Hi, > Without that rule it might have flown below my sa-radar. > Got some scoring on it by using this plugin: > https://github.com/eilandert/Botnet.pm
Be careful with the botnet plugin - it's terribly out of date and very prone to false-positives. It's just not effective anymore.
