egghelp/eggheads community

spam bots nicks

2005-03-10T08:25:24-04:00

"I found a drone, ban it!" What's the point on continuing the loop till the end of the list? It breakes the loop and continues normaly with the proc when a match was found, or dose it need to make more than I match?

Statistics: Posted by caesar — Thu Mar 10, 2005 8:25 am

spam bots nicks

2005-03-10T07:10:51-04:00

If I where you I'd make it return "1" for a match and return "0" no match, and inside the proc to check the nick: if {[isSpamNick $nick]} { # is a match so ban or whatever }

Also, isn't a regexp fatser than that loop? Use break to stop a loop not return with something like this:
Code:
proc isSpamNick {nick} {   global names   set blah 0  foreach {x} $names {     if {[string match -nocase *${x}* $nick]} {       set blah 1 ; break    }   }   return "$blah"}

can i ask what exact advantage breaking a loop has, in this case cause where not working with I/O, so eof can't error when you do.. just wondering..

Statistics: Posted by Ofloo — Thu Mar 10, 2005 7:10 am

spam bots nicks

2005-03-10T06:33:47-04:00

So basically if we use break, with a loop, what is does it is: As we have a big list to match against and supposing the element we want to match is not last element in the list. So when we run the loop and it tries to match the first few elements, hopefully somewhere in the middle a match occurs, so when the first match occurs it breaks the loop, so it doesn't go ahead and match for others elements in the list, as already a match has occured, right?

Basically break the loop and no need to check if a match has already occured as it would seem redundant and would waste time.

Statistics: Posted by awyeah — Thu Mar 10, 2005 6:33 am

spam bots nicks

2005-03-10T02:02:34-04:00

If I where you I'd make it return "1" for a match and return "0" no match, and inside the proc to check the nick: if {[isSpamNick $nick]} { # is a match so ban or whatever }

Also, isn't a regexp fatser than that loop? Use break to stop a loop not return with something like this:

Code:

proc isSpamNick {nick} {   global names   set blah 0  foreach {x} $names {     if {[string match -nocase *${x}* $nick]} {       set blah 1 ; break    }   }   return "$blah"}

Statistics: Posted by caesar — Thu Mar 10, 2005 2:02 am

spam bots nicks

2005-03-09T19:14:37-04:00

return 0 is missing from isSpamNick, it was there tho but its gone somehow .. just thought id mention

Statistics: Posted by Ofloo — Wed Mar 09, 2005 7:14 pm

spam bots nicks

2005-03-09T06:01:38-04:00

Code:

set names {  Anemonella16 Courtney_ ATAKA-N^ Roose__  cinsellik EtaNiA_ chat_lady^ `Kathia^  ParneLLa^ ShirLey- _MariAna1 wilimini  EdAna_ realgirl^^ AnieLa^^ PhiLberta-  milena` Leda` ^MiNda Alala^^  ^AgNeS15 Devon__ sapopt CheriLyN1  BLONDGIRL^ BerNiA16 AnieLa^^ PhiLberta-  Rebecca__ esgirl^ Crescent^ Leda`  ^MiNda Alala^^ ^AgNeS15 Betta`25  celanie^ c_cromo12345 Aca-cia` ^Allison28  BerNiA16 aliSha18`15 `ninaa^^ EdevA15  esgirl^ Roberta^^ Hupa88 alatea16  ANezKA^^ Albus ^MeLwyN_ ArmeLLe  _Vanessa1 ^Jessica- KachiNe^^ trinkende_skifahrer  SarAid29 ^MeLwyN_ ArmeLLe _Vanessa1}proc isSpamNick {nick} {  global names  foreach {x} $names {    if {[string match -nocase *${x}* $nick]} {      return 1    }  }  return }

Banmask types 2) - *!*@host.domain

If you want to use Ofloo's code then you'll need to bind on join and check if the nick is a spamnick by using

Code:

if {[isSpamNick $nick]} {

and then ban mask:

banmask type 2: *!*@[lindex [split $uhost @] 1]

read tcl-commands.doc in your eggdrop's doc/ for more info on bind join and it's proc.

Statistics: Posted by Sir_Fz — Wed Mar 09, 2005 6:01 am

spam bots nicks

2005-03-08T21:25:07-04:00

Code:

set names {  Anemonella16 Courtney_ ATAKA-N^ Roose__  cinsellik EtaNiA_ chat_lady^ `Kathia^  ParneLLa^ ShirLey- _MariAna1 wilimini  EdAna_ realgirl^^ AnieLa^^ PhiLberta-  milena` Leda` ^MiNda Alala^^  ^AgNeS15 Devon__ sapopt CheriLyN1  BLONDGIRL^ BerNiA16 AnieLa^^ PhiLberta-  Rebecca__ esgirl^ Crescent^ Leda`  ^MiNda Alala^^ ^AgNeS15 Betta`25  celanie^ c_cromo12345 Aca-cia` ^Allison28  BerNiA16 aliSha18`15 `ninaa^^ EdevA15  esgirl^ Roberta^^ Hupa88 alatea16  ANezKA^^ Albus ^MeLwyN_ ArmeLLe  _Vanessa1 ^Jessica- KachiNe^^ trinkende_skifahrer  SarAid29 ^MeLwyN_ ArmeLLe _Vanessa1}proc isSpamNick {nick} {  global names  foreach {x} $names {    if {[string match -nocase *${x}* $nick]} {      return 1    }  }  return }

