<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Botnets / DDoS</title>
	<atom:link href="http://geekmontage.com/texts/botnets-ddos/feed/" rel="self" type="application/rss+xml" />
	<link>http://geekmontage.com</link>
	<description>Reviews, Games, Guides, Hacks. Anything and everything geeky</description>
	<lastBuildDate>Thu, 24 May 2012 15:22:47 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
<xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" />
	<item>
		<title>By: V.H.</title>
		<link>http://geekmontage.com/texts/botnets-ddos/comment-page-1/#comment-20243</link>
		<dc:creator>V.H.</dc:creator>
		<pubDate>Wed, 23 Mar 2011 14:57:15 +0000</pubDate>
		<guid isPermaLink="false">http://www.geekmontage.com/?page_id=54#comment-20243</guid>
		<description>Good writing and good article!!</description>
		<content:encoded><![CDATA[<p>Good writing and good article!!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: DarkKnightH20</title>
		<link>http://geekmontage.com/texts/botnets-ddos/comment-page-1/#comment-8161</link>
		<dc:creator>DarkKnightH20</dc:creator>
		<pubDate>Thu, 03 Jun 2010 18:29:22 +0000</pubDate>
		<guid isPermaLink="false">http://www.geekmontage.com/?page_id=54#comment-8161</guid>
		<description>If you use a proxy that has high anonymity, then the person will get the IP address of the proxy rather than yours (if the person manages to get your IP at all that is). If the proxy does end up getting DDoSed, the proxy will be the one taking the damage instead of you, since the entirety of the botnet will be focused on flooding packets to the proxy specifically and not your IP. The proxy *could* go down if the attack is heavy enough, in which case you would disconnect from mIRC because the proxy can no longer handle the legitimate data you&#039;re sending. Your connection would still remain in tact though, which is the important part :) Unfortunately, it does mean you&#039;d have to switch to another proxy if that is the case, or wait for it to go back up.</description>
		<content:encoded><![CDATA[<p>If you use a proxy that has high anonymity, then the person will get the IP address of the proxy rather than yours (if the person manages to get your IP at all that is). If the proxy does end up getting DDoSed, the proxy will be the one taking the damage instead of you, since the entirety of the botnet will be focused on flooding packets to the proxy specifically and not your IP. The proxy *could* go down if the attack is heavy enough, in which case you would disconnect from mIRC because the proxy can no longer handle the legitimate data you&#8217;re sending. Your connection would still remain in tact though, which is the important part <img src='http://geekmontage.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  Unfortunately, it does mean you&#8217;d have to switch to another proxy if that is the case, or wait for it to go back up.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sarah lee</title>
		<link>http://geekmontage.com/texts/botnets-ddos/comment-page-1/#comment-8136</link>
		<dc:creator>sarah lee</dc:creator>
		<pubDate>Thu, 03 Jun 2010 08:20:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.geekmontage.com/?page_id=54#comment-8136</guid>
		<description>i did have dcc  and dcc filesharing enalbed, i have now disabled that. i am well protected against Attacks, but i am sure this person is getting my ip from mIRC client, if  i use a proxy, does this mean hi will not be able to get my ip or my proxy ip?
also if he does somehow get my proxy ip and decide to ddos it will this effect me and will i have to change my proxy ip again?
as long as i can stop this person from getting my ip then i shouldnt have a problem.</description>
		<content:encoded><![CDATA[<p>i did have dcc  and dcc filesharing enalbed, i have now disabled that. i am well protected against Attacks, but i am sure this person is getting my ip from mIRC client, if  i use a proxy, does this mean hi will not be able to get my ip or my proxy ip?<br />
also if he does somehow get my proxy ip and decide to ddos it will this effect me and will i have to change my proxy ip again?<br />
as long as i can stop this person from getting my ip then i shouldnt have a problem.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: DarkKnightH20</title>
		<link>http://geekmontage.com/texts/botnets-ddos/comment-page-1/#comment-8101</link>
		<dc:creator>DarkKnightH20</dc:creator>
		<pubDate>Wed, 02 Jun 2010 20:21:33 +0000</pubDate>
		<guid isPermaLink="false">http://www.geekmontage.com/?page_id=54#comment-8101</guid>
		<description>There are services that offer secure shell hosting, which can be used to host your own private BNC. I don&#039;t know of any off the top of my head, but run in to them from time to time. The mode $me mode $nick are identical. If you use mIRC, they specifically recommend SOCK proxies, which are harder to find, but HTTP proxies work too.

