Nf9lV30tgk6h attest
    ~disdain 65-100-183-80.hlrn.qwest.net Nj9mM73gfz5n assort
    ~chortle c-76-122-22-150.hsd1.fl.comcast.net Vd9kH92hxn0k revenue
    zljinhdh adsl-70-238-203-172.dsl.lbcktx.sbcglobal.net Fz9pK60ttn1z Mf4kT14tki3uw
    ~avgdmcua pool-71-97-161-60.aubnin.dsl-w.verizon.net Lo9hS00kdm2d Xx3xJ88fzd2wb
    ~Brainard 66.9.38.50 Cr9tH68xwi2v devolve
    ~unwieldy host-128-199-220-24.midco.net Cx9mH28axr6j whack
    ~bulan c-76-22-224-148.hsd1.tn.comcast.net Iu9iU22wcn2k Sport Crew
    ~fever user-0c93oe7.cable.mindspring.com Rs9mK55yhk2p cousin
    ~sizzle fw.01.infoage.us Wb9cY83hfw9h quill
    ~imputiton oh-74-5-37-178.dhcp.embarqhsd.net Ec9wH31yow1v -= muista =-
    ~unmention 68.153.9.5 Xo9uC76hcm2l crematory
    ~sebilone adsl-76-230-159-19.dsl.wlfrct.sbcglobal.net We9cT16pqe4a -= fast =-
    rise cpe-076-182-174-010.sc.res.rr.com Zu9tC33uai3g hound
    ~free 216-87-233-48.chamberscable.com Lh9sA80emj9u vulture
    ~gorone CPE-121-217-247-237.nsw.bigpond.net.au Uw9zW42sui3o -= drona rapida =-
    unmrmmwkcb 65-162-59-164.quickclick.ctc.net Dn9lC04oii2c Ni4jN71sgp2dt
    ~syntactic 70-9-31-28.area4.spcsdns.net Uv9bU46dyt9g sarcastic
    ingrate user-38q49ra.cable.mindspring.com Ht9vU97adu3k break
    ~cinema pool-141-156-165-149.esr.east.verizon.net Mn9sD60lsw4m salvage
    ~screwbean ip68-230-102-228.ph.ph.cox.net Ot9cZ31hxb5x longleg
    ~thrive cpe-069-134-153-008.nc.res.rr.com Ja9eA89mju3r concurrent
    ~unmistaka CPE-75-86-199-172.wi.res.rr.com Zk9jF88ggd8g stray
    stag dsl-12-39.terranova.net Vx9oW49txa4b thusly
    ~bludgeon 68-190-97-114.dhcp.stcd.mn.charter.com Zj9sN86zvw2i melodrama
    ~mould CPE-75-86-199-172.wi.res.rr.com Po9uG35bth6c angst
    ~oncology dsl-58-7-94-224.wa.westnet.com.au Lv9tC14wfb3k sequence
    ~Havana d-72-9-15-104.metrocast.net Ok9eP67cfr5c midspan
    ~lack 77.125.57.70 Me9mW79vqr1v dry
    ~rebuilt dsl-58-7-94-224.wa.westnet.com.au Ds9xP09dbh1o sequence
    ~gorozone c-24-13-41-80.hsd1.il.comcast.net Nb9pJ62flk7a -= sa ma sugi =-
    ~part 66-169-137-137.dhcp.ftwo.tx.charter.com Tn9dL97qru6i --== o belesc la cald ==--
    uwrgfomn pool-71-115-209-60.spknwa.dsl-w.verizon.net Tq9hZ06dsb1x En1sS73juj5ey
    oxksunbgor pool-71-115-209-60.spknwa.dsl-w.verizon.net No9rB35udc5x En1sS73juj5ey
    ~brok CPE-24-208-123-124.kc.res.rr.com Vc9lF12kuw7x i'm not here!!
    sqytkuoiho ip68-10-56-132.rn.hr.cox.net Sj9qG45ehs9t Sc9dK77vvm6rc
    ~poor d211-31-254-10.dsl.nsw.optusnet.com.au Tb9rZ05xdm0p deduce
    ~fasione cpe-98-28-100-144.columbus.res.rr.com Sn9eK64oqc6o -= dnd =-
    ~ambiguity adsl-68-88-75-121.dsl.rcsntx.swbell.net Ka9xG91qho9i christen
    ~arguable adsl-68-88-75-121.dsl.rcsntx.swbell.net Al9jD91gui2h christen
    ~sanctity 75-121-98-173.dyn.centurytel.net Ou9aW83pob1p depression
    europium adsl-75-35-108-188.dsl.pltn13.sbcglobal.net Vd9pK50ixs1w Hattie
    ~custodial c-98-196-94-59.hsd1.tx.comcast.net Zo9gF42bzr5k circle
    ~alone ppp161.ac1.56k.execulink.com Go9kK99xmw7u -= Te Quiero Mucho Mi Amor Cristina ! =-
    ~disadvant 207-244-172-225-dhcp.mia.fl.atlanticbb.net Ut9xL36lae8q gum
