Bot attack
Posted: Tue Jul 01, 2008 6:45 pm
We had a bot attack today with about 1200 bots, using roughly 400 different IP addresses.
The nicks were in this form:
NLD|00|XP|SP2|56936219
SWE|02|XP|SP2|67461199
HUN|00|XP|SP2|39549030
ESP|01|XP|SP2|48075604
The SP2 part might be SP0, SP1, SP2, SP3, and perhaps other digits.
Each nick had a real name which matched the nickname.
Has anyone else seen these bots before?
Is spamfilter the best way to block these bots?
If so, can anyone show me which regex to use?
Thanks in advance.
The nicks were in this form:
NLD|00|XP|SP2|56936219
SWE|02|XP|SP2|67461199
HUN|00|XP|SP2|39549030
ESP|01|XP|SP2|48075604
The SP2 part might be SP0, SP1, SP2, SP3, and perhaps other digits.
Each nick had a real name which matched the nickname.
Has anyone else seen these bots before?
Is spamfilter the best way to block these bots?
If so, can anyone show me which regex to use?
Thanks in advance.