Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- I and the community are greatly appreciative of how quickly and efficiently you handled this, it's awesome to see such a dedicated team behind IRCCloud.
- Thank you for your work, I'll be sure to let you know of any future occurrences.
- Regards,
- [Nerixel]
- ===========================================================
- On 4 May 2016 23:33, "Abuse" <team@irccloud.com> wrote:
- Thanks for the report. They have been banned and IP blocked. Please let us know if they return.
- -----
- IRCCloud abuse response team
- abuse@irccloud.com
- ===========================================================
- [Nerixel] on May 4, 2016 at 1:47am wrote:
- Dear IRCCloud admins,
- We've had a user spamming our three public channels over the last two days:
- #FuelRats
- #RatChat
- #DrillRats
- There have been six instances of this occurring that I've seen, four of which occurred today and I recorded. All times are in UTC+1000, except for the UTC times in the headings, which I've included for your convenience. This is continuing as we speak - I had another instance while drafting this email.
- Note that the spamming is targeted to us, using a trigger word that activates our bot (mechasqueak[BOT]). In addition, most of the regular clients in these channels have a highlight trigger on this word.
- The spammer is caught after about 5 seconds by our flood protection channel mode.
- Instance 1 - 2016-05-03 23:57 UTC
- #FuelRats
- [09:57:42] * mib_5k29mn (uid161677@mib-B19E61E0.highgate.irccloud.com) joins #FuelRats
- [09:57:47] <mib_5k29mn> ratsignal
- [09:57:48] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_5k29mn
- [09:57:48] <mib_5k29mn> ratsignal
- [09:57:48] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_5k29mn
- [09:57:49] <mib_5k29mn> ratsignal
- [09:57:49] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_5k29mn
- [09:57:49] <mib_5k29mn> ratsignal
- [09:57:49] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_5k29mn
- [09:57:50] <mib_5k29mn> ratsignal
- [09:57:50] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_5k29mn
- [09:57:50] * irc.us.mibbit.net sets mode: +b *!*@mib-B19E61E0.highgate.irccloud.com
- [09:57:50] * mib_5k29mn was kicked from #FuelRats by irc.ca.us.mibbit.net (Flooding (Limit is 5 lines per 5 seconds))
- #RatChat
- [09:59:24] * mib_5k29mn (uid161677@mib-B19E61E0.highgate.irccloud.com) joins #RatChat
- [09:59:28] <mib_5k29mn> ratsignal
- [09:59:28] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_5k29mn
- [09:59:28] <mib_5k29mn> ratsignal
- [09:59:29] <mib_5k29mn> ratsignal
- [09:59:29] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_5k29mn
- [09:59:29] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_5k29mn
- [09:59:29] <mib_5k29mn> ratsignal
- [09:59:29] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_5k29mn
- [09:59:30] <mib_5k29mn> ratsignal
- [09:59:30] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_5k29mn
- [09:59:30] * irc.us.mibbit.net sets mode: +b *!*@mib-B19E61E0.highgate.irccloud.com
- [09:59:30] * mib_5k29mn was kicked from #RatChat by irc.ca.us.mibbit.net (Flooding (Limit is 5 lines per 5 seconds))
- #DrillRats
- [10:00:30] * mib_5k29mn (uid161677@mib-B19E61E0.highgate.irccloud.com) joins #DrillRats
- [10:00:34] <mib_5k29mn> ratsignal
- [10:00:35] <mib_5k29mn> ratsignal
- ...
- [10:00:35] <mib_5k29mn> ratsignal
- [10:00:36] <mib_5k29mn> ratsignal
- [10:00:36] <mib_5k29mn> ratsignal
- [10:00:37] * irc.us.mibbit.net sets mode: +b *!*@mib-B19E61E0.highgate.irccloud.com
- [10:00:37] * mib_5k29mn was kicked from #DrillRats by irc.ca.us.mibbit.net (Flooding (Limit is 5 lines per 5 seconds))
- Instance 2 - 2016-05-04 00:05 UTC
- #FuelRats
- [10:05:47] * mib_2n1km (uid161678@mib-FEDBAF07.tooting.irccloud.com) joins #FuelRats
- [10:05:50] <mib_2n1km> ratsignal
- [10:05:50] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2n1km
- [10:05:50] <mib_2n1km> ratsignal
- [10:05:50] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2n1km
- [10:05:51] <mib_2n1km> ratsignal
- [10:05:51] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2n1km
- [10:05:51] <mib_2n1km> ratsignal
- [10:05:51] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2n1km
- ...
- [10:05:52] <mib_2n1km> ratsignal
- [10:05:52] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2n1km
- [10:05:52] * irc.us.mibbit.net sets mode: +b *!*@mib-FEDBAF07.tooting.irccloud.com
- [10:05:52] * mib_2n1km was kicked from #FuelRats by irc.ca.us.mibbit.net (Flooding (Limit is 5 lines per 5 seconds))
- #RatChat
- [10:05:59] * mib_2n1km (uid161678@mib-FEDBAF07.tooting.irccloud.com) joins #RatChat
- ...
- [10:06:02] <mib_2n1km> ratsignal
- [10:06:02] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2n1km
- [10:06:03] <mib_2n1km> ratsignal
- [10:06:03] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2n1km
- [10:06:03] <mib_2n1km> ratsignal
- [10:06:03] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2n1km
- [10:06:03] <mib_2n1km> ratsignal
- [10:06:04] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2n1km
- [10:06:04] <mib_2n1km> ratsignal
- [10:06:04] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2n1km
- [10:06:04] * irc.us.mibbit.net sets mode: +b *!*@mib-FEDBAF07.tooting.irccloud.com
- [10:06:04] * mib_2n1km was kicked from #RatChat by irc.ca.us.mibbit.net (Flooding (Limit is 5 lines per 5 seconds))
- #DrillRats
- [10:06:13] * mib_2n1km (uid161678@mib-FEDBAF07.tooting.irccloud.com) joins #DrillRats
- [10:06:18] <mib_2n1km> ratsignal
- [10:06:18] <mib_2n1km> ratsignal
- [10:06:19] <mib_2n1km> ratsignal
- [10:06:19] <mib_2n1km> ratsignal
- [10:06:20] <mib_2n1km> ratsignal
- [10:06:20] * irc.us.mibbit.net sets mode: +b *!*@mib-FEDBAF07.tooting.irccloud.com
- [10:06:20] * mib_2n1km was kicked from #DrillRats by irc.ca.us.mibbit.net (Flooding (Limit is 5 lines per 5 seconds))
- Instance 3 - 2016-05-04 00:27 UTC
- This time it appears the spammer learned a bit about our flood protection and started trying to overcome it.
- #FuelRats
- [10:27:12] * mib_2k5m3n (uid161680@mib-D11CA0DC.highgate.irccloud.com) joins #FuelRats
- [10:27:27] <mib_2k5m3n> ratsignal
- [10:27:27] <mib_2k5m3n> ratsignal
- [10:27:27] <mib_2k5m3n> ratsignal
- [10:27:27] <mib_2k5m3n> ratsignal
- [10:27:27] <mib_2k5m3n> ratsignal
- [10:27:27] * irc.us.mibbit.net sets mode: +b *!*@mib-D11CA0DC.highgate.irccloud.com
- [10:27:27] * mib_2k5m3n was kicked from #FuelRats by irc.ca.us.mibbit.net (Flooding (Limit is 5 lines per 5 seconds))
- #RatChat
- [10:27:34] * mib_2k5m3n (uid161680@mib-D11CA0DC.highgate.irccloud.com) joins #RatChat
- [10:27:37] <mib_2k5m3n> ratsignal
- [10:27:38] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- ...
- [10:27:38] <mib_2k5m3n> ratsignal
- [10:27:38] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- [10:27:38] <mib_2k5m3n> ratsignal
- [10:27:39] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- [10:27:39] <mib_2k5m3n> ratsignal
- [10:27:39] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- [10:27:39] <mib_2k5m3n> ratsignal
- [10:27:40] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- [10:27:44] <mib_2k5m3n> ratsignal
- [10:27:44] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- [10:27:44] <mib_2k5m3n> ratsignal
- [10:27:44] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- [10:27:44] <mib_2k5m3n> ratsignal
- [10:27:44] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- ...
- [10:27:47] <mib_2k5m3n> ratsignal
- [10:27:47] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- [10:27:47] <mib_2k5m3n> ratsignal
- [10:27:48] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- [10:27:49] <mib_2k5m3n> ratsignal
- [10:27:49] <D0lphin[PC]> you're so lame
- [10:27:49] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- [10:27:50] <mib_2k5m3n> ratsignal
- [10:27:50] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- [10:27:50] <mib_2k5m3n> ratsignal
- [10:27:51] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- [10:27:51] <D0lphin[PC]> go away
- [10:27:52] <mib_2k5m3n> ratsignal
- [10:27:52] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- [10:27:53] <mib_2k5m3n> ratsignal
- [10:27:53] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- [10:27:54] <mib_2k5m3n> ratsignal
- [10:27:54] <%mechasqueak[BOT]> Grabbed 'R@signal' from mib_2k5m3n
- ...
- [10:28:05] <D0lphin[PC]> try harder seriously
- [10:28:15] <D0lphin[PC]> like if that's your idea of fucking with people, get more creative
- [10:28:17] <D0lphin[PC]> you're boring
- [10:28:20] <mib_2k5m3n> ratsignal
- [10:28:20] <mib_2k5m3n> ratsignal
- [10:28:20] <mib_2k5m3n> ratsignal
- [10:28:20] <mib_2k5m3n> ratsignal
- [10:28:20] <mib_2k5m3n> ratsignal
- [10:28:20] * irc.us.mibbit.net sets mode: +b *!*@mib-D11CA0DC.highgate.irccloud.com
- [10:28:20] * mib_2k5m3n was kicked from #RatChat by irc.ca.us.mibbit.net (Flooding (Limit is 5 lines per 5 seconds))
- #DrillRats
- [10:28:42] * mib_2k5m3n (uid161680@mib-D11CA0DC.highgate.irccloud.com) joins #DrillRats
- [10:28:45] <mib_2k5m3n> ratsignal
- [10:28:46] <mib_2k5m3n> ratsignal
- [10:28:47] <mib_2k5m3n> ratsignal
- [10:28:47] <mib_2k5m3n> ratsignal
- [10:28:48] <mib_2k5m3n> ratsignal
- [10:28:48] * irc.us.mibbit.net sets mode: +b *!*@mib-D11CA0DC.highgate.irccloud.com
- [10:28:48] * mib_2k5m3n was kicked from #DrillRats by irc.ca.us.mibbit.net (Flooding (Limit is 5 lines per 5 seconds))
- Instance 4 - 2016-05-04 00:34 UTC
- Note the change of nickname format. This time the spammer attempted to impersonate a known member of our group, "D0lphin[PC]", by using a capital I in place of a lowercase L.
