ISP reports

Summary:

Example of how SkipIRC uses IP information

ISP report for some spambots

Kufat 29 Jun 2023 16:06

Last night (2023-06-28) SkipIRC user TheRaven mentioned seeing CTCP messages from a couple of bots. Upon further examination I found that there were three bots connecting from the same IP range. I banned the range and emailed the IP range's abuse contact. Since users have asked for more examples of how IP address information is used, I'm sharing this ISP report for transparency reasons. IP addresses were redacted but were almost consecutive.

+E-mail to ISP with details redacted

Hello,

Last night, at least three spambots connected to my IRC network (irc.scpwiki.com, servers keter.nsw.au.irc.scpwiki.com, euclid.ie.eu.irc.scpwiki.com, and safe.oh.us.irc.scpwiki.com; one bot per server) from IPs x.y.z.a, x.y.z.a+1, and x.y.z.a+3. They registered nicknames, attempted to execute /LIST, and sent random CTCP requests to other users. All of them repeatedly changed nicknames to various garbage strings.

I can provide complete logs if needed. I have permanently banned x.y.z.0/24 but wanted to let you know that your network was being misused in this manner.

Best regards,
Kufat
Lead admin, SkipIRC
https://skipirc.miraheze.org/wiki/