When is it that you type in the /mode $nick +x command? Do you have a script that automatically does it for you? The reason I ask is because commonly what happens is people have &quot;auto join&quot; enabled so that when they login, they immediately join the room they&#039;re interested in, and unfortunately that usually occurs before the +x privacy is activated, thus allowing everyone to see your information unmasked. For that reason, it&#039;s best to ensure the +x is enabled far before the auto joining of a specific channel.

Proxies can be very effective on IRC if they&#039;re NOT transparent. You&#039;ll be masked instantly just like a BNC. A combination of both would be even more effective if you can find a secure place to setup a BNC and use a well-made BNC script. Here&#039;s some information on both host masking (which you do already) and setting up a proxy with mIRC--

http://www.ehow.com/how_6056576_hide-ip-irc.html

I should have mentioned this earlier -- but do you have DCC enabled? If so, disable it immediately. Disable both DCC chat and DCC file sending, as they can be used to grab your IP address. Hope that helps! If not, sorry I&#039;m not being very helpful, as I&#039;ve never run into the issue myself. Are you positive that you&#039;re not infected with anything like a keylogger as well? Just thought I&#039;d ask.</description>
		<content:encoded><![CDATA[<p>There are services that offer secure shell hosting, which can be used to host your own private BNC. I don&#8217;t know of any off the top of my head, but run in to them from time to time. The mode $me mode $nick are identical. If you use mIRC, they specifically recommend SOCK proxies, which are harder to find, but HTTP proxies work too.</p>
<p>When is it that you type in the /mode $nick +x command? Do you have a script that automatically does it for you? The reason I ask is because commonly what happens is people have &#8220;auto join&#8221; enabled so that when they login, they immediately join the room they&#8217;re interested in, and unfortunately that usually occurs before the +x privacy is activated, thus allowing everyone to see your information unmasked. For that reason, it&#8217;s best to ensure the +x is enabled far before the auto joining of a specific channel.</p>
<p>Proxies can be very effective on IRC if they&#8217;re NOT transparent. You&#8217;ll be masked instantly just like a BNC. A combination of both would be even more effective if you can find a secure place to setup a BNC and use a well-made BNC script. Here&#8217;s some information on both host masking (which you do already) and setting up a proxy with mIRC&#8211;</p>
<p><a href="http://www.ehow.com/how_6056576_hide-ip-irc.html" rel="nofollow">http://www.ehow.com/how_6056576_hide-ip-irc.html</a></p>
<p>I should have mentioned this earlier &#8212; but do you have DCC enabled? If so, disable it immediately. Disable both DCC chat and DCC file sending, as they can be used to grab your IP address. Hope that helps! If not, sorry I&#8217;m not being very helpful, as I&#8217;ve never run into the issue myself. Are you positive that you&#8217;re not infected with anything like a keylogger as well? Just thought I&#8217;d ask.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sarah lee</title>
		<link>http://geekmontage.com/texts/botnets-ddos/comment-page-1/#comment-8100</link>
		<dc:creator>sarah lee</dc:creator>
		<pubDate>Wed, 02 Jun 2010 20:01:47 +0000</pubDate>
		<guid isPermaLink="false">http://www.geekmontage.com/?page_id=54#comment-8100</guid>
		<description>thanks for reply. yes i do have dynamic but they&#039;ve ddossed me 3 times now on. i use //mode $me +x on mirc which i think is maybe similar to the &#039;/mode $nick +x&#039; that you mentioned but obviously it isn&#039;t good enough. im assuming now that the bnc is not secure enough considering they have the capability to hack into it, the password was very random and im not sure what password cracking involves.. how exactly does hosting work? and how affective are proxies against hackers? some proxies are also not allowed to be used on irc servers. I&#039;m just trying to do my research on finding something completely secure and that can prevent my ip from being found and having the same recurring issue.</description>
