List of messages from spamming bots
Yesterday spamming bots sent by users of irc.supernets.org to
advertise said network annoyed me and my firends on all networks i am on.
Today (5 jul 2023) when i've loaded my irc client i've seen that 19
of those bots have messaged me. I've decided to document them.
Those bots have specific behavior. They join channel, send one of banners listed below,
and ping every user of channel. This in addition to being annoying floods channels and loads servers.
I've gone on a trip into said network, copule of flooded channels full of asciiart bots, and a netsplit,
Thanks to Alpha on chatspike#inspircd i have code that generates those nicks:
prefix = random.choice(['st','sn','cr','pl','pr','fr','fl','qu','br','gr','sh','sk','tr','kl','wr','bl']+list('bcdfgklmnprstvwz'))
midfix = random.choice(('aeiou'))+random.choice(('aeiou'))+random.choice(('bcdfgklmnprstvwz'))
suffix = random.choice(['ed','est','er','le','ly','y','ies','iest','ian','ion','est','ing','led','inger']+list('abcdfgklmnprstvwz'))
return prefix+midfix+suffix
i've took my time to make a regexp to match those usernames, here it is:
[(st)(sn)(cr)(pl)(pr)(fr)(fl)(qu)(br)(gr)(sh)(sk)(tr)(kl)(wr)(bl)bcdfgklmnprstvwz][aeiou][aeiou][bcdfgklmnprstvwz][(ed)(est)(er)(le)(ly)(y)(ies)(iest)(ian)(ion)(est)(ing)(led)(inger)abcdfgklmnprstvwz]
UPDATE: as for now 1 Oct 2023 this regexp is irrevelant, they have changed their username generating scheme, we're working on a new solution right now.
UPDATE: now (1 Oct 2023 just later) i belive we've found two solutions:
- disabling port 6667, this is what LibertaCasa uses
- notnull on anarchyplanet have blocked bots that were joining via TOR by banning bots that have realname "Hello..!"
NOTE: due to nicks being autogenerated i've decided to stop collecting them and delete them all, since collecting them has no purporse in such case.
THIS NETWORK IS BLOWJOBS! GET ON SUPERNETS FOR COLD HARD CHATS NOW
SURF\'S UP FAGGOT GET ON IRC.SUPERNETS.ORG
looks like a new version of same message
IRC.SUPERNETS.ORG #SUPERBOWL AMERICA #1 FUCK YOUR SHITASS COUNTRY
IRC.SUPERNETS.ORG #SUPERBOWL BEST IRC NETWORK FUCK YOUR NETWORK
goatse
crab
hey, how are u guys doing?
MR_CHATS INVITES YOU