From fusion@nvg.ntnu.no  Tue Feb 17 21:12:18 1998
Return-Path: <fusion@nvg.ntnu.no>
Received: from afrodita.rcub.bg.ac.yu (root@afrodita.rcub.bg.ac.yu [147.91.1.5])
	by Mala.vet.bg.ac.yu (8.8.6/8.8.5) with ESMTP id VAA26575
	for <tony@mala.vet.bg.ac.yu>; Tue, 17 Feb 1998 21:12:16 +0100
Received: from sabre-wulf.nvg.ntnu.no (root@sabre-wulf.nvg.ntnu.no [129.241.210.67])
	by afrodita.rcub.bg.ac.yu (8.8.7/8.8.7) with ESMTP id UAA07961
	for <rcubadm@afrodita.rcub.bg.ac.yu>; Tue, 17 Feb 1998 20:09:20 GMT
Received: from tyrell.nvg.ntnu.no ([129.241.210.70] HELO tyrell.nvg.ntnu.no ident: fusion [port 5474]) by sabre-wulf.nvg.ntnu.no with SMTP id <49544-6474>; Tue, 17 Feb 1998 21:07:10 +0100
Date: 	Tue, 17 Feb 1998 21:07:04 +0100 (MET)
From: Kristian Bergmann <fusion@nvg.ntnu.no>
To: rcubadm@afrodita.rcub.bg.ac.yu
cc: uhlar@ultra.netlab.sk
Subject: bots from *.yu (fwd)
Message-ID: <Pine.LNX.3.96.980217210242.20584A-701000@tyrell.nvg.ntnu.no>
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY=ELM887744643-20212-0_
Content-ID: <Pine.LNX.3.96.980217210242.20584B@tyrell.nvg.ntnu.no>
Status: RO
X-Status: 

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.
  Send mail to mime@docserver.cac.washington.edu for more info.

--ELM887744643-20212-0_
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-ID: <Pine.LNX.3.96.980217210242.20584C@tyrell.nvg.ntnu.no>



  -Kristian

__________________________________________________________
## Kristian Bergmann ## Kristian.Bergmann@nvg.ntnu.no   ##
##       NVG         ## http://www.nvg.ntnu.no/~fusion/ ##
##    Fusion@IRC     ## PGP : finger fusion@nvg.ntnu.no ##
##              "NTNU?" "NT, Not Unix"                  ##

---------- Forwarded message ----------
Date: Tue, 17 Feb 1998 20:44:03 +0100 (MET)
From: Matus Uhlar <uhlar@ultra.netlab.sk>
To: ircnet <ircnet@modeemi.cs.tut.fi>
Cc: fusion@nuts.edu, admin@rcub.bg.ac.yu
Subject: bots from *.yu

Hello,
a few days ago bots from *.yu taken #slovakia over and are flooding;
Of course I know this is not place to discuss channel problems but they are
bots and they are flooding; copies go to server admins too.
-- 
 Matus "fantomas" Uhlar, sysadmin at NETLAB+ Kosice, Slovakia

--ELM887744643-20212-0_
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-ID: <Pine.LNX.3.96.980217210242.20584D@tyrell.nvg.ntnu.no>
Content-Description: how they op themselves

*** Saran (saran@194.154.246.14) has joined channel #slovakia
*** Mode change "+o Saran" on channel #slovakia by ^Vojvoda^
*** Mode change "+o Saran" on channel #slovakia by Don-Juan
*** Mode change "+o Saran" on channel #slovakia by Bedem
*** Mode change "+o Saran" on channel #slovakia by Pa|zarka
*** Mode change "+o Saran" on channel #slovakia by B0mb|ca
*** Mode change "+o Saran" on channel #slovakia by Ke^ci^ga

--ELM887744643-20212-0_
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-ID: <Pine.LNX.3.96.980217210242.20584E@tyrell.nvg.ntnu.no>
Content-Description: cvale wants more bots

<Cvele> yes i can
<Cvele> i have 13 bots for now
<AlCoHoLiC> no you're wrong 
<Cvele> also
<Cvele> i can make abaout 15 more bots
<Cvele> all mine bots can go on 6-10 irc servers
<NWF> alcoholic: hold your hormons
<AlCoHoLiC> cvele - i hate alarming IR Cops 
<Cvele> all they have crontab
<Cvele> all they have bot nick change scripts
<Cvele> u cant flood me also
*** Bo^m^ba is now known as Bombica
<Cvele> i have +l script
<Cvele> which sets channel +5 users of number which are currently on channel
<NWF> alcoholic: THIS IS IRCNET! the channels have no owners!
<Cvele> so in channel cant join more than 5 clones

