More damn bots.....

Maxx · Guest

First it was fizzer bots, and we dealt with them.
Then came the "fyle" spambots, and we dealt with them.
Now tonite, we've started seeing a whole new rash of connections on our network. What's odd is that it shows up in our stats channel (Neostats) but they don't show up in any oper status windows in the mIRC client.

Here's an example:

[21:46:04] <StatServ> ServerKill: chat.twyster.net Has Killed sbib for (sbib(?) <- stats.twyster.net)
[21:51:05] <StatServ> ServerKill: chat.twyster.net Has Killed pidc for (pidc(?) <- stats.twyster.net)
[22:02:42] <StatServ> ServerKill: chat.twyster.net Has Killed odqp for (odqp(?) <- stats.twyster.net)

They're connecting about every four to five minutes.

Anyone else seeing this?

TIA

Maxx
NetAdmin
chat.twyster.net

anifinder · none Joined: 14 Oct 2003 Posts: 28

(I had typed out a lengthier reply, but I had messed up my cookies.)

Basically, NeoStats is doing those kills because it doesn't know who those clients are. Think of it like your friend starting a conversation with you, but he doesn't explain who he/she's talking about.
Friend: "So James and I were..."
You: "Wait, who is James? Start over."
Killing the client is NeoStats' way of telling the IRC server to 'start over' and explain exactly who the client it was talking about was. This usually fixes any desync issues.

However, you said there are numbers of these coming on every few minutes. They sound like bots of some type. Rest assured, however, that since you aren't seeing a connection notice on your end, those bots aren't able to do anything on your server. You should keep your eyes peeled and see if you can glean any more information.