		<content:encoded><![CDATA[<p>thanks for reply. yes i do have dynamic but they&#8217;ve ddossed me 3 times now on. i use //mode $me +x on mirc which i think is maybe similar to the &#8216;/mode $nick +x&#8217; that you mentioned but obviously it isn&#8217;t good enough. im assuming now that the bnc is not secure enough considering they have the capability to hack into it, the password was very random and im not sure what password cracking involves.. how exactly does hosting work? and how affective are proxies against hackers? some proxies are also not allowed to be used on irc servers. I&#8217;m just trying to do my research on finding something completely secure and that can prevent my ip from being found and having the same recurring issue.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: DarkKnightH20</title>
		<link>http://geekmontage.com/texts/botnets-ddos/comment-page-1/#comment-8094</link>
		<dc:creator>DarkKnightH20</dc:creator>
		<pubDate>Wed, 02 Jun 2010 19:23:44 +0000</pubDate>
		<guid isPermaLink="false">http://www.geekmontage.com/?page_id=54#comment-8094</guid>
		<description>Hi and thanks for the comment! Sounds pretty rough. Do you have a dynamic IP address or a static one? If your IP doesn&#039;t change, then you can easily be targeted. Some IRC servers offer privacy options built-in to the server itself where you simply write &quot;/mode $nick +x&quot; (substituting &quot;$nick&quot; with your nick) to hide your IP address. This on top of a secure BNC helps tremendously. I know that QuakeNet has this feature, but have never used ausnet so it may not have such a feature. If your BNC was hacked into, I&#039;d suggest finding another BNC service elsewhere. Some people find free hosting for such services and setup their own personal BNC through such. Others use proxies pure proxies, as you mentioned. If you&#039;d like to go through proxies, find high anonymity proxies through online proxy lists (opposed to transparent ones that don&#039;t hide IPs) and run them through a proxy scanner to see which ones really work and which ones don&#039;t.

As for the comment about hacking infected computers, that means that the user who is infected likely does not update their system with security patches and therefore may possibly be hacked again easily (this is a big variable though, since the user infected could easily patch their system after being infected). On a side note, be sure to use highly secure passwords on any account you&#039;re using in case the attacker simply password cracked your information. Good luck!</description>
		<content:encoded><![CDATA[<p>Hi and thanks for the comment! Sounds pretty rough. Do you have a dynamic IP address or a static one? If your IP doesn&#8217;t change, then you can easily be targeted. Some IRC servers offer privacy options built-in to the server itself where you simply write &#8220;/mode $nick +x&#8221; (substituting &#8220;$nick&#8221; with your nick) to hide your IP address. This on top of a secure BNC helps tremendously. I know that QuakeNet has this feature, but have never used ausnet so it may not have such a feature. If your BNC was hacked into, I&#8217;d suggest finding another BNC service elsewhere. Some people find free hosting for such services and setup their own personal BNC through such. Others use proxies pure proxies, as you mentioned. If you&#8217;d like to go through proxies, find high anonymity proxies through online proxy lists (opposed to transparent ones that don&#8217;t hide IPs) and run them through a proxy scanner to see which ones really work and which ones don&#8217;t.</p>
<p>As for the comment about hacking infected computers, that means that the user who is infected likely does not update their system with security patches and therefore may possibly be hacked again easily (this is a big variable though, since the user infected could easily patch their system after being infected). On a side note, be sure to use highly secure passwords on any account you&#8217;re using in case the attacker simply password cracked your information. Good luck!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sarah lee</title>
		<link>http://geekmontage.com/texts/botnets-ddos/comment-page-1/#comment-8070</link>
		<dc:creator>sarah lee</dc:creator>
