Stop Clones whit Spamfilter (Solutions)

If you have trouble on your server with spam, drones/zombies/bots or proxies

Moderator: Supporters

Post Reply
Killer
Posts: 7
Joined: Fri Dec 06, 2019 2:52 am

Stop Clones whit Spamfilter (Solutions)

Post by Killer » Thu May 28, 2020 8:54 pm

Hey i have somethings filters to random nick/idenr/realname drones.

This can stop the classics bots
(?-i)^(.+![a-z]{4}@.+:[a-z]{3})$ (4 characters in the nick 3 characters in the ident)
(?-i)^(.+![a-z]{3}@.+:[a-z]{3})$
(?-i)^(.+![a-z]{3}@.+:[a-z]{5})$
(?-i)^(.+![bcdfghjklmnprstvyz]{3,4}@.+:{3,4})$
(?-i)^(.+![a-z]{3,4}@.+:([bcdfghjklmnprstvyz]){3,4})$

rxaoaku (agg@70.60.132.34 ytr
xdwaku (wert@70.60.132.34 sxw

u can stop the bots whit this!!! u need obviously the module antirandom too

I also leave a mirc script that detects classic proxies open ports like 1080, 22, 4145 you can even add more ports !!!!

alias deb {
debug -i db debg debg
}
alias debg {
tokenize 32 $1-
echo -s : $1-
}
ON ^*:SNOTICE:*: { if ((Client = $2) && (connecting: = $3)) {
tr $remove($6,$chr(91),$chr(93))
$iif(!$window(@ventana), window -fen @ventana verdana 9)
echo 5 @giris-c?k?s $1-
}
halt
}
alias po {
return 22 1080 4145
alias tr {
set %prx $ticks
.dns $1
set %ip $1 | var %pi = 1
while (%pi <= $gettok($po,0,32)) {
var %ki = $gettok($po,%pi,32)
sockopen $+(prx-,$1,-,$md5($+($r(a,z),$r(1,999),$ticks,$r(A,Z)))) %ip %ki
inc %pi
}
;echo 4 Port Open Protection:3 $gettok($po,0,32) (Ad.) :2 $po
}
on *:sockopen:*prx-*: {
if ($sockerr) { sockclose $sockname | return }
;echo 2 IP: $sock($sockname).ip $chr(32)4PORT: $sock($sockname).port 4TIP: $sock($sockname).type 4AÇDetecciob: $portfree($sockerr) 4HATA\WS_Err: $sock($sockname).wserr 4MESAJ\WS_Msg: $sock($sockname).wsmsg
if ($portfree($sockerr)) {
var %ipsikim $sock($sockname).ip
gzline $+(*@,$sock($sockname).ip) 1D 1PROXYS
sockclose $+(*,$sock($sockname).ip,*)
$iif(!$window(@Proxy-sik),window -fen @Proxy-sik verdana 9,echo @Proxy-Detection-Glined %ipsikim Proxy Protection )
return
}
.sockclose $sockname
}
on *:sockread:prx-*:{
if ($sockerr > 0) { echo :HATA: $sock($sockname).wserr | return }
; echo 4 -s :---> $sock($sockname).ip $sock($sockname).port
sockclose $sockname
}
on *:dns:{
if (%prx) {
var %di = $dns(0)
while (%di > 0) {
echo 2 $chr(32) 4DNS: $dns(%di) 4ADRES: $dns(%di).addr \ $dns(%di).ip
dec %di
}
unset %prx | unset %ip
halt
}
unset %prx | unset %ip
}


Regards

Killer.

Post Reply