My experience is that these are typically clones, using hosts which allow to bounce off them due to some open ports.
I have found by experience that the problem can be alleviated (not solved, though) doing the following:
1. add their ip to the botnetl ban list: ie, ban the mask *!*@ip.of.the.spam.bot
2. use some badchannel software: these bots are "expensive" to run (meaning, it takes time and effort to put them up), so they normally spam no only your channel, but a number of other channels: in may case, I worked out some channels my "real" users are most unlikely to be, and when something enters my channels and some "marked bad" channel, I immediately apply the corresponding IP ban.
3. Check the "real name": again, some of these bots use "unique" (not used by real users) real names, and you can ban on that, ie after checking the real names
4. Use 2 and 3 above to enforce 1: meaning, the odd spam bot might be able to spam even when 2 and 3 will eventually kick in (typically, the spam bot manages to acquire some or all the nicks, before 2 and/or 3 react), but you should nevertheless enforce 1, perhaps with a ban motivation which says to contact you in case the ban is erroneous.
Hope this helps,
dun_dacilStatistics: Posted by dun_dacil — Wed Oct 29, 2003 5:58 am
]]>