- We suspect the spammer targeted D0lphin specifically because during Instance 3, D0lphin was openly critical of what the spammer was doing. I left his logs in there for your reference (10:28:05 to 10:28:17).
- #FuelRats
- [10:34:56] * d0Iphin[PC] (uid161683@mib-52CE454F.brockwell.irccloud.com) joins #FuelRats
- [10:35:00] <d0Iphin[PC]> ratsignal
- [10:35:01] <%mechasqueak[BOT]> Grabbed 'R@signal' from d0Iphin[PC]
- [10:35:01] <d0Iphin[PC]> ratsignal
- [10:35:01] <%mechasqueak[BOT]> Grabbed 'R@signal' from d0Iphin[PC]
- [10:35:01] <d0Iphin[PC]> ratsignal
- [10:35:02] <%mechasqueak[BOT]> Grabbed 'R@signal' from d0Iphin[PC]
- [10:35:02] <d0Iphin[PC]> ratsignal
- [10:35:02] <%mechasqueak[BOT]> Grabbed 'R@signal' from d0Iphin[PC]
- [10:35:03] <d0Iphin[PC]> ratsignal
- [10:35:03] <%mechasqueak[BOT]> Grabbed 'R@signal' from d0Iphin[PC]
- [10:35:04] * irc.us.mibbit.net sets mode: +b *!*@mib-52CE454F.brockwell.irccloud.com
- [10:35:04] * d0Iphin[PC] was kicked from #FuelRats by irc.ca.us.mibbit.net (Flooding (Limit is 5 lines per 5 seconds))
- #RatChat
- [10:35:12] * d0Iphin[PC] (uid161683@mib-52CE454F.brockwell.irccloud.com) joins #RatChat
- [10:35:15] <d0Iphin[PC]> ratsignal
- [10:35:16] <%mechasqueak[BOT]> Grabbed 'R@signal' from d0Iphin[PC]
- [10:35:16] <d0Iphin[PC]> ratsignal
- [10:35:16] <%mechasqueak[BOT]> Grabbed 'R@signal' from d0Iphin[PC]
- [10:35:17] <d0Iphin[PC]> ratsignal
- [10:35:17] <%mechasqueak[BOT]> Grabbed 'R@signal' from d0Iphin[PC]
- [10:35:17] <d0Iphin[PC]> ratsignal
- [10:35:17] <%mechasqueak[BOT]> Grabbed 'R@signal' from d0Iphin[PC]
- [10:35:17] <d0Iphin[PC]> ratsignal
- [10:35:18] <%mechasqueak[BOT]> Grabbed 'R@signal' from d0Iphin[PC]
- [10:35:18] * irc.us.mibbit.net sets mode: +b *!*@mib-52CE454F.brockwell.irccloud.com
- [10:35:18] * d0Iphin[PC] was kicked from #RatChat by irc.ca.us.mibbit.net (Flooding (Limit is 5 lines per 5 seconds))
- #DrillRats
- [10:35:25] * d0Iphin[PC] (uid161683@mib-52CE454F.brockwell.irccloud.com) joins #DrillRats
- [10:35:27] <d0Iphin[PC]> ratsignal
- [10:35:28] <d0Iphin[PC]> ratsignal
- [10:35:29] <d0Iphin[PC]> ratsignal
- [10:35:29] <d0Iphin[PC]> ratsignal
- [10:35:30] <d0Iphin[PC]> ratsignal
- ...
- [10:35:34] <d0Iphin[PC]> ratsignal
- [10:35:34] <d0Iphin[PC]> ratsignal
- [10:35:34] <d0Iphin[PC]> ratsignal
- [10:35:34] <d0Iphin[PC]> ratsignal
- [10:35:34] <d0Iphin[PC]> ratsignal
- [10:35:34] * irc.us.mibbit.net sets mode: +b *!*@mib-52CE454F.brockwell.irccloud.com
- [10:35:34] * d0Iphin[PC] was kicked from #DrillRats by irc.ca.us.mibbit.net (Flooding (Limit is 5 lines per 5 seconds))
- We would greatly appreciate any assistance you can give us on this matter.
- I am happy to continue forwarding instances to you as they occur, but in the interest of not spamming you with emails I'll just write them down and pass them on at your request
- Regards,
- [Nerixel]
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement