Security Incidents mailing list archives

Re: IRC based DoS bot


From: "Martins, Fernando (Lisbon)" <FMartins () PT IMSHEALTH COM>
Date: Thu, 21 Sep 2000 10:23:08 +0200

You just have to mail abuse () undernet org with the logs.
Other option is joining undernet, go to #zt channel and there report the
incident.
You can also type '/who 0 o' to see if there is any ircop around.

The only thing i can add more is that #S2001 is not a registered #

Thu Sep 21 08:20:34 2000 UCT
New Applications
Channel              Submit date                    Serial number

There are no applications matching [S2001].

Applications ready for review
Channel              Submit date                    Serial number

There are no applications matching [S2001].

Accepted Applications
Channel              Submit date                    Serial number

There are no applications matching [S2001].

Rejected Applications
Channel              Submit date                    Serial number

There are no applications matching [S2001].

Applications cancelled by applicant
Channel              Submit date                    Serial number

There are no applications matching [S2001].

More information on undernet can be found at
http://www.cservice.undernet.org

Kind Regards,
Fernando Martins


-----Original Message-----
From: Erik Tayler [SMTP:nine () 14x net]
Sent: Tuesday, September 19, 2000 9:06 PM
To:   INCIDENTS () SECURITYFOCUS COM
Subject:      Re: IRC based DoS bot

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Interesting, after being idle in this channel for a short while,
this happened (sorry, pine wouldn't let me paste the [upper ascii]
parts)

v3n0m [~b0b () modemcable012 171-201-24 mtl mc videotron ca] has
joined #S2001
<v3n0m> [upper ascii]
<v3n0m> kill: [upper ascii]
[v3n0m(~b0b () modemcable012 171-201-24 mtl mc videotron ca)] what are
you doing on #S2001?

You should tell the admins/operators on undernet to watch for the
nick v3n0m. They should have no problem getting his IP address from
their logs/monitoring. People like v3n0m, whoever he/she is, need to
be stopped, they should be thrown in jail for pure stupidity. Since I
have no familiarity of undernet, someone else would be better to
follow through with contacts. The channel #S2001 still exists,
[invite only].

Erik Tayler
http://www.14x.net
http://www.digitaloffense.net

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBOcfHNE0pQlPl0B0AEQLbggCg/efa8l25DAMo6Arm1vpYr0C7/h0Ani0I
pI1rakFz4+5cM3g0iZH4ldDt
=01Qi
-----END PGP SIGNATURE-----


Current thread: