1 <!DOCTYPE HTML PUBLIC
"-//W3C//DTD HTML 3.2//EN">
4 <TITLE> [IRCServices] Attacks on services
6 <LINK REL=
"Index" HREF=
"index.html" >
7 <LINK REL=
"made" HREF=
"mailto:ircservices%40ircservices.za.net?Subject=%5BIRCServices%5D%20Attacks%20on%20services&In-Reply-To=">
8 <META NAME=
"robots" CONTENT=
"index,nofollow">
9 <META http-equiv=
"Content-Type" content=
"text/html; charset=us-ascii">
10 <LINK REL=
"Previous" HREF=
"004547.html">
11 <LINK REL=
"Next" HREF=
"004552.html">
13 <BODY BGCOLOR=
"#ffffff">
14 <H1>[IRCServices] Attacks on services
</H1>
16 <A HREF=
"mailto:ircservices%40ircservices.za.net?Subject=%5BIRCServices%5D%20Attacks%20on%20services&In-Reply-To="
17 TITLE=
"[IRCServices] Attacks on services">irc at teknet.com.tr
19 <I>Tue Jul
27 16:
45:
42 PDT
2004</I>
21 <LI>Previous message:
<A HREF=
"004547.html">[IRCServices] Problem with OperServ
23 <LI>Next message:
<A HREF=
"004552.html">[IRCServices] Attacks on services
25 <LI> <B>Messages sorted by:
</B>
26 <a href=
"date.html#4544">[ date ]
</a>
27 <a href=
"thread.html#4544">[ thread ]
</a>
28 <a href=
"subject.html#4544">[ subject ]
</a>
29 <a href=
"author.html#4544">[ author ]
</a>
34 <PRE>Hi there, my problem is this, services on our server are constantly shut down. When I look at the services logs, I discover that services are shut down by attacks on the services such as this:
35 What can you recommend that we do to prevent this from happening?
37 18:
01:
20 2004] nickserv/main: Yxdxxpu registered by
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">aqtyy at
81.213.125.164</A> (
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">Soxsdr at hotmail.com
</A>)
38 [Jul
27 18:
03:
49 2004] Ignored message from Woofgq:
":Woofgq P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">Gicj at hotmail.com
</A>
39 [Jul
27 18:
03:
49 2004] Ignored message from Woofgq:
":Woofgq P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">Fybfhb at hotmail.com
</A>
40 [Jul
27 18:
03:
49 2004] Ignored message from Woofgq:
":Woofgq P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">Uimfoi at hotmail.com
</A>
41 [Jul
27 18:
03:
49 2004] Ignored message from Woofgq:
":Woofgq P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">Fczmo at hotmail.com
</A>
42 [Jul
27 18:
03:
49 2004] Ignored message from Woofgq:
":Woofgq P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">Svroii at hotmail.com
</A>
43 [Jul
27 18:
03:
49 2004] Ignored message from Woofgq:
":Woofgq P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">BrHotY at hotmail.com
</A>
44 [Jul
27 18:
03:
49 2004] Ignored message from Woofgq:
":Woofgq P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">IMhAQ at hotmail.com
</A>
45 [Jul
27 18:
04:
47 2004] Ignored message from Apmbenml:
":Apmbenml P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">HWtI at h
</A>$
46 [Jul
27 18:
04:
47 2004] Ignored message from Apmbenml:
":Apmbenml P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat Rirlz@$
47 [Jul
27 18:
04:
47 2004] Ignored message from Apmbenml:
":Apmbenml P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat Mzuxyw$
48 [Jul
27 18:
04:
47 2004] Ignored message from Apmbenml:
":Apmbenml P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat Ostoat$
49 [Jul
27 18:
04:
47 2004] Ignored message from Apmbenml:
":Apmbenml P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat Ofjef@$
50 [Jul
27 18:
04:
47 2004] Ignored message from Apmbenml:
":Apmbenml P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">LAtl at h
</A>$
51 [Jul
27 18:
04:
47 2004] Ignored message from Apmbenml:
":Apmbenml P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat Szwvez$
52 [Jul
27 18:
04:
47 2004] Ignored message from Apmbenml:
":Apmbenml P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">Vcdr at h
</A>$
53 Jul
27 18:
05:
04 2004] nickserv/main: Hpml registered by
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">jrccxyt at ti300720a080-
1063.bb.online.no
</A> (
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">Fgwtnnh at hotmail.com
</A>)
54 [Jul
27 18:
05:
25 2004] unknown message from server (:irc.teklan.com.tr
441 ChanServ oTOpSy #bebe
ğim :Odada yoklar)
55 [Jul
27 17:
58:
30 2004] Ignored message from ZrBk:
":ZrBk P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">BPaAmG at hotmail
</A>$
56 [Jul
27 17:
58:
30 2004] Ignored message from ZrBk:
":ZrBk P
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">NickServ at services.teklan.com.tr
</A> :register alitopuat
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">Ymmpnjq at hotmai
</A>$
57 [Jul
27 17:
58:
34 2004] operserv/main: ^^zZz^^: killclones ZrBk
58 [Jul
27 17:
58:
34 2004] operserv/main: KILLCLONES:
3 clone(s) matching *!*@dsl81-
215-
35494.adsl.ttnet.net.tr killed.
59 [Jul
27 17:
58:
35 2004] nickserv/main: user record for ZrBk not found
60 [Jul
27 17:
58:
35 2004] nickserv/main: user record for ZrBk not found
62 As seen in the logs, nicks are entering the server, and using the NickServ command /ns register password
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">email at adres.com
</A> to register the same nick with a different email address.
64 I would really appreciate it if you could help us with this situation.
65 Thank you for your time and help
68 -------------- next part --------------
69 An HTML attachment was scrubbed...
70 URL:
<A HREF=
"../attachments/20040727/83c6de2f/attachment.html">../attachments/
20040727/
83c6de2f/attachment.html
</A>
77 <LI>Previous message:
<A HREF=
"004547.html">[IRCServices] Problem with OperServ
79 <LI>Next message:
<A HREF=
"004552.html">[IRCServices] Attacks on services
81 <LI> <B>Messages sorted by:
</B>
82 <a href=
"date.html#4544">[ date ]
</a>
83 <a href=
"thread.html#4544">[ thread ]
</a>
84 <a href=
"subject.html#4544">[ subject ]
</a>
85 <a href=
"author.html#4544">[ author ]
</a>