@eyedeekay
@postman
%Liorar
%acetone
+Onn4l7h
+profetikla
+qend-irc2p
Arch
Irc2PGuest11545
Irc2PGuest16554
Irc2PGuest24681
Irc2PGuest27471
Irc2PGuest3423
Irc2PGuest48141
Irc2PGuest80382
MatrixBot
Over1
Teeed
U1F642
ahiru
anontor2
leopold
mahlay
makoto
n2
nilbog
not_bob_afk
orignal
poriori
r00tobo[2]
solidx66
stormycloud[m]
zzz
dr|z3d
so, yeah, orignal, you probably want to track routers with rapidly cycling ips and block them, if you don't have an explicit blocklist.
dr|z3d
regarding the router earlier, if it's communicating with a botnet, it may require a ton of tunnels, each of which probably isn't using much if any traffic.