Banmask types 2) - *!*@host.domain

Statistics: Posted by b|_ack — Tue Mar 08, 2005 9:25 pm

spam bots nicks

2005-03-06T21:00:39-04:00

Also a good idea in this case would be to check if the nick is registered or, even if it is identified for?

Not a bad idea except there would be a problem with services down and in DALnet's case we know only too well how frequently that happens.

Statistics: Posted by Alchera — Sun Mar 06, 2005 9:00 pm

spam bots nicks

2005-03-06T20:52:32-04:00

Also a good idea in this case would be to check if the nick is registered or, even if it is identified for? As generally spam bots, drone bots don't have registered or identified nicks. (Only limited if your network has nick management services like - NickServ etc)

Statistics: Posted by awyeah — Sun Mar 06, 2005 8:52 pm

spam bots nicks

2005-03-06T18:20:19-04:00

you are fighting already lost battle

it's not too hard for a semi-competent spammer to beat your hard-coded protection scheme the minute you introduce it - most spambot networks allow for easy and convenient change of the method used to generate nicks, user- and realnames

of course, if you are not an object of targeted attack but rather a victim of randomly roaming and uncontrolled spambots, chances are you can successfully identify them - with downside of continuous autokickbans being ban list overflow (so you'll need a mechanism for ban list management which guarantees some breathing space for manual bans)

Statistics: Posted by demond — Sun Mar 06, 2005 6:20 pm

spam bots nicks

2005-03-06T15:49:21-04:00

What about a simple lsearch?

Statistics: Posted by caesar — Sun Mar 06, 2005 3:49 pm

spam bots nicks

2005-03-06T09:53:16-04:00

Code:

set names {  Anemonella16 Courtney_ ATAKA-N^ Roose__  cinsellik EtaNiA_ chat_lady^ `Kathia^  ParneLLa^ ShirLey- _MariAna1 wilimini  EdAna_ realgirl^^ AnieLa^^ PhiLberta-  milena` Leda` ^MiNda Alala^^  ^AgNeS15 Devon__ sapopt CheriLyN1  BLONDGIRL^ BerNiA16 AnieLa^^ PhiLberta-  Rebecca__ esgirl^ Crescent^ Leda`  ^MiNda Alala^^ ^AgNeS15 Betta`25  celanie^ c_cromo12345 Aca-cia` ^Allison28  BerNiA16 aliSha18`15 `ninaa^^ EdevA15  esgirl^ Roberta^^ Hupa88 alatea16  ANezKA^^ Albus ^MeLwyN_ ArmeLLe  _Vanessa1 ^Jessica- KachiNe^^ trinkende_skifahrer  SarAid29 ^MeLwyN_ ArmeLLe _Vanessa1}proc isSpamNick {nick} {  global names  foreach {x} $names {    if {[string match -nocase *${x}* $nick]} {      return 1    }  }  return 0}

Statistics: Posted by Ofloo — Sun Mar 06, 2005 9:53 am

spam bots nicks

2005-03-06T08:26:20-04:00

I remember a not so old thread about such a script, a forum search should return positive results.

Statistics: Posted by Sir_Fz — Sun Mar 06, 2005 8:26 am

spam bots nicks

2005-03-06T04:02:02-04:00

Well, I knew that too, infact I use a similar code for my drone nicks, with regexp matching, but he wants it for all these specific nicks, and exact matching since he gave them all.

Is complicated?

* awyeah stares at Alchera

Statistics: Posted by awyeah — Sun Mar 06, 2005 4:02 am

spam bots nicks

2005-03-05T17:38:04-04:00

Wouldn't is be just easier to use a regular expression to ban numerical nicks, nicks with any of those characters in them (__, -, ^ &c)?
Example:

Code:

if {[regexp {^[^aeiou_^-`]+$} $nick] \   && [regexp {[^0-9]?$} $nick] \   && ([string length $nick] > 3)} {...}

I suggest reading this post for more information.

What you propose awyeah is just too complicated and flawed in my opinion for the simple reason that if b|_ack's problem is spam bots the nicks are random but the one constant are the numbers and and the ^'s etc.

Statistics: Posted by Alchera — Sat Mar 05, 2005 5:38 pm