<Emilie^17> hello Dangles
<Emilie^17> i'm a girl. are you a boy?
<Emilie^17> i see. i would like to know more about you
<Emilie^17> come and meet me in this chatroom: http://sexpartner.4u.hu
the spam bots always have the same type of name which is: upercase letter to start the name then the ^ and two random digits....
what would be the best way to go about filtering this?
thank you
sex spam
In theory you could do a case-sensitive spamfilter using this (dunno how to make it do case-sensitive right now, or if it does case sensitive already):
^[A-Z][^\^ !@:]*\^[0-9]{2}!
But as mentioned you can ban innocent users. Why not whois some of the bots to find some user@host and/or realname patterns that can be used to narrow it down?
^[A-Z][^\^ !@:]*\^[0-9]{2}!
But as mentioned you can ban innocent users. Why not whois some of the bots to find some user@host and/or realname patterns that can be used to narrow it down?
For a case sensitive regex (well, for the upper part only):
Or another action. Nice thing about kill is that an innocent user can understand (if you have a good reason field) what he/she can do to get on your net again.
Almost everything has a pattern, even random garbage is a pattern to me ;).
Code: Select all
/spamfilter add u kill - some_nice_reason_here ^(?-i)[A-Z](?i)[a-z]*\^[0-9]{2}!
What does that mean? random garbage (dfskgfds)? Or again names...no pattern in the user@host and/or realname :/
Almost everything has a pattern, even random garbage is a pattern to me ;).
we have this same problem with that spam bot
I can say, that we have had issue with this bot for a long period of time. That with regard to us, the bot always starts with a capital letter. Then followed by lower case letters. Then either _ or ^, and then two numerics. Examples of: Susan^99 or Susan_99, but never susan^99 or susan_99. This bot origionally started only using the special character _ and then evolved to the other special character ^. We see both examples on our network.
I think ill try one of the previously sugested spamfilters sugested here.. But without the case sensitivity switch, just because of what we have observed over a year of these stupid bots.
Because we have been banning this bot through different automated means at the nick level for a long period of time, I forgot about what the origional spam message was. I think i'm going to set a filter at that level too, in case this bot evolves again into another pattern for the nicks.
Thank Syzop for directing me to this thread.
droolin
I think ill try one of the previously sugested spamfilters sugested here.. But without the case sensitivity switch, just because of what we have observed over a year of these stupid bots.
Because we have been banning this bot through different automated means at the nick level for a long period of time, I forgot about what the origional spam message was. I think i'm going to set a filter at that level too, in case this bot evolves again into another pattern for the nicks.
Thank Syzop for directing me to this thread.
droolin