[IRCServices] Attacks on services

Okan Karasoy irc at teknet.com.tr
Tue Jul 27 16:45:42 PDT 2004


Hi there, my problem is this, services on our server are constantly shut down. When I look at the services logs, I discover that services are shut down by attacks on the services such as this:
What can you recommend that we do to prevent this from happening?

18:01:20 2004] nickserv/main: Yxdxxpu registered by aqtyy at 81.213.125.164 (Soxsdr at hotmail.com)
[Jul 27 18:03:49 2004] Ignored message from Woofgq: ":Woofgq P NickServ at services.teklan.com.tr :register alitopuat Gicj at hotmail.com
[Jul 27 18:03:49 2004] Ignored message from Woofgq: ":Woofgq P NickServ at services.teklan.com.tr :register alitopuat Fybfhb at hotmail.com
[Jul 27 18:03:49 2004] Ignored message from Woofgq: ":Woofgq P NickServ at services.teklan.com.tr :register alitopuat Uimfoi at hotmail.com
[Jul 27 18:03:49 2004] Ignored message from Woofgq: ":Woofgq P NickServ at services.teklan.com.tr :register alitopuat Fczmo at hotmail.com
[Jul 27 18:03:49 2004] Ignored message from Woofgq: ":Woofgq P NickServ at services.teklan.com.tr :register alitopuat Svroii at hotmail.com
[Jul 27 18:03:49 2004] Ignored message from Woofgq: ":Woofgq P NickServ at services.teklan.com.tr :register alitopuat BrHotY at hotmail.com
[Jul 27 18:03:49 2004] Ignored message from Woofgq: ":Woofgq P NickServ at services.teklan.com.tr :register alitopuat IMhAQ at hotmail.com
[Jul 27 18:04:47 2004] Ignored message from Apmbenml: ":Apmbenml P NickServ at services.teklan.com.tr :register alitopuat HWtI at h$
[Jul 27 18:04:47 2004] Ignored message from Apmbenml: ":Apmbenml P NickServ at services.teklan.com.tr :register alitopuat Rirlz@$
[Jul 27 18:04:47 2004] Ignored message from Apmbenml: ":Apmbenml P NickServ at services.teklan.com.tr :register alitopuat Mzuxyw$
[Jul 27 18:04:47 2004] Ignored message from Apmbenml: ":Apmbenml P NickServ at services.teklan.com.tr :register alitopuat Ostoat$
[Jul 27 18:04:47 2004] Ignored message from Apmbenml: ":Apmbenml P NickServ at services.teklan.com.tr :register alitopuat Ofjef@$
[Jul 27 18:04:47 2004] Ignored message from Apmbenml: ":Apmbenml P NickServ at services.teklan.com.tr :register alitopuat LAtl at h$
[Jul 27 18:04:47 2004] Ignored message from Apmbenml: ":Apmbenml P NickServ at services.teklan.com.tr :register alitopuat Szwvez$
[Jul 27 18:04:47 2004] Ignored message from Apmbenml: ":Apmbenml P NickServ at services.teklan.com.tr :register alitopuat Vcdr at h$
Jul 27 18:05:04 2004] nickserv/main: Hpml registered by jrccxyt at ti300720a080-1063.bb.online.no (Fgwtnnh at hotmail.com)
[Jul 27 18:05:25 2004] unknown message from server (:irc.teklan.com.tr 441 ChanServ oTOpSy #bebeğim :Odada yoklar)
[Jul 27 17:58:30 2004] Ignored message from ZrBk: ":ZrBk P NickServ at services.teklan.com.tr :register alitopuat BPaAmG at hotmail$
[Jul 27 17:58:30 2004] Ignored message from ZrBk: ":ZrBk P NickServ at services.teklan.com.tr :register alitopuat Ymmpnjq at hotmai$
[Jul 27 17:58:34 2004] operserv/main: ^^zZz^^: killclones ZrBk
[Jul 27 17:58:34 2004] operserv/main: KILLCLONES: 3 clone(s) matching *!*@dsl81-215-35494.adsl.ttnet.net.tr killed.
[Jul 27 17:58:35 2004] nickserv/main: user record for ZrBk not found
[Jul 27 17:58:35 2004] nickserv/main: user record for ZrBk not found

As seen in the logs, nicks are entering the server, and using the NickServ command /ns register password email at adres.com to register the same nick with a different email address.

I would really appreciate it if you could help us with this situation.
Thank you for your time and help

Okan Karasoy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: ../attachments/20040727/83c6de2f/attachment.html