clone attacks

corndawg · none Joined: 14 Mar 2007 Posts: 16

hey folks
bopm wouldnt help with this problem?

dacay · none Joined: 09 Jun 2004 Posts: 35

aye im good with that kind of stuff need my help you can find me at irc.blitzx.net Smile

Ryuki · none Joined: 30 Jun 2007 Posts: 2

i have a network running with hybrid7, and so many clone bot with same host connected to my network, any solutions to protect or limit my network from clone ?
sorry bout my english, i'm an Indonesian
Very Happy

IHNIirc · none Joined: 31 Mar 2010 Posts: 1 Location: Westland, MI

Hey guys, getting alot of botnet attacks lately, i think it might be some script kiddy using muhstik (a program i use for testing) anyway, it renders up legit looking nicks (Ashley, Roman, Pokemon, Pikachu) with thousands of different nicks/idents/realnames to use from a file.
It also uses socks4/5, http, vhosts, etc.
anyway, the point being, there seems to be absolutely no similarities between each clone. On lowbandwidth, this program can generate around 300-500 bots, on a server with high bandwidth, maybe even thousands of bots, depending on the connection speed.

The only possible defense against them seems to be DefCon and good channel modes.
I've recently developed a script for my client that parses out the connecting ip's and dumps them to a file with the nick connecting, the only thing i can do is go through the hundreds of connections to make sure none were legit and gline them all. very hideous task as you could imagine.

I then heard about os_trace, and was told it might help durring the attacks, but I also heard it was a private module. I seen something about it earlier in this thread, but the link lead to a 404, does anybody know where I can pick this module up at? or maybe email it to me at xnite@i-have-no.info ?

greg27 · Idler Joined: 07 Oct 2006 Posts: 255 Location: Australia

Jobe · Posted: May 02, 2010 8:34am Post subject: Re: NEED os_trace