Another Weird Bots

These are old archives. They are kept for historic purposes only.
Post Reply
SLipKnOt
Posts: 42
Joined: Sat Apr 10, 2004 6:43 pm
Location: Bangladesh , dhaka
Contact:

Another Weird Bots

Post by SLipKnOt »

Is there any ways to gline them through spamfilter ??

Br4ndBri3v3N was [email protected] * br4ndbri
c0nFid3n7I41n35 was [email protected] * c0nfid3n
muk4pN35 was [email protected] * muk4pn35
o37iG737 was [email protected] * o37ig737
iFfiD3Rp was [email protected] * iffid3rp
./SLipKnOt --help
Stealth
Head of Support
Posts: 2086
Joined: Tue Jun 15, 2004 8:50 pm
Location: Chino Hills, CA, US
Contact:

Post by Stealth »

1. Set up BOPM with the Tor blacklist

2. Load antirandom
nate
Posts: 148
Joined: Fri Jul 29, 2005 10:12 am
Location: Johnstown, Pa
Contact:

Post by nate »

Assuming you don't have any other clients with 'leet' like names, spamfilter would probably catch the lot of those.

Other than that, I'd suggest implementing like BOPM w/ some DNSBL's, especially TOR lookups, since those are mainly just proxy connections obviously.
SLipKnOt
Posts: 42
Joined: Sat Apr 10, 2004 6:43 pm
Location: Bangladesh , dhaka
Contact:

Post by SLipKnOt »

Hmm thanks for the suggestion... BOPM helping too much though if there is any way though spamfilter any regex for those type of pattern..
./SLipKnOt --help
Jobe
Official supporter
Posts: 1180
Joined: Wed May 03, 2006 7:09 pm
Location: United Kingdom

Post by Jobe »

^([^!]{8})[^!]*!\1@[^:]+:\1$

If im correct should catch them, if im incorrect could someone correct me please.
Stealth
Head of Support
Posts: 2086
Joined: Tue Jun 15, 2004 8:50 pm
Location: Chino Hills, CA, US
Contact:

Post by Stealth »

Jobe1986 wrote:^([^!]{8})[^!]*!\1@[^:]+:\1$

If im correct should catch them, if im incorrect could someone correct me please.

Indeed that looks like it could catch them, but what about the number of innocent users that would get caught by it? We once had a discussion in Unreal-Support about using that filter to cut down on floods, but when checking out a who of the network we saw it would also ban a large number of innocent users as well as any possible clone.
Jobe
Official supporter
Posts: 1180
Joined: Wed May 03, 2006 7:09 pm
Location: United Kingdom

Post by Jobe »

Stealth wrote:Indeed that looks like it could catch them, but what about the number of innocent users that would get caught by it? We once had a discussion in Unreal-Support about using that filter to cut down on floods, but when checking out a who of the network we saw it would also ban a large number of innocent users as well as any possible clone.
Agreed.

Nothing much else I can say other then that.
Post Reply