@RN
@postman
%Liorar
%acetone
%mareki2p
+Onn4l7h
+Over
+altec
+nyaa2pguy
+poriori
+profetikla
+uop23ip
Arch
Danny
FreefallHeavens
Irc2PGuest14479
Irc2PGuest2396
Irc2PGuest30714
Irc2PGuest42959
Irc2PGuest73669
Irc2PGuest95549
Meow
NiceBoat_
Onn4|7h
Teeed
WaAmH
ahiru
anontor2
f00b4r_
mahlay
makoto
n2_
nilbog
not_bob_afk
o3d3
orignal
qend-irc2p_
r00tobo[2]
r00tobo_BNC
solidx66
zzz
dr|z3d
so, yeah, orignal, you probably want to track routers with rapidly cycling ips and block them, if you don't have an explicit blocklist.
dr|z3d
regarding the router earlier, if it's communicating with a botnet, it may require a ton of tunnels, each of which probably isn't using much if any traffic.