--ELM887744643-20212-0_
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-ID: <Pine.LNX.3.96.980217210242.20584F@tyrell.nvg.ntnu.no>
Content-Description: servers some bots are on

*** Vojvoda_ is cvele@pm028-05.dialip.mich.net (Car Lazar)
*** on channels: @#slovakia 
*** on irc via server irc.anet-chi.com ([207.7.4.10] Illinois*Texas*Missouri)
*** |Keciga| is oto@millennium.webbernet.net (Ribica bre)
*** on channels: @#slovakia 
*** on irc via server *.webbernet.net ([ircd.webbernet.net] Web Net Worldwide)
*** Don-Juan is ~msk1@195.62.132.20 (Pravi Srpski Ljubavnik)
*** on channels: @#slovakia 
*** on irc via server *.stealth.net ([ircd.stealth.net] Stealth - New York, USA)
*** Saran is saran@194.154.246.14 (Ribica mala bre)
*** on channels: @#slovakia 
*** on irc via server irc.ludd.luth.se (Top of the world, Lulea, Sweden)
*** Idle of Saran: 12 seconds.
*** Gomora is gomora@194.154.246.14 (Sodoma&Gomora Co.)
*** on channels: @#slovakia 
*** on irc via server irc.ludd.luth.se (Top of the world, Lulea, Sweden)
*** Idle of Gomora: 1 minute 23 seconds.
*** Gomora is gomora@194.154.246.14 (Sodoma&Gomora Co.)
*** on channels: @#slovakia 
*** on irc via server irc.ludd.luth.se (Top of the world, Lulea, Sweden)
*** Idle of Gomora: 1 minute 31 seconds.
*** Sodoma is sodoma@194.154.246.14 (Sodoma&Gomora Co.)
*** on channels: @#slovakia 
*** on irc via server irc.ludd.luth.se (Top of the world, Lulea, Sweden)
*** Idle of Sodoma: 7 minutes 45 seconds.

--ELM887744643-20212-0_
Content-Type: APPLICATION/X-GZIP
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.LNX.3.96.980217210242.20584G@tyrell.nvg.ntnu.no>
Content-Description: all that log

[encoded data, 20713 characters]
B9lxdJStt1DDLV8vd+o3x//xf3ftVdh0VAEA

--ELM887744643-20212-0_
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-ID: <Pine.LNX.3.96.980217210242.20584H@tyrell.nvg.ntnu.no>
Content-Description: so they deop me on join :)

*** fantomas (uhlar@ultra.netlab.sk) has joined channel #slovakia
*** Topic for #slovakia: TAKEOVER (C)1998 by Cvele! All rights reserved :)
*** Users on #slovakia: fantomas @NWF @Cvele @Saran @Sodoma @Gomora @Vojvoda9N @Keciga @^Bedem^ @|Bomba| @_Pazarka_ @Knjaz @Don-Juan 
*** Mode change "-o fantomas" on channel #slovakia by _Pazarka_
*** Mode change "-o fantomas" on channel #slovakia by ^Bedem^
*** Mode change "-o fantomas" on channel #slovakia by |Bomba|

--ELM887744643-20212-0_
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-ID: <Pine.LNX.3.96.980217210242.20584I@tyrell.nvg.ntnu.no>
Content-Description: nickflooding

*** Bedemk0 is now known as |Bedem|
*** |Bedem| is now known as Bedem|
*** B0mb|ca is now known as Bombica
*** Bedem| is now known as B3d3mk0
*** NWF is now known as NWF_away
*** B3d3mk0 is now known as Bedemk0
*** Bombica is now known as ^Bomba^
*** Pa^za^rka is now known as Pazarka
*** Bedemk0 is now known as Bedem

--ELM887744643-20212-0_
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-ID: <Pine.LNX.3.96.980217210242.20584J@tyrell.nvg.ntnu.no>
Content-Description: who's on #slovakia

*** fantomas   H   uhlar@ultra.netlab.sk (Pracujem, dajte mi pokoj - working, let me be)
*** NWF_       H@  ~admin@195.12.129.113 (Night Wolf / Destination Zer0)
*** Cvele      H@  cvele@B-12.ekof.bg.ac.yu (Cvele)
*** Saran      H@  saran@194.154.246.14 (Ribica mala bre)
*** Sodoma     H@  sodoma@194.154.246.14 (Sodoma&Gomora Co.)
*** Gomora     H@  gomora@194.154.246.14 (Sodoma&Gomora Co.)
*** Voj^v^oda  H@  cvele@pm028-05.dialip.mich.net (Car Lazar)
*** Keciga     H@  oto@millennium.webbernet.net (Ribica bre)
*** B3d3m      H@  ~cvele@one.ekof.bg.ac.yu (Ovde Neces Proci)
*** Bo^m^ba    H@  ~fnikola@one.ekof.bg.ac.yu (Buuuuum)
*** _Pazarka_  H@  ~vuk@one.ekof.bg.ac.yu (Ovde Neces Proci)
*** Knjaz      H@  jung@civitas.civitas.hu (Knjaz Srpski)
*** Don-Juan   H@  ~msk1@195.62.132.20 (Pravi Srpski Ljubavnik)

--ELM887744643-20212-0_--

From BERI@etf.bg.ac.yu  Wed Feb 18 22:18:49 1998
Return-Path: <BERI@etf.bg.ac.yu>
Received: from afrodita.rcub.bg.ac.yu (root@afrodita.rcub.bg.ac.yu [147.91.1.5])
	by Mala.vet.bg.ac.yu (8.8.6/8.8.5) with ESMTP id WAA29173
	for <tony@mala.vet.bg.ac.yu>; Wed, 18 Feb 1998 22:18:49 +0100
Received: from UBBG.ETF.BG.AC.YU (ubbg.etf.bg.ac.yu [147.91.8.6])
	by afrodita.rcub.bg.ac.yu (8.8.7/8.8.7) with SMTP id VAA28004
	for <rcubadm@rcub.bg.ac.yu>; Wed, 18 Feb 1998 21:18:35 GMT
Date: Wed, 18 Feb 1998 22:17 +0100
From: Berislav Todorovic <BERI@etf.bg.ac.yu>
Subject: Zloupotrebe IRC servisa (forward)
To: ADMIN@etf.bg.ac.yu, rcubadm@rcub.bg.ac.yu
Message-id: <438AB73E3E02DE8A@etf.bg.ac.yu>
X-Envelope-to: rcubadm@rcub.bg.ac.yu
X-VMS-To: ADMIN, IN%"rcubadm@rcub.bg.ac.yu"
Status: RO
X-Status: 

From:	IN%"swmike@swm.pp.se"  "Mikael Abrahamsson" 18-FEB-1998 07:57:45.01
To:	root@afrodita.rcub.bg.ac.yu, postmaster@etf.bg.ac.yu
CC:	
Subj:	irc

Return-path: <swmike@swm.pp.se>
Received: from uplift.sparta.lu.se by etf.bg.ac.yu with PMDF#10165; Wed, 18 Feb
 1998 07:57 +0100
Received: from localhost (swmike@localhost) by uplift.sparta.lu.se
 (8.8.5/8.8.5) with SMTP id HAA20209; Wed, 18 Feb 1998 07:57:02 +0100
Date: Wed, 18 Feb 1998 07:57:02 +0100 (MET)
From: Mikael Abrahamsson <swmike@swm.pp.se>
Subject: irc
To: root@afrodita.rcub.bg.ac.yu, postmaster@etf.bg.ac.yu
Message-id: <Pine.LNX.3.95.980218075209.18868B-100000@uplift.sparta.lu.se>
Content-type: TEXT/PLAIN; charset=US-ASCII
X-Sender: swmike@uplift.sparta.lu.se
Organization: People's Front Against WWW
MIME-Version: 1.0


I was approaced on IRC by someone called "cvele" with adress
"cvele@dos-02.etf.bg.ac.yu" (which I guess is a windows machine).

He asked for an "I-line" on irc.cd.chalmers.se because *.ac.yu is
routed via sweden and he thought that it was a good thing to have I-lines
on *.se servers.

I agreed to this on the terms that any abuse would result in immediately
removal of the I-line.

Well, now, 8 hours later, that I-line is going to be removed because of
abuse.

Wed Feb 18 07:01:54 1998 (  0:18:42): majstor@afrodita.rcub.bg.ac.yu
[majstor] 0 688 38Kb 77 3Kb
Wed Feb 18 06:58:35 1998 (  0:22:01): majstor@afrodita.rcub.bg.ac.yu
[majstor] 0 676 37Kb 78 3Kb
Wed Feb 18 06:58:21 1998 (  0:22:15): majstor@afrodita.rcub.bg.ac.yu
[majstor] 0 680 38Kb 78 3Kb
Wed Feb 18 06:58:18 1998 (  0:22:18): majstor@afrodita.rcub.bg.ac.yu
[majstor] 0 622 34Kb 78 3Kb
Wed Feb 18 06:57:51 1998 (  0:22:45): majstor@afrodita.rcub.bg.ac.yu
[majstor] 0 691 38Kb 78 3Kb

The user majstor@afrodita.rcub.bg.ac.yu flagrantly broke the rules and
netiquette just 6.5 hours after they got access.

I dont have the time to try to keep track of all of *.ac.yu.

-----
Mikael Abrahamsson    email: swmike@swm.pp.se

