how come irc.efnet.fr has been split for the past several days?

Handle With Care wrote:Not much good reporting it here. Floods need to be reported to individual servers they are using, with a lot more information than you provided here.

HndlWCare, hello there what kind of extra information should we collect?

not really looking for help, just wanted to report it since they use so many servers thought it would be best to report it here rather than in each server's channel...

http://pastebin.com/Ud3TNFB4
timestamps are in -0700 timezone.
some of the hosts that my bot banned were already listed on dnsbl.dronebl.org and cbl.abuseat.org but the rest of them weren't.

thanks, got it... i've also been using this tool: http://www.unifiedemail.net/Tools/RBLCheck/Default.aspx to cross-reference the old IPs and then i can also use the RBL's that come up positive... but the TCL script isn't working right... seems to work well up to the point of actually setting mode +b...

thanks guys, yeah he was definitely using Tor, as one of his hosts was assk2.torservers.net and a few of the other hosts too were listed in that link in my first post. then there are the proxies he is using which i thought EFnet also scanned for and banned, but maybe he's using different kind of pro...

I am dealing with an abusive user who keeps evading bans by using Tor. Tor is supposed to be blocked on EFnet, i thought. The Tor Project provides an easy way to keep your blocklist updated here, https://check.torproject.org/cgi-bin/TorBulkExitList.py so i'm not sure why the user is able to connect ...

for example, if we try the first address 23.19.33.217, the nmap command produces this: PORT STATE SERVICE 80/tcp open http 111/tcp open rpcbind 443/tcp open https 1723/tcp open pptp 46786/tcp open unknown what's an example of what would be done next with curl and proxycheck? can't quite figure out t...

how can i tell if an address is a proxy? can i use nmap or some other linux tool? if i find one should i just keep posting the addresses here? or is there a more efficient manner to get these addresses blacklisted? thanks

i thought the servers scanned for those upon connection? how are these going undetected? i appreciate them being added to DroneBL. here's another:

173.0.58.43

Lately our channel has been being flooded by someone who has been using several different IP addresses: 23.19.33.217 38.78.192.49 41.77.137.57 64.31.35.30 74.115.1.42 74.115.1.91 173.0.58.42 204.152.219.43 213.229.87.24 223.27.168.126 Usually an address, if not dynamic, can be traced to some shell p...

so, why is this a poll in General rather than a post in Help? coz i don't need help with anything. a long time ago +o modes would sometimes desync, and the channel would need to be recreated to fix that. perhaps this is similar to that? i can't be the only person using +I out there, what have you o...

i have noticed that +I modes are not really synced across all servers. i have set +I modes on one server and later i notice that another server has no +I modes registered for the channel. also +I modes that i have removed on one server i am later noticing are still showing up on another server. i wo...