|
|
| Author |
Message |
EcKstasy
Lurker
Joined: 23 May 2008
Posts: 149
Location: Scotland
|
 Posted: Aug 28, 2008 6:41pm Post subject: Weird bot, don't think anyone has seen it (Yet) |
 |
|
Was looking around my network one day, and saw a few connections with the nick 'shand0ra_' the IP always starts with 151.xx... Tho the ips are not resolvable, and its different ips everytime just starting with 151, It connects everyday at that same time, I thought I'd add a spamfilter for it, its ident is "sound"
Anyone know what sort of bot this is? |
|
| Back to top |
|
 |
PingBad
Guru
Joined: 05 Feb 2005
Posts: 2096
Location: New Zealand
|
| Posted: Aug 28, 2008 9:59pm Post subject: |
|
|
| have you used DomainTools to find the leasee of the IP concerned? That might provide some insight into the source, and intent, of the bot - it could be another crawler, or totally harmless. |
|
| Back to top |
|
|
Smithsonian
none
Joined: 15 Aug 2007
Posts: 8
|
| Posted: Aug 29, 2008 12:11am Post subject: |
|
|
| http://nwtools.com is good too. Use the network lookup setting. |
|
| Back to top |
|
|
EcKstasy
Lurker
Joined: 23 May 2008
Posts: 149
Location: Scotland
|
| Posted: Aug 29, 2008 4:49am Post subject: |
|
|
"Italy, Iunet-bnet"
with 15 hops, strange, I've also seen it join a channel called ##shand0ra##
but it only connects for, 1-2 minutes then its away.
It's like its some bot collecting data from the server, but its strange to join a channel called ##shand0ra##, and we know the double hashes don't show in the /list  |
|
| Back to top |
|
|
Jobe
Idler
Joined: 30 Jul 2006
Posts: 381
Location: Lurking in the shadows of some random channel!
|
| Posted: Aug 29, 2008 7:42am Post subject: |
|
|
| EcKstasy wrote: | | and we know the double hashes don't show in the /list |
Actually that's just a quirk of mIRC
double #'s show in /list in almost, if not every other IRC client. the ONLY way to hide a channel from /list is with +s or +p. |
|
| Back to top |
|
|
greg27
Lurker
Joined: 07 Oct 2006
Posts: 178
Location: Australia
|
| Posted: Aug 29, 2008 9:11am Post subject: |
|
|
| mirc has an odd 'feature' of not displaying channels in /list with non-alphanumeric characters in the channel name by default. you can change this by right-clicking in the list window, choosing "list options..." and unticking "hide non-text channels". |
|
| Back to top |
|
|
EcKstasy
Lurker
Joined: 23 May 2008
Posts: 149
Location: Scotland
|
| Posted: Aug 29, 2008 9:20am Post subject: |
|
|
| Jobe wrote: |
Actually that's just a quirk of mIRC
|
mIRC, irssi, bitchx, IceChat, IRCle, Konversation, KVIrc, Mibbit, Pidgin, PJIRC, XChat.. the list goes on, i tested it  |
|
| Back to top |
|
|
katsklaw
Guru
Joined: 28 Jun 2004
Posts: 1122
|
| Posted: Aug 29, 2008 9:25am Post subject: |
|
|
| greg27 wrote: | | mirc has an odd 'feature' of not displaying channels in /list with non-alphanumeric characters in the channel name by default. you can change this by right-clicking in the list window, choosing "list options..." and unticking "hide non-text channels". |
It goes farther than that. mIRC has long running known issues with the list command. The work around is very simple, that is use /quote list instead of /list You can easily make an alias for list: I think it's /alias list .quote list $1-. I made that alias about 10 years ago and my mIRC always shows the correct list, even with double ##'s.
The thing to remember is that the ## is NOT in the protocol as a method to hide a channel, the only official way is chanmode +s or +p. Anything else would either be built into the ircd or a bug in the client. |
|
| Back to top |
|
|
Jobe
Idler
Joined: 30 Jul 2006
Posts: 381
Location: Lurking in the shadows of some random channel!
|
| Posted: Aug 29, 2008 10:20am Post subject: |
|
|
| EcKstasy wrote: | | mIRC, irssi, bitchx, IceChat, IRCle, Konversation, KVIrc, Mibbit, Pidgin, PJIRC, XChat.. the list goes on, i tested it |
I use irssi and PJIRC, neither hide double # channels.
Just tested it myself, and can provide screen shots too.
They also show when you type /list in xchat too.
With mIRC there is an option to show them, so not so much a bug more of a feature. |
|
| Back to top |
|
|
Nerdanel
none
Joined: 11 Jun 2008
Posts: 21
|
| Posted: Aug 29, 2008 4:12pm Post subject: |
|
|
| The list alias did absolutely nothing in my mIRC, it still shows some channels as *. |
|
| Back to top |
|
|
katsklaw
Guru
Joined: 28 Jun 2004
Posts: 1122
|
| Posted: Aug 29, 2008 4:16pm Post subject: |
|
|
| Nerdanel wrote: | | The list alias did absolutely nothing in my mIRC, it still shows some channels as *. |
Those channels are chanmode +p and you will not be able to see them in any client unless you are an IRCop, and even then only in some cases. |
|
| Back to top |
|
|
|
Register
Log in
