By xplo on Jan 12, 2008ban Drones ( Random nick and ident ) On join.
So they don't have time to spam on the channel.
You can change the channel name if your not on undernet, but if you are on undernet please leave them like this.
It will work with X If your not op.
Share and Enjoy
#Original Code from SanitariuM @ Undernet
on *:join:#:{
if ($regex($fulladdress,/^([A-Z]{8})!~?(?!1)(?1)@(?!.*users.undernet.org$)/)) {
if ($me isop $chan) {
mode $chan +b $address($nick,2)
kick $chan $nick Please get your pc cleaned on channel #nohack or with a cleaner.
}
else {
msg x ban $chan $address($nick,2) Please get your pc cleaned on channel #nohack or with a cleaner
}
}
}
why do that when you can install the Unrealircd module call Anti-Random and here is the link to it http://www.unrealircd.com/modules/view/36 if u own a shell , then you wnat have to worry the above. yes this works great cause i used it befor and yes it may get a few chatters now and then but it worth it if you have those type bots connecting.Description:
This module attempts to identify random-looking nicks/idents/realnames and takes the specified action (kill/gline/etc). Useful against bots, Gemster you should use this
plus it gives u a text for a page to go read on the site if you have 1 on what to do if a chatter gets caught. good luck. i have 1 bot that tries to connect and gets banned then my stats goes down , anybody know why this happens, mail me at GoodLuckCharlie@wildblue.net
They can appear registered but that is if people have the time and effort to actually register it... If you don't do email confirmations then you need just remove your network and be done with it because it's definitely waiting to be hit. It's not perfect, no, but it's the best thing that's been made so far.
The problem is lag... if you check the /who on a nickname but you have around 20-30 nicknames alone with hundreds more connecting... it'll really put a strain on your connection & probably flood you out. That's the only problem so you need to create some filter that counts the number that join at a period of time then pauses on a timer to ban the rest OR you could possibly ban range IP/hosts unless there's a large amount of IPs and hosts being used...
So no, it's impossible for a 100% working anti-drone script but it can be done to filter most out.
For example... here's a few
(Sat/12:47:06 AM) <@Phoenix> Nick: U3uWeUX --> $false
(Sat/12:47:07 AM) <@Phoenix> Nick: W5kosh --> $false
(Sat/12:47:10 AM) <@Phoenix> Nick: O8kdBgR --> $true
(Sat/12:47:11 AM) <@Phoenix> Nick: J9gPBIhWzRcClS --> $true
(Sat/12:47:11 AM) <@Phoenix> Nick: O9oCAlDPL --> $true
(Sat/12:47:12 AM) <@Phoenix> Nick: R8efFbWcESV --> $true
(Sat/12:47:13 AM) <@Phoenix> Nick: V7uKmXgSGq --> $true
(Sat/12:47:13 AM) <@Phoenix> Nick: N4Fahb --> $false
(Sat/12:47:14 AM) <@Phoenix> Nick: K0ixn --> $false
(Sat/12:47:14 AM) <@Phoenix> Nick: H4mRfPOKeaHG --> $true
(Sat/12:47:15 AM) <@Phoenix> Nick: T4SYzbHmewJGSa --> $true
(Sat/12:47:16 AM) <@Phoenix> Nick: Q8CXj --> $true
(Sat/12:47:16 AM) <@Phoenix> Nick: U4vkyMNSG --> $true
(Sat/12:47:17 AM) <@Phoenix> Nick: V8lleUsjI --> $true
(Sat/12:47:17 AM) <@Phoenix> Nick: L1sIrGm --> $true
It's not perfect but I was thinking of checking if the nickname is registered or not COMBINED with the random nickname.
I would like this to be more public because I've been working on something like this for a long time and... I can get about 75% to 80% to be affected and be banned.
It's a little difficult because you need to define certain variables for consonants and vowels, special characters, and numbers, add it all up and decide by a certain number....
Basically, it's pretty stupid how it's made but it works a lot.
You talk to me about it, you can /server ixion.nl.eu.SwiftIRC.net -j #nohack
they connect in flood, but not in any channels as i have an auto defcon lvl 2 set when there are 10 connections in 10 seconds, so thats good.
its like 100 bots connect in 10 seconds and goes on to sometimes 2000 bots(ciscos)
Jethro_ we could take this to pm or open a forums for it so that Xpl0reR's snippit isent getting spammed with this lol
Gemster
its like
*** Notice -- Client connecting at my.server.net: sfjkgkoa (gduilmd@11.22.33.44.some.host.net)
They always use random nicks like dgytrisnds and a different 1 for there real name, ips are obvously different and hosts.
@11.22.33.44.some.host.net) this part does change but nicks and real names are always like drones.
Thanks
Gemster
Xpl0reR can you remake this to work on snotices on connect to kill.
every now and again i get bots mainly ciscos connecting to my server with random nicks like hjgukoijds. They dont join any chans as they cant as i have protections to sed defcon to lvl 2 but then i have to mass kill.
So basically if this is made to check snotice on connect if ur ircop that would be grat.
Thanks
Gemster
p.s - sorry for the 2 year delay lmao
i found it, the site broke it. i just clicked edit and removed a line then it showed on save.