Advertisement
Guest User

Untitled

a guest
May 1st, 2017
537
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.57 KB | None | 0 0
  1. A user messaged me about a supposed kline and/or gline.
  2. I checked the bans and I couldn't find a local kline on irc.paraphysics.net or a gline.
  3. The user was directed to me by Hndlwcare solely based upon what I said on the operwall.
  4. This is blatent operwall leak and should not be tolerated.
  5. I didn't place or even support the ban in question. The ban was a local kline on irc.prison.net, a server that Hndlwcare opers on!
  6.  
  7. Here is a little background on the incident.
  8.  
  9. ---
  10. There were several ipv6 glines requested by nyt that I supported that were for clones/drones in #bot
  11.  
  12. Glines:
  13. [07:57] >>> ho GREQ 1 efnet nyt (nyt@co.mmunist.cn) [irc.ipv6.he.net] *@2001:470:1f05:388::/64 drones
  14. [07:57] >>> ho GREQ 2 efnet nyt (nyt@co.mmunist.cn) [irc.ipv6.he.net] *@2001:5c0:1504:b200::/64 drones
  15. [07:58] >>> ho GREQ 3 efnet nyt (nyt@co.mmunist.cn) [irc.ipv6.he.net] *@2a01:48:224::/48 drones
  16. [07:58] >>> ho GREQ 4 efnet nyt (nyt@co.mmunist.cn) [irc.ipv6.he.net] *@2001:470:83bd:300::/64 drones
  17. [08:00] >>> ho GREQ 5 efnet nyt (nyt@co.mmunist.cn) [irc.ipv6.he.net] *@2001:470:83bd::/48 dronessss
  18. [08:01] >>> ho GREQ 6 efnet nyt (nyt@co.mmunist.cn) [irc.ipv6.he.net] *@2001:470:1f01:152::/64 more drones
  19. [08:01] >>> ho GREQ 7 efnet nyt (nyt@co.mmunist.cn) [irc.ipv6.he.net] *@2a01:48:209::/48 more drones
  20. [08:02] >>> ho GREQ 8 efnet nyt (nyt@co.mmunist.cn) [irc.ipv6.he.net] *@2001:470:a832::/48 more drones
  21.  
  22. nyt said after the bans, "[08:06] [ nyt] anyway cleared outmost of the v6 i think, someone else can go check the v4 crap"
  23.  
  24. So I went an operspy who #bot and saw several ipv4 clients.. The first client I saw looked like an innocent client.
  25.  
  26. I did a test mask on the /24, Then I did a whois on the IP that the client was connected do and noticed it was for Awknet, a shell company.
  27. [08:08] [ physher1] well, 1st one I checked in v4.. >>> 1 54 *!*@69.42.220.0/24 but thats a shell co
  28.  
  29. ---
  30. Here are the operwall logs:
  31.  
  32. [08:06] [ nyt] tservs
  33. [08:06] [ nyt] or something
  34. [08:06] [ nyt] anyway cleared outmost of the v6 i think, someone else can go check the v4 crap
  35. [08:07] [ physher1] what were they doing?
  36. [08:07] [ nyt] saw a ton of em connecting all at once
  37. [08:07] [ Trancer] idented?
  38. [08:07] [ Trancer] 50 clients on that /24
  39. [08:07] [ nyt] then joining #bots
  40. [08:08] [ physher1] well, 1st one I checked in v4.. >>> 1 54 *!*@69.42.220.0/24 but thats a shell co
  41. [08:08] [ nyt] they shit with spider names spread across that /24 in there
  42. [08:09] [ nyt] think they're parting them for faer of getting glined
  43. [08:11] [ nyt] anyway, gotta run
  44. [08:11] [ physher1] have fun storming the castle
  45.  
  46. ---
  47. Here is the message transcript:
  48.  
  49. 21:05 <Matt-> Hey, HndlWCare suggested I come to you about my IPs being klined/glined here. The two ranges are: 69.42.220.* and 69.42.221.*. If you could give me any more information that would be great :)
  50. 08:13 <physher1> they were grouped with a bunch of drone/clone bots
  51. 08:13 <physher1> I didn't see them glined though
  52. 08:15 <physher1> do you have any connection logs showing the gline or kline ?
  53. 09:02 <Matt-> 07:03 -!- Irssi: Connection to irc.prison.net established
  54. 09:02 <Matt-> 07:03 -!- ERROR *** Banned: clones/drones (2010/1/28 10.13)
  55. 09:02 <Matt-> 07:03 -!- Irssi: Connection lost to irc.prison.net
  56. 09:06 <physher1> ok, did you try another server?
  57. 09:11 <physher1> [09:09] <@moon> ive met people irl in this channel
  58. 09:11 <physher1> oops
  59. 09:18 <Matt-> yea, it seems to be just that one
  60. 09:18 <physher1> no hndlwcare should have directed you to himself.. since he is an oper on irc.prison.net
  61. 09:18 <physher1> so*
  62. 09:19 <physher1> your bans have nothing to do with me.
  63. 09:19 <Matt-> oh, dies on irc.easynews.com too
  64. 09:19 <physher1> dies?
  65. 09:19 <physher1> try /server irc.paraphysics.net
  66. 09:19 <Matt-> disconnects
  67. 09:19 <Matt-> sec
  68. 09:19 <physher1> disconnect != ban
  69. 09:19 <Matt-> 07:20 -!- ERROR Closing Link: 127.0.0.1 (You are not authorised to use this
  70. 09:19 <Matt-> server)
  71. 09:19 <Matt-> 07:20 -!- Irssi: Connection lost to irc.easynews.com
  72. 09:20 <Matt-> works fine on irc.paraphysics.net
  73. 09:20 <physher1> so you aren't glined.
  74. 09:20 <Matt-> He sent me to you, because the report came from you
  75. 09:23 <physher1> are you still banned on irc.prison.net?
  76. 09:24 <Matt-> yea
  77. 09:24 <physher1> can you paste me the connect message ?
  78. 09:24 <Matt-> 07:25 [prison] -!- Irssi: Connection to irc.prison.net established
  79. 09:24 <Matt-> 07:25 [prison] -!- ERROR *** Banned: clones/drones (2010/1/28 10.13)
  80. 09:24 <Matt-> 07:25 -!- Irssi: Connection lost to irc.prison.net
  81. 09:24 <physher1> thanks
  82. 09:24 <Matt-> np
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement