A socket bot is perfectly capable of sending a false version reply.
A clone limit is really the only way to go.