UnrealIRCd Forums

i have some spambots connecting to my network - each have eight random letters as their nick, ident and realname
eg. (11:02:58pm) —› JVQOMUTF is "DINKYHQB" ([email protected])

is there any way to set a regex which matches this only if all the characters are in caps?

I am having same issue. have set channels to +R for time being.
way too many spam urls to set a filter for urls
any assist would be appreciated, these things are in a large quantity using notices
and pms to spam urls.
SXBYENUX ([email protected])
FWUOYUPW ([email protected])
EHFLTTFG ([email protected])

EHFLTTFG was [email protected] * QLBYYXBS
EHFLTTFG using ************** Tue Jan 8 08:25:01 2008
End of WHOWAS

FWUOYUPW was [email protected] * RIRKMYTS
FWUOYUPW using ************ Tue Jan 8 08:29:46 2008
End of WHOWAS

Try this:

Thanks! So Far so Good

[Spamfilter] [email protected] matches filter '^(?-i)[A-Z]{8}!~?[A-Z]{8}@[^:]+:[A-Z]{8}$': [NICK: '[email protected]:CGLJXFOY'] [SpamDrone0108]

thanks a lot, problem solved (for now)!

thanks guys... ive been having this problem recently as well. my bot has probably glined well over 500 ip's... whoever it is has a lot of resources.

Thanks a lot! My net is under attack by these bots too and this spamfilter is a lot better than mine (which only bans when they notice) because it's annoying seeing the ones who don't notice keep joining and parting. Now they're all gone =)

ps thank's greg for showing me this topic =)

A New Problem whit the Bots see whois ^^

((10:30:05)) <ReVoLt> RSDRTBGQ is [email protected] * VOQEQWTC
((10:30:06)) <ReVoLt> RSDRTBGQ is using modes +ix
((10:30:06)) <ReVoLt> RSDRTBGQ is connecting from *@82.79.160.112 82.79.160.112
((10:30:06)) <ReVoLt> RSDRTBGQ using Ptown.German-IRC.net .::Ptown.German-IRC.net::. }{Düsseldorf}{
((10:30:06)) <ReVoLt> RSDRTBGQ End of /WHOIS list.

the ident is not Caps and not 8 letters

Try: