kick and ban spammers automatically

[tkimnguyen]

they have come into #plone and have spammed dozens of the same message (would have continued probably indefinitely, at least once per second) until they were manually kicked (and banned).

they can be identified by the same keyword they used today (and on a previous occasion in the last few weeks)... ask me privately for the word (if you haven't guessed it)

the other patterns: they repeat the same message, they add colour codes, they mention everyone else in the channel, e.g..

Ayl734> ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ HAPPY N***** MAS!! IF YOU WANT JOIN A CELEBRATION THAT IS N***** FREE PLEASE JOIN #/JOIN RIGHT HERE ON THIS NETWORK!! leanctf: syncbot Hazelesque_ rodfersou|away zombified gl278afd robmyers bloodbare esteele kiorky domenkozar jfroche rainrider SopelBot ArminderSingh s

The colour codes appear as

[ryjzvsq (Ayl734), irc.freenode.net] 12,09▄04,12▄13,02▄04,06▄12,07▄05,10▄13,03▄05,03▄12,13▄05,10▄06,05▄12,03▄11,13▄06,05▄04,08▄13,08▄10,06▄10 HAPPY N***** MAS!! IF YOU WANT JOIN A CELEBRATION THAT IS N***** FREE PLEASE JOIN #/JOIN RIGHT HERE ON THIS NETWORK!! ihmhkjr: siel djinni moldy syncbot jpcw domenkozar robink rockfruit matthewwilkes stevepie_ mcdonc tkimnguyen tibi_ zombified lentinj jham s

[oz123]

Found a example too:

 ▄ ▄ ▄ ▄ ▄ ▄ ▄ ▄ ▄ ▄ ▄ ▄ ▄  DO YOU WANT TO KEEP YOUR MAN SATISFIED DURING THE CHRISTMAS BREAK?? EL IS GIVING ANAL SEX TIPS IN ##FEMINISM RIGHT NOW DONT MISS IT xxgevyap: esteele Gomez bloodbare SteveM lem-fr nopf jakob_ domenkozar gl278afd malthe datakurre kiorky rodfersou|away rnix SopelBot pcdummy oznt pbauer syncbot ree moo-
<jane`clu211>  ▄ ▄ ▄ ▄ ▄ ▄ ▄ ▄ ▄ ▄ ▄  DO YOU WANT TO KEEP YOUR MAN SATISFIED DURING THE CHRISTMAS BREAK?? EL IS GIVING ANAL SEX TIPS IN ##FEMINISM RIGHT NOW DONT MISS IT ewklmnav: ArminderSingh robmyers esteele kiorky santonelli stevepie_ Hazelesque_ SteveM kaeru rodfersou|away mcdonc robink rockfruit djinni rainrider rnix moo-_- flohcim_ alxd merpdotcom bl

That is crazy ... I am looking into sopel later today.. ..

[tkimnguyen]

OK they did it again and didn't repeat the message or that one keyword. The pattern is that they mention everyone in the channel, so we could just key in on anyone mentioning more than a 'few' people in the same message. Or they're doing this in all caps except for the mentions.

[tkimnguyen]

thx @oz123 👍