		<pubDate>Wed, 02 Jun 2010 10:59:49 +0000</pubDate>
		<guid isPermaLink="false">http://www.geekmontage.com/?page_id=54#comment-8070</guid>
		<description>Hi I have recently been getting ddossed on an irc (ausnet) server. i then got a bnc which is meant to be secure and serves the purpose of hiding an ip, but the same ppl somehow accessed the bnc and linked email address too and changed the password. irc also has open ports so im not sure if that plays a part in it. Ive heard that a vpn which is similar to a proxy is a good method of protection but i am still not sure and need some advice on how to protect my ip while using irc? also could you elaborate on this\&#039;If that computer was so easily infected with a backdoor, chances are, that you too may be able to hack it and grab the bot client. After doing so, you can do a number of things, such as send a copy to your ISP/authorities or even reverse engineer it to grab the password/server info/etc. I&#039;d love to hear from you, thanks:)</description>
		<content:encoded><![CDATA[<p>Hi I have recently been getting ddossed on an irc (ausnet) server. i then got a bnc which is meant to be secure and serves the purpose of hiding an ip, but the same ppl somehow accessed the bnc and linked email address too and changed the password. irc also has open ports so im not sure if that plays a part in it. Ive heard that a vpn which is similar to a proxy is a good method of protection but i am still not sure and need some advice on how to protect my ip while using irc? also could you elaborate on this\&#8217;If that computer was so easily infected with a backdoor, chances are, that you too may be able to hack it and grab the bot client. After doing so, you can do a number of things, such as send a copy to your ISP/authorities or even reverse engineer it to grab the password/server info/etc. I&#8217;d love to hear from you, thanks:)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Sammy</title>
		<link>http://geekmontage.com/texts/botnets-ddos/comment-page-1/#comment-1258</link>
		<dc:creator>Sammy</dc:creator>
		<pubDate>Tue, 01 Dec 2009 03:26:58 +0000</pubDate>
		<guid isPermaLink="false">http://www.geekmontage.com/?page_id=54#comment-1258</guid>
		<description>lol! Sounds like dkraft doesn&#039;t know what DOS&#039;ing is. NOOOB!</description>
		<content:encoded><![CDATA[<p>lol! Sounds like dkraft doesn&#8217;t know what DOS&#8217;ing is. NOOOB!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: DarkKnightH20</title>
		<link>http://geekmontage.com/texts/botnets-ddos/comment-page-1/#comment-1257</link>
		<dc:creator>DarkKnightH20</dc:creator>
		<pubDate>Tue, 01 Dec 2009 01:20:48 +0000</pubDate>
		<guid isPermaLink="false">http://www.geekmontage.com/?page_id=54#comment-1257</guid>
		<description>Yes, illegal. Especially if the bots are people infected against their own will.

References? I don&#039;t know too many people who reference themselves, but if you want me to I&#039;ll be more than gladly to do so. I didn&#039;t use Wikipedia, but thank you for your comment and sorry to hear you disliked my article.</description>
		<content:encoded><![CDATA[<p>Yes, illegal. Especially if the bots are people infected against their own will.</p>
<p>References? I don&#8217;t know too many people who reference themselves, but if you want me to I&#8217;ll be more than gladly to do so. I didn&#8217;t use Wikipedia, but thank you for your comment and sorry to hear you disliked my article.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: dkraft</title>
		<link>http://geekmontage.com/texts/botnets-ddos/comment-page-1/#comment-1255</link>
		<dc:creator>dkraft</dc:creator>
		<pubDate>Mon, 30 Nov 2009 21:08:50 +0000</pubDate>
		<guid isPermaLink="false">http://www.geekmontage.com/?page_id=54#comment-1255</guid>
		<description>illegal ? 
How about some supporting references ? 
so far all you&#039;ve done is requote wikipedia.
http://en.wikipedia.org/wiki/Ddos#Distributed_attack</description>
		<content:encoded><![CDATA[<p>illegal ?<br />
How about some supporting references ?<br />
so far all you&#8217;ve done is requote wikipedia.<br />
<a href="http://en.wikipedia.org/wiki/Ddos#Distributed_attack" rel="nofollow">http://en.wikipedia.org/wiki/Ddos#Distributed_attack</a></p>
]]></content:encoded>
	</item>
</channel>
</rss>