    ~salient pool-71-178-163-33.washdc.fios.verizon.net Fl9hI98wie7y aboriginal
    ~east c-68-49-189-206.hsd1.va.comcast.net Bp9sM76pmt5n predomination
    ~styli h83.32.16.98.ip.alltel.net Ux9jV22ymp8t unaffected
    ~zmzmcoqm 75-104-86-154.cust.wildblue.net Rh9dD79ysi1e Cn7nM59nmi8cc
    ~gione h222.198.20.98.ip.windstream.net Ys9zO71usv3t -= vai de pula ta =-
    ~adyone adsl-163-148-80.mia.bellsouth.net Ta9bH04wdi6g -= Esti sclav =-
    ~committee 66.232.219.134 Lv9wZ39arh3a debenture
    ~axial ppp-71-137-213-188.dsl.scrm01.pacbell.net Qv9uT71sjo5d messiest
    mhpubblhgd adsl-072-156-094-226.sip.asm.bellsouth.net Hr9tS70hke4m Cl9lY20pjg0oz
    ~goard ip68-105-50-12.no.no.cox.net Ut9lX09kmw2b Te fut in cur cu sange in pula
    ~irione 250.84-234-252.customer.lyse.net Yt9iK93wce0k -= faci o mufa ? =-
    ~incisive CPE-65-29-35-104.wi.res.rr.com Bl9nZ93uyd8z solo
    ~valione 250.84-234-252.customer.lyse.net Gg9pO89wsx6t -= faci o mufa ? =-
    ~edi c-76-107-156-24.hsd1.ms.comcast.net Ng9sC63zol8a brb sug pula
    ~inexpensi adsl-75-17-163-210.dsl.irvnca.sbcglobal.net Bu9xI92kur3r daily
    ~drone 207-172-127-29.c3-0.upd-ubr1.trpr-upd.pa.cable.rcn.com Zw9tI57tek2o -= tarfa =-
    ~Victoria c-67-168-175-112.hsd1.wa.comcast.net Gm9sO65dke6c /msg x help ? ;¬)
    ~geese bas1-toronto02-1242320833.dsl.bell.ca Ii9bC62gbb6a ,Computer
    ~upload cpe-65-28-129-3.bak.res.rr.com Ht9rH15tlb6o levied
    ~curva ip68-105-50-12.no.no.cox.net Bj9pE60hxl3o Bag pula-n gura matii
    ~user bas4-stcatharines10-1279409141.dsl.bell.ca Id9iF62mqd8k Silence I Kill You ;¬)
    ~join 12-208-36-199.client.mchsi.com Fl9lC62mme3n i'm not here!!
    ~shef client-67-58-226-241.consolidated.net Zi9oR52yqq7m Victor Hugo
    ~dyne 75-134-214-123.dhcp.trcy.mi.charter.com Rr9iF71rub3m bronze
    ~inquisiti c-68-57-149-132.hsd1.va.comcast.net Rk9gL42noe8a apprise
    xxl 66-168-19-57.dhcp.mdsn.wi.charter.com Jl9tR72agu3t ai vrea ? sau ti-ai dorii ;¬)
    ~purgatory 75-134-214-123.dhcp.trcy.mi.charter.com Mf9rP76gge0s adversity
    ~erg c-24-99-44-165.hsd1.ga.comcast.net Tg9dD35vnp6d delineate
    ~wiry 75-138-51-169.dhcp.gnvl.sc.charter.com Dq9wY35mgz5c shiver
    ~defect 75-170-52-179.eugn.qwest.net Hl9fZ66gom9b asleep
    ~befall max442.arpa1.caltel.com Ps9lD19wgn0g gilt
    ~andreione c-71-200-28-136.hsd1.de.comcast.net Ri9yL74fcj0e -= daca iti dau maxsendq te superi ? =-
    ~server pool-70-21-242-230.nwrk.east.verizon.net Fi9xC29hzg2s Germany
    ~zforhfrp sun25.ouhk.edu.hk Xg9kC92iwt1f So1vC17jbx5zo
    ~dog c-76-118-99-249.hsd1.ma.comcast.net Px9gC31xqs1p ai vrea ? sau ti-ai dorii ;¬)
    ~calm cpe-75-82-203-239.socal.res.rr.com Iz9mE94lrg5l simulator
    ~sponsor cpe-75-82-203-239.socal.res.rr.com Ju9iL66blz6j arachnid
    ~cite rrcs-70-61-117-58.midsouth.biz.rr.com Bs9gN51iwc4u decomposition
    ~uywhnxht CPE00045a6ebb52-CM001947572c28.cpe.net.cable.rogers.com Bq9lW56tdy1p An8nU67qpg9xu
    avtkodve c-69-139-124-204.hsd1.ky.comcast.net Um9vI14zsz9p Oh1vS33drf4ps
    ~octet 72.24.12.42 Ju9bG37kwb2r certifier
    ??9????????? End of /WHO list.

