egghelp/eggheads community

Removing Spamming bots with strange nicks

2004-02-17T15:34:02-04:00

i have made 1 script for weird nicks could do some modification for your needs ?? i think that your talking about the virii FYLE i have found the source of FYLE that has some intresting thinks:

1 realname (always some domein name like .net .com etc..)
2 nick register with email *@hotmail.com (got this from BarkerJr)
3 nick is random (everybody knows this )

the scan i have made scans on the realname an the random nicks have to build in the if nick is register with email *@hotmail.com

the script i have so fare are on http://www.cb3rob.net/~tales in the tcl section bad2pack.zip

the realname scanner has not been made by me but made a little modification for the FYLE bots (original code by Papillon modified and adjusted by caesar)

Statistics: Posted by TALES — Tue Feb 17, 2004 3:34 pm

Removing Spamming bots with strange nicks

2004-02-14T22:24:58-04:00

Hi Sir_Fz,

is it possible if you can paste the working codes please, because i have no luck.

advance thanks

Statistics: Posted by EEggy — Sat Feb 14, 2004 10:24 pm

Removing Spamming bots with strange nicks

2003-08-30T10:28:30-04:00

spamming bots has been a problem lately.. i have been looking for a tcl to ban the spam bots who sits in the channels.. and put out some webpage address when u say hi..

so far i havent found any..

the thing now i am doing is just use MIRC script to msg the bots and find out if they are one of those and remotely send a message to the bot to ban that user.. a tcl of this kind may help i think ... can someone tell a tcl of that if exists?

Statistics: Posted by Guest — Sat Aug 30, 2003 10:28 am

Removing Spamming bots with strange nicks

2003-07-28T05:56:59-04:00

hehe, add a string match then and try again

Statistics: Posted by Papillon — Mon Jul 28, 2003 5:56 am

Removing Spamming bots with strange nicks

2003-07-28T05:43:48-04:00

It's true, I got proc1 is 3x more slower than proc2:

% time proc1
306 microseconds per iteration
% time proc2
103 microseconds per iteration

BUT there are not really equivalent because proc1 provide a matching result...
proc2 need string match to check if data is valid

Statistics: Posted by TsT — Mon Jul 28, 2003 5:43 am

Removing Spamming bots with strange nicks

2003-07-27T15:23:24-04:00

well, I'm not talkin about seconds... although with enough regexp's it will be
You can test the difference with the time command

Code:

bind dcc - test testprocproc testproc {hand idx arg} { putlog [time proc1] putlog [time proc2] }proc proc1 {} {set host "papillon!papillon@is.a.rabid.chickenkiller.com"set data [regexp {^([^!]+)!([^@]+)@(.*)[.]{0,1}([^.]+).([^.]+)$} $host _ nick user subdom dom tld]}proc proc2 {} {set host "papillon!papillon@is.a.rabid.chickenkiller.com"set nick [lindex [split $host !] 0]set user [lindex [split [lindex [split $host @] 0] !] 1]set subdom [join [lrange [split [lindex [split $host @] 1] .] 0 end-1] .]set dom [lindex [split $host .] end]}

or load this to your bot
if you have tcl installed on your machine you can use tclsh/wish to test the difference

Statistics: Posted by Papillon — Sun Jul 27, 2003 3:23 pm

Removing Spamming bots with strange nicks

2003-07-27T10:06:28-04:00

hehe
TsT, the regexp lover
I'm sorry to dissapoint you but regexp is slow, if you care about every millisecond then you should avoid regexp whenever possible

I just saw this for the fun.
Regexp is sometime more usefull to split lot of part of one string in one line, like:
set nickuserhost "foo!bar@one.two.isp.com"

set nick ... (foo)
set user ... (bar)
set subdom ... (one.two)
set dom ... (isp)
set tld ... (com)

if {[regexp {^([^!]+)!([^@]+)@(.*)[.]{0,1}([^.]+).([^.]+)$} $nickuserhost _ nick user subdom dom tld]} {
#not matching...
}

And i'm agree regexp is slower than split/lindex ... but have you some check or statistique to see more the difference ?

I use very often regexp and i never see the difference

Statistics: Posted by TsT — Sun Jul 27, 2003 10:06 am

Removing Spamming bots with strange nicks

2003-07-26T13:25:12-04:00

Hi, so can you please paste the complete working script??

thank you

Statistics: Posted by EEggy — Sat Jul 26, 2003 1:25 pm

Removing Spamming bots with strange nicks

2003-07-26T08:13:05-04:00

Oh, I see then there must be a faster way right ?? lol

Statistics: Posted by Sir_Fz — Sat Jul 26, 2003 8:13 am

Removing Spamming bots with strange nicks

2003-07-26T07:43:03-04:00

hehe
TsT, the regexp lover
I'm sorry to dissapoint you but regexp is slow, if you care about every millisecond then you should avoid regexp whenever possible

Statistics: Posted by Papillon — Sat Jul 26, 2003 7:43 am

Removing Spamming bots with strange nicks

2003-07-26T06:59:09-04:00

Code:

set ident [lindex [split $uhost @] 0]

Or with regexp:

Code:

regexp {^([^@]+)} $uhost _ ident

TsT, the regexp lover.

Statistics: Posted by TsT — Sat Jul 26, 2003 6:59 am

Removing Spamming bots with strange nicks

2003-07-26T05:35:07-04:00

thank You again

Statistics: Posted by Sir_Fz — Sat Jul 26, 2003 5:35 am

Removing Spamming bots with strange nicks

2003-07-26T04:02:20-04:00

lol
please hit me someone!
.... and gimme a cup of coffee!

Code:

set ident [lindex [split $uhost @] 0]

then do the if-test again on the $ident

Statistics: Posted by Papillon — Sat Jul 26, 2003 4:02 am

Removing Spamming bots with strange nicks

2003-07-25T18:45:20-04:00

well, that would be a bot slow. isn't there a faster way ?

like if regexp [split... $uhost ....] or somethin like that ?

Statistics: Posted by Sir_Fz — Fri Jul 25, 2003 6:45 pm

Removing Spamming bots with strange nicks

2003-07-25T17:55:38-04:00

do a whois when the user/bot joins. Then catch the whois-reply with bind raw and just add the same if-check in there... when you have pulled out the ident from all the input ofcourse

Statistics: Posted by Papillon — Fri Jul 25, 2003 5:55 pm