Hello, my name is Zhuinden on numerous websites, I am not Zhuinden@USEast (that's Illuminatus acting high and mighty about registering on an inactive account, impersonating me for about two years by now).
There has been discussion about these bots being around, as they are fairly concerning, considering the ability to join games and log cd-key hashes, IPs and account names. Therefore at teamliquid.net, we attempted to keep track of the IPs used by the Gamecrawler, although it obviously uses a proxy and change its IP from time to time.
In order to keep the Bancrawler/Gamecrawler out of your game, you need to input its IP in a list for an application called Peerblock.
My current Peerblock list contains the following entries:
The bot changes IP every now and then, therefore if a bot joins your game (you can see this with wDetector, which is pretty simple using Mca64Launcher's auto-injected english version), it's probably from a new IP. There are two ways to figure out its IP.
One is to shut down every other network using application, and use Wireshark to determine the IP of the bot. This can be done by hosting a dummy game that no one joins, and the only IPs that show up are those who open the game list, and the periodic ones tend to be the gamecrawler. This is especially easy to see (the periodic requests) if you use Gremlin games, as the bot attempts to join them about every 3 seconds.
Two would be to temporarily use a banlist that blocks every possible IP, and type /autoban /autoban while using the IP-based blacklist. You would see the IP at which it was kicked out, and you can add this easily to the list of Peerblock.
I hope that was helpful. Screw IPREAP, Bancrawler and whoever is behind it.