The Funny Part is that i only typed /who ??9????????? n%nuhr
you could check these too..
/who ??1????????? n%nuhr
/who ??2????????? n%nuhr
/who ??3????????? n%nuhr
/who ??4????????? n%nuhr
/who ??5????????? n%nuhr
/who ??6????????? n%nuhr
/who ??7????????? n%nuhr
/who ??8????????? n%nuhr


Does The fact that all these Drones are Actually Connected to Undernet, is making some people realise that we need to DO SOMETHING!!!

Just Listen To The Guy(SanitariuM), while pretending that everything is gonna be ok...

Again, This is only a suggestion :p


Thnx, XploreR :alien:



_________________
Image
Go to hell with your questions, my time is done here.
It was fun, but this network is sooooo corrupted by morons, its not worth it.
Offline
  
 
 Post subject: Re: Undernet Drones
PostPosted: Thu Feb 21, 2008 4:54 am 

Joined: Tue Jan 03, 2006 7:02 am
Posts: 42
That's the drone net I mentioned in my very first post on this thread, Xplorer...

With the tools that I mention in that first post, this is how I would handle that large botnet :

.find -rn /^[A-Z][a-z]\d[a-z][A-Z]\d\d[a-z]{3}\d[a-z]$/ -g 259200 Gline Reason Here

And poof, in about 3 seconds, that entire net would be offline. 0 Human casualties.

For future ones that connect :

.regex add positive /^[A-Z][a-z]\d[a-z][A-Z]\d\d[a-z]{3}\d[a-z]!/ 259200 Gline Reason Here

Boom shaka laka, you'll never see another one again until the abuser changes the pattern.
And ya know what, most of all botnets you'll see are idiots using other people's virus code.
They're your average script kiddie, who hasn't a clue how to change the pattern.
Having lost their entire year's worth of work, most will just give up and leave IRC.

259200 in those 2 commands means 259200 seconds, 3 days.
-rn in the find command means search (n)ick field using (r)egex
.find is part of a network search tool that lets you search with multiple parameters

.find -rn /\d{3}/ -c #floodedchan -a 0 -o 300

That'd list all nicks with 3 numbers in the name, who have visited #floodedchan, are not logged into x (authed), and been connected less than 300 seconds. Just a basic example assuming someone used numbers in the floodnicks.

You look at the results, verify visually for any humans, and if not :

.find -rn /\d{3}/ -c #floodedchan -a 0 -o 300 -g 259200 Flooding will not be tolerated on this network.

Ok folks... it's serious this easy.. I've written an entire network protection script in mIRC that does all of this and more.
Coders can write this directly in the IRCu, they can make pseudo-servers, they can create another service like euworld, they can code eggdrop TCL's to do it globally or per-server! Pick your route... but stop telling me it can't be done.


Last edited by SeeknDestroy on Thu Feb 21, 2008 5:17 am, edited 1 time in total.

Offline
  
 
 Post subject: Re: Undernet Drones
PostPosted: Thu Feb 21, 2008 5:14 am 
User avatar

Joined: Mon Jun 04, 2007 1:06 am
Posts: 182
Location: Behind You!
Man, i really don't know why we don't have you as an oper...

You should think about getting a server linked here :p :baaa:



_________________
Image
Go to hell with your questions, my time is done here.
It was fun, but this network is sooooo corrupted by morons, its not worth it.
Offline
  
 
 Post subject: Re: Undernet Drones
PostPosted: Thu Feb 21, 2008 5:28 am 
User avatar

Joined: Mon Jun 04, 2007 1:06 am
Posts: 182
Location: Behind You!
SeeknDestroy wrote:
That's the drone net I mentioned in my very first post on this thread, Xplorer...



