Some annoying bots

Jason · Posted: Nov 17, 2003 2:46pm Post subject:

$5 domains @ https://domains.ev1servers.net/cgi-bin/manage.cgi

Mary · SearchIRC Admin Joined: 03 May 2003 Posts: 696

Some networks change over to irc2.yournetname.net when attacked. Its effective at stopping the bots (at least the first round) but any change like that will keep a certain number of users out too... and again its easy to add another server to a servers.ini file.

Michael · none Joined: 18 May 2003 Posts: 48

Hmm, that's a better possibility.

CC · none Joined: 15 Jul 2003 Posts: 6

I have sorted this problem out on my network.
irc.flamenet.za.net

tiko · none Joined: 24 Sep 2003 Posts: 49

Using a 3rd party module for UnrealIRCd, I have been successful in filtering and killing the spam bots. I did this simply because the author is going to change the spam message eventually, and I'm able to update the search string as needed.

Orare · none Joined: 12 May 2003 Posts: 17

We have resolved the problem on our network also.

Howard · none Joined: 16 Nov 2003 Posts: 34

caNcer_b0y · none Joined: 13 Nov 2003 Posts: 11

seeing how tiko has not responded, one thing that we on 7sinz to battle these bots, was tiko coded a "wait period" into nickserv that prevents the bots from registering the nicks.

if gives a 30 second non regitration period, after which it allows registration. as for the 3rd party module. you will need to get that info from tiko. for im not sure what it is Smile

Guest · Posted: Nov 20, 2003 2:57pm Post subject:

The module is called adword, by angrywolf. Look it up.

zeke · Idler Joined: 04 Oct 2003 Posts: 334

slight correction Razz

its called m_adwords or adwords (I had problems searching google for adword - it wouldn't return anything)

http://angrywolf.linktipp.org/modules.php?lang=en Is the page its on.

dbrasco · none Joined: 31 Oct 2003 Posts: 13

just set services to send the user a email with a passcode that must be typed in after they register their name so no bots can register nicks =) anope are good services

simos · none Joined: 21 Nov 2003 Posts: 4

Hi Spambot visit my Network too !
I've find this solution
I've seen that spam bot every time contain this symbol { } and \ and other.
I make a bot IRCop mode +s +16384 ( so it see client connecting )

and i've write in mirc remote this line :

on *:snotice:*: { if ($chr(123) isin $6) { .kill $6 Possible Trojan. } else { halt } }

i'd like add } and \ too but if I write a line like this :
on *:snotice:*: { if ($chr(123) isin $6) | ($chr(125) isin $6) { .kill $6 Possible Trojan. } else { halt } }
don't work ....

anyway, on *:snotice:*: { if ($chr(123) isin $6) { .kill $6 Possible Trojan. } else { halt } } block 80% of spambot attak Wink

Sorry for my bad english
bye Simos

cyberdems · Guest

indeed it got its list from searchirc. It's infested many global networks, and including myne - RSAchat. RSAchat has only been submitted to searchirc...
:/

I made a bot for bahamut that joins -R channels, and when it get's the text "wanna see me on my webcam..." it /kills the nick and MSG NickServ DROPNICK's the nick. IF the text does not match, it sends a kind notice that "this is an anti-spam bot and will not reply".... works like a charm as long as the anti-spam bot doesn't contain "Spam" in its nick, or have ops..

simos · none Joined: 21 Nov 2003 Posts: 4

I use your bot too , but it protect your self , not global network. and you receive private message anyway. Are you talking something like mIRC ed's bot ? right ?

ed · Posted: Nov 21, 2003 7:33am Post subject: