Clones Spamfilter Bots

If you have trouble on your server with spam, drones/zombies/bots or proxies

Moderator: Supporters

Locked
Killer
Posts: 7
Joined: Fri Dec 06, 2019 2:52 am

Clones Spamfilter Bots

Post by Killer » Mon May 25, 2020 5:20 pm

Hello, i have a problem whit the bots, i have this type.

supremoHg[supremo@host] realname [a-z] this is variable example ircap, test, etc...
CracFD[Crack@host]
LoadEF[Load@host]

Hoe i can block this bots whit the spamfilter?

Lord255
Posts: 43
Joined: Sat Feb 29, 2020 12:58 am
Location: offline

Re: Clones Spamfilter Bots

Post by Lord255 » Mon May 25, 2020 5:38 pm

are their hosts the same?

Killer
Posts: 7
Joined: Fri Dec 06, 2019 2:52 am

Re: Clones Spamfilter Bots

Post by Killer » Mon May 25, 2020 5:52 pm

Hello Lord are differents host example supremoHg[supremo@Clk-D1434EF8.se.biz.rr.com]
CrackFD[Crack@4AA127E17.BA5B1D88.7A63506.IP]
Last edited by Killer on Mon May 25, 2020 6:00 pm, edited 1 time in total.

Killer
Posts: 7
Joined: Fri Dec 06, 2019 2:52 am

Re: Clones Spamfilter Bots

Post by Killer » Mon May 25, 2020 5:59 pm


Killer
Posts: 7
Joined: Fri Dec 06, 2019 2:52 am

Re: Clones Spamfilter Bots

Post by Killer » Tue May 26, 2020 2:53 pm

Hey, something can help whits this, or this forum is death?

Syzop
UnrealIRCd head coder
Posts: 1948
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Re: Clones Spamfilter Bots

Post by Syzop » Wed May 27, 2020 3:35 pm

Just a general solution (not really an answer to your question). Are you using blacklist blocks ?
See https://www.unrealircd.org/docs/Blacklist_block under Examples. Add those to your unrealircd.conf and REHASH.
Of course, chances are high that you are already using them :)

Syzop
UnrealIRCd head coder
Posts: 1948
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Re: Clones Spamfilter Bots

Post by Syzop » Wed May 27, 2020 3:44 pm

As for spamfilter, the nick minus the last two character comes back in the ident/username, that should be something one can write a spamfilter for. Try this:

Code: Select all

/SPAMFILTER add -regex u kill 0 spambot_detected ^([a-z]+)[a-z]{2}!\1@.*

Killer
Posts: 7
Joined: Fri Dec 06, 2019 2:52 am

Re: Clones Spamfilter Bots

Post by Killer » Wed May 27, 2020 9:00 pm

Hey Syzop , thanks!!! this filter work to me!!!
And yes im using blacklists, other question:
can i post a code to stop proxies, eggdrop, etc? I would like to help the community too and tell them about my experience, where can I publish my work?

Syzop
UnrealIRCd head coder
Posts: 1948
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Re: Clones Spamfilter Bots

Post by Syzop » Thu May 28, 2020 6:52 am

Great :)
can i post a code to stop proxies, eggdrop, etc? I would like to help the community too and tell them about my experience, where can I publish my work?
You mean tips and spamfilters and configuration settings right? Yes, that is exactly what this forum is for. Just post it in this forum "Spam, drones and proxies".

Locked