Well Thats exactly th point here .... i know you'r right, and i know no one really cares, and i am ready to bet that the admins, will not gline these bots, and you wanna know why??, UNDERNET is now the #2 biggest irc network, and they don't want to become #4..

And before replying to this message, think about it twice ....



_________________
Image
Go to hell with your questions, my time is done here.
It was fun, but this network is sooooo corrupted by morons, its not worth it.
Offline
  
 
 Post subject: Re: Undernet Drones
PostPosted: Thu Feb 21, 2008 6:41 am 

Joined: Tue Jan 03, 2006 7:02 am
Posts: 42
That's about all it is too, they choose quantity over quality.

This network was built on users. I've been here since I was 12 and I'm 25 now.
IRC wasn't the same back then as it is now. Sure there was alot of file trading going on,
but the overall percentage of viruses and infected machines on the network was nothing
like it is today.

Mitko, who's been on this network forever, said in a post on another thread in this section,
that he estimates 40% of this network is now drones and bots.

40% of 100,000 is 40,000 people.

There's networks out there that'll put artificial clones on their network to inflate the size...
But allowing spambots and floodbots to stay on the network just to seem bigger? WTF!

MILLIONS of spams get sent out by spambots every year.
Tens of thousands if not more get infected.
These are things you can apply simple regex filters to and help protect your users.
Instead you make 30,000 channels have to load programs to protect their channels.

And the ones that are online that you don't see spamming or flooding?
You think of those as harmless do ya? Not hurting you huh?!

Those are the WORST OF ALL.
Those are the ones that are scanning netblocks, finding exploits, and messaging hidden control channels where exploitable IPS flow like water.
Oh yeah, don't forget the ones that are running trojan keyloggers that are stealing usernames, passwords, bank information, credit card info, and outputting to a hidden control channel for a central output base for logging.

And OMG, how could I forget the credit card trading channels?!
How many of those ya got?

Your age old policy of an unmoderated medium allows you to continue to claim ignorance on that too.
There is no good reason you shouldn't go in there RIGHT NOW and gline every damn user in there for a MONTH.
Close and lockdown the damn channel.
Make your message LOUD AND CLEAR.
If they come back and make another channel, you'll find it again, and do it again.
It takes time and work, but allowing your network to be freely used for illegal activity is UNACCEPTABLE!!!!

Stop with the damn ignorance and change with the times.


Offline
  
 
 Post subject: Re: Undernet Drones
PostPosted: Thu Feb 21, 2008 11:57 am 
User avatar

Joined: Sun Aug 01, 2004 9:22 pm
Posts: 639
Location: Backyard
you stress too much and for what? :) nobody will ever do anything except the fact to tell you that we gonna work on it.

If those who are in charge and they would've cared they would've done long way back ago, something.


Erm, i mean they gonna work it out.



_________________
"A wise man writes down what he thinks, a stupid man forgets what he thinks, a complete idiot punishes himself for what he thinks."
Offline
  
 
 Post subject: Re: Undernet Drones
PostPosted: Thu Feb 21, 2008 12:43 pm 
Forum Moderator
User avatar

Joined: Fri Nov 19, 2004 9:51 pm
Posts: 594
Location: Europe
Don't ask why, where, when, who and how. I am going to mention some info that might be private (unless it was already said in public). Some people from here probably know how I was helping Undernet (regarding drones) till 1 year and a half ago when I stopped using IRC everyday.

Btw, I wanna make a note about those 40% that SanitariuM (SeeknDestroy) mentioned: in those 40% are included drones, bots (eggdrops, emeches, darkbots, etc), mirc bots, and fake clients with female nicks used for invite which are registered to X (anyway just the drones are "our" target in this thread).

Now back to the subject: when I was helping Undernet, there were opered bots scanning every connection to their server based on regex pattern, but there were TWO big problems with it. One of them was: the glines were local, and not all servers were running these opered bots, so the drones were evading the glines simply by connecting to another Undernet server. The second problem was: new regex patterns that were really accurate were not added to the opered bots.

So, even if some server admins want to prevent the drones from connecting to Undernet, the top level administration doesn't want it (for now). I am sure that a real reason doesn't exist, it's stupid or it might be simply because of laziness, nothing more or less. EVEN if some server admins and opers want to help Undernet by preventing the drones to connect, they are simply limited by the Undernet politics made by the Undernet top level administration. Full stop.



_________________
Dimitar Tnokovski aka Mitko
Image
Offline
  
 
 Post subject: Re: Undernet Drones
PostPosted: Fri Feb 22, 2008 12:50 am 
User avatar

Joined: Thu Aug 11, 2005 7:27 pm
Posts: 12
Location: Massachusetts, USA
While we agree that there isn't much being done in the way of efficient removal of drones from the network, it would be bad to cast a shadow on ALL admins. There ARE admins out there that do care, but their hands are tied due to Undernet politics. We can only hope, by having this discussion that it opens the eyes of the top level administration that Mitko so kindly spoke of, and actually come to the table to address the issue to the USERS satisfaction.

After all, Undernet is for the users, not some place to gain prestige, or political influence. If it has become that, then Undernet is doomed to being nothing more than a drone filled, virus filled place, known not only for it's size of the network, but also known as a network that is complacent when it comes to providing the USERS with a place where they can enjoy their IRC experience, without having to worry about being infected, or dealing with drones on a daily basis.

It comes down to one simple thing.

Action.



_________________
-Crayon
Offline
  
 
 Post subject: Re: Undernet Drones
PostPosted: Mon Feb 25, 2008 5:58 pm 

Joined: Tue Jan 03, 2006 7:02 am
Posts: 42
And..... ACTION! Argh! Seems the ACTION key must be broken.

As has been said, some servers are trying to do the right thing here.
I'd like to know who each and every one of those servers are.
Which servers are NOT doing the right thing?
It only takes one of you (servers) to make the efforts of the rest useless.

If you have any knowledge about the individual servers, please send a message and let me know.
I think I'll probably simulate each of the types I discussed on this thread on each server and record the results.
My next post should contain a pass/fail list for each server for each common drone type.


Offline
  
 
 Post subject: Re: Undernet Drones
PostPosted: Tue Feb 26, 2008 11:19 pm 
Senior Cservice Admin
User avatar

Joined: Sun Jul 06, 2003 2:47 am
Posts: 564
Location: Hamilton, New Zealand
Drones are a symptom, not the cause of the problem, Undernet chooses to fight the cause, this thread is focussing on the symptom, the cause is the machines are hacked, doesn't matter what you do to fight the symptom, the drones will come back, because the hackers still have access to the hacked computers and it wont take much for them to fix the drones to evade the g-lines, how about instead of wasting time on the symptom you start looking at the cause, the hackers and the hacked machines.


Last edited by xplora on Wed Feb 27, 2008 12:20 am, edited 1 time in total.


_________________
xplora @ undernet.org
Past Co-ordinator
Undernet Channel Services Committee
Offline
  
 
 Post subject: Re: Undernet Drones
PostPosted: Wed Feb 27, 2008 12:00 am 
Forum Moderator
User avatar

Joined: Fri Nov 19, 2004 9:51 pm
Posts: 594
Location: Europe
xplora wrote:
Drones are a symptom, not the cause of the problem, Undernet chooses to fight the cause, you guys are focussing on the symptom, the cause is the machines are hacked, doesn't matter what you do to fight the symptom, the drones will come back, because the hackers still have access to the hacked computers and it wont take much for them to fix the drones to evade the g-lines, how about instead of wasting time on the symptom you start looking at the cause, the hackers and the hacked machines.


Please define "you guys". I was part of the team which was cleaning the infected/hacked machines so believe me I know how it works. Some drones are cleanable remotely, even via IRC. The cleaning process even included sending a message to the infected box so the owner can read it and do specific things in order to keep safe in future.

In order to asure you that you're informed correctly, 70% of the team were opers, admins, and senior cservice admins. Maybe you know about what secret team I'm talking about and maybe you don't, but that's not the subject of the discussion.

So, continuing: there are some types of drones that cannot be cleaned or controlled via IRC, or to be more specific: from Undernet, where they connect to. Those are the drones that have to be g-lined, and there are acurate patterns to match that. Ok, I don't wanna repeat my last post, so re-read that one again.

Also SeeknDestroy mentioned that most of the drones are set up by kiddies that know how to change the network and channels, nothing more or less, they don't know how to "fix the drones to evade the g-lines".

So please don't try that to me, if you do it then you really picked a wrong person to tell about the cause and the symptom related to drones.


Best Regards.



_________________
Dimitar Tnokovski aka Mitko
Image
Offline
  
 
 Page 4 of 10 [ 144 posts ]  Go to page Previous  1, 2, 3, 4, 5, 6, 7 ... 10  Next

All times are UTC [ DST ]


Who is online

Users browsing this forum: Bing [Bot] and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to: