khopesh at apache
Aug 6, 2013, 11:57 PM
Post #1 of 1
(14 views)
Permalink
|
|
svn commit: r1511194 - /spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
|
|
Author: khopesh
Date: Wed Aug 7 06:57:12 2013
New Revision: 1511194
URL: http://svn.apache.org/r1511194
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1511194&r1=1511193&r2=1511194&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Wed Aug 7 06:57:12 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 20130862
+## khop-sc-neighbors.cf v 20130872
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -81,7 +81,7 @@ score KHOP_SC_CIDR16 0.4 0.1 0.4 0.1
# crap, still empty 20130629 [at] 465 net
# crap, still empty 20130705 [at] 376 net. lowering for low vol -> .4 .1 .4 .1
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b187\.111(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:187\.111|85\.105)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0.3
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:4\.42\.1(?:3[5789]|5[2345]|4[01])|2\.90\.90)|8(?:0\.211\.179|4\.22\.177|7\.4\.111)|(?:90\.144\.22|20\.28\.)8|\.164\.113)|2(?:02\.111\.175|11\.140\.207)|(?:41\.226\.1|82\.207\.5)1)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:4\.4(?:2\.1(?:3[45789]|5[2345]|40)|4\.96)|6\.112\.66)|(?:90\.144\.22|20\.28\.)8|87\.4\.111)|2(?:02\.111\.175|10\.51\.44)|(?:41\.226\.1|82\.207\.5)1|61\.133\.125|54\.248\.80)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705 [at] 376 resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:8\.244\.239|4\.42\.136)|9(?:0\.0\.60|3\.34\.8)|76\.192\.15|20\.84\.13|41\.0\.61)|2(?:1(?:3\.164\.18|7\.198\.3)|\.183\.155)|61\.133\.125|86\.111\.144)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:8\.244\.239|4\.42\.136)|9(?:0\.0\.60|3\.34\.8)|76\.192\.15|20\.84\.13|41\.0\.61)|2(?:1(?:3\.1(?:32\.241|64\.18)|7\.198\.3)|\.183\.155)|86\.111\.144)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:8\.(?:2(?:4\.1(?:75\.[234]|80\.91)|0\.168\.175)|52\.123\.212|74\.122\.9|84\.68\.86)|0\.(?:20(?:0\.211\.229|2\.116\.101)|0\.(?:60\.238|19\.82)|144\.228\.198)|2\.(?:1(?:63\.197\.135|98\.106\.162)|228\.102\.102)|3\.(?:95\.(?:90\.194|69\.58)|34\.8\.101)|5\.(?:138\.195\.125|242\.161\.161)|7\.220\.193\.38|9\.255\.11\.29)|1(?:2\.(?:216\.(?:105\.90|55\.162)|90\.90\.[45]1|167\.170\.33)|(?:(?:3\.130\.70\.1|5\.156\.236\.)1|1\.240\.99\.19)3|4\.(?:45\.231\.203|27\.40\.187)|8\.(?:244\.239\.2|46\.127\.36)|6\.112\.(?:66\.102|5\.136)|9\.184\.214\.18)|2(?:1\.(?:1(?:43\.54\.140|2\.167\.95)|22\.(?:127\.17|34\.166))|3\.(?:30\.1(?:10\.106|29\.54)|234\.230\.45)|4\.2(?:24\.242\.102|32\.136\.55)|2\.(?:225\.36\.101|154\.57\.20)|0\.(?:193\.27\.25|28\.8\.19)4|5\.209\.110\.226)|7(?:6\.(?:1(?:00\.110\.74|92\.15\.229)|28\.49\.192)|7\.(?:5\.230\.114|1\.223\.73|69\.8\.50)|4\.36\.1(?:6(?:0\.157|4\.184)|37\.170)|3\.2(?:42\.113\.185|00\.90\.196)|8\.20(?:7\.158\
.230|\.148\.11))|8(?:3\.(?:136\.146\.110|98\.23\.158)|7\.(?:111\.255\.130|4\.111\.218)|4\.22\.1(?:77\.5[12]|1\.23)|0\.211\.17(?:0\.86|9\.30)|8\.127\.230\.28|6\.226\.48\.16)|0(?:3\.9\.15(?:8\.1(?:10|47|81)|7\.181)|1\.(?:12\.226\.242|99\.28\.194)|8\.166\.205\.163|6\.186\.18\.55)|4(?:\.(?:(?:161\.68\.18|220\.56\.6)6|63\.74\.204)|8\.2(?:23\.59\.180|47\.195\.4)|1\.0\.61\.166)|\.(?:224\.164\.19|34\.181\.22|93\.21\.147)|6(?:6\.111\.134\.20|8\.62\.183\.73)|37\.135\.115\.228|57\.56\.178\.63)|2(?:1(?:7\.(?:1(?:2\.(?:248\.238|113\.67)|98\.3\.238|6\.9\.173)|21(?:8\.43\.130|9\.123\.59))|1\.(?:1(?:40\.207\.100|57\.114\.133)|232\.59\.155|87\.190\.186|44\.103\.11)|8\.(?:1(?:08\.222\.217|92\.175\.84)|2(?:10\.8\.247|\.129\.53)|4\.100\.252)|3\.1(?:(?:64\.18\.14|32\.241\.)7|40\.116\.188|99\.238\.22)|2\.(?:(?:26\.134\.11|138\.144\.)5|6\.152\.211)|0\.51\.(?:44\.(?:199|48)|3\.42)|9\.143\.244\.170)|0(?:2\.(?:1(?:09\.133\.181|11\.175\.97|37\.22\.200|42\.203\.19)|71\.136\.200|29\.241\.33|65\.216\.52|8\.157\.
116)|0\.(?:1(?:1(?:3\.187\.2|\.218\.1)42|42\.133\.21)|3(?:1\.105\.172|3\.143\.45)|247\.100\.178)|1\.(?:18\.(?:107\.234|95\.158)|245\.175\.177)|3\.239\.45\.202)|2(?:1\.(?:2(?:14\.2(?:08\.226|21\.148)|\.144\.135)|194\.(?:128\.224|43\.10))|2\.(?:174\.54\.164|29\.45\.27|74\.200\.2)|0\.143\.121\.154)|(?:4\.127\.201\.17|\.183\.155\.)2)|6(?:1\.(?:1(?:3(?:3\.125\.162|6\.68\.76)|77\.248\.202|55\.159\.9)|238\.148\.161|55\.156\.210|77\.210\.75)|0\.(?:2(?:14\.223\.178|9\.75\.142)|190\.136\.90|8\.63\.5[12]|5\.254\.168)|(?:2\.141\.113\.|7\.90\.21\.1)50|6\.(?:137\.207\.205|35\.65\.48)|9\.198\.197\.156|5\.60\.15\.173)|8(?:5\.(?:2(?:14\.242\.208|34\.22\.126)|120\.148\.111)|(?:3\.111\.92\.12|1\.176\.35\.7)0|2\.(?:114\.79\.254|207\.51\.92)|6\.111\.144\.194|8\.150\.211\.196|7\.103\.197\.93|4\.17\.27\.245)|4(?:1\.(?:22(?:0\.28\.138|6\.11\.117)|78\.77\.253|84\.135\.22)|6\.229\.192\.208)|9(?:(?:2\.51\.109\.18|5\.159\.105\.)2|1\.212\.124\.153|3\.184\.71\.66)|5(?:4\.2(?:4(?:7\.19\.145|8\.80\.211)|35\.106\.1
57)|9\.8\.26\.22)|7(?:2\.35\.20\.131|9\.188\.87\.18)|37\.(?:28\.165\.107|59\.238\.178))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:0\.(?:20(?:0\.211\.229|2\.116\.101)|14(?:4\.228\.198|7\.36\.33)|0\.(?:60\.238|19\.82))|2\.(?:1(?:63\.197\.135|98\.106\.162)|228\.102\.102)|3\.(?:95\.(?:90\.194|69\.58)|34\.8\.101)|5\.(?:138\.195\.125|242\.161\.161)|7\.220\.193\.38|9\.255\.11\.29)|7(?:6\.(?:1(?:00\.110\.74|92\.15\.229)|28\.49\.192)|7\.(?:5\.230\.114|1\.223\.73|69\.8\.50)|4\.36\.1(?:6(?:0\.157|4\.184)|37\.170)|3\.2(?:42\.113\.185|00\.90\.196)|8\.20(?:7\.158\.230|\.148\.11))|1(?:6\.(?:112\.(?:66\.102|5\.136)|58\.65\.226)|1\.(?:240\.99\.193|30\.77\.129)|8\.(?:244\.239\.2|46\.127\.36)|2\.216\.105\.90|5\.156\.236\.13|7\.131\.158\.34|9\.184\.214\.18|4\.27\.40\.187)|2(?:3\.(?:30\.1(?:10\.106|29\.54)|234\.230\.45)|1\.(?:22\.(?:127\.17|34\.166)|12\.167\.95)|4\.2(?:24\.242\.102|32\.136\.55)|2\.(?:225\.36\.101|154\.57\.20)|0\.(?:193\.27\.25|28\.8\.19)4)|8(?:0\.(?:211\.17(?:0\.86|9\.30)|92\.170\.173)|3\.(?:136\.146\.110|238\.169\.86)|7\.(?:111\.255\.130|4\.111\.218)|4\.22
\.1(?:77\.5[12]|1\.23)|8\.127\.230\.28|6\.226\.48\.16)|4(?:8\.2(?:23\.59\.180|47\.195\.4)|\.(?:220\.56\.66|63\.74\.204)|1\.0\.61\.16[56])|0(?:3\.9\.158\.1(?:10|47|81)|8\.166\.205\.163|1\.99\.28\.194|6\.186\.18\.55)|\.(?:2(?:15\.206\.242|24\.164\.19)|34\.181\.22|93\.21\.147)|(?:57\.56\.178\.6|68\.62\.183\.7)3|37\.135\.11(?:5\.228|7\.20))|2(?:1(?:7\.(?:1(?:2\.(?:248\.238|113\.67)|98\.3\.238|6\.9\.173)|21(?:8\.43\.130|9\.123\.59))|1\.(?:1(?:40\.207\.100|57\.114\.133)|232\.59\.155|87\.190\.186|44\.103\.11)|8\.(?:1(?:08\.222\.217|92\.175\.84)|4\.100\.252|2\.129\.53)|3\.1(?:(?:64\.18\.14|32\.241\.)7|40\.116\.188|99\.238\.22)|0\.(?:51\.(?:44\.(?:199|48)|3\.42)|45\.117\.249)|9\.(?:14(?:3\.244\.170|6\.2\.105)|240\.39\.201)|2\.(?:(?:26\.134\.11|138\.144\.)5|6\.152\.211))|0(?:2\.(?:1(?:(?:37\.22\.20|58\.39\.25)0|09\.133\.181|11\.175\.97|42\.203\.19)|29\.241\.(?:33|60)|71\.136\.200|65\.216\.52)|1\.(?:1(?:8\.(?:107\.234|95\.158)|95\.239\.27)|2(?:34\.158\.154|45\.175\.177))|0\.(?:1(?:1(?:3\.187\.
2|\.218\.1)42|42\.133\.21)|247\.100\.178|31\.105\.172)|3\.(?:196\.170\.194|239\.45\.202)|8\.113\.254\.39)|2(?:1\.(?:19(?:4\.(?:128\.22[34]|43\.10)|2\.134\.91)|2(?:14\.2(?:08\.226|21\.148)|\.144\.135)|6\.120\.211)|2\.(?:29\.45\.27|74\.200\.2)|0\.143\.121\.154)|(?:4\.127\.201\.17|\.183\.155\.)2)|6(?:1\.(?:1(?:3(?:3\.125\.162|6\.68\.76)|77\.248\.202|55\.159\.9|89\.20\.21)|238\.148\.161|55\.156\.210|77\.210\.75)|0\.(?:2(?:14\.223\.178|9\.75\.142)|190\.136\.90|8\.63\.5[12]|5\.254\.168)|6\.(?:137\.207\.205|203\.32\.54|35\.65\.48)|(?:2\.141\.113\.|7\.90\.21\.1)50|9\.198\.197\.156|5\.60\.15\.173)|8(?:5\.(?:2(?:14\.242\.208|34\.22\.126)|120\.148\.111)|2\.(?:2(?:21\.102\.245|07\.51\.92)|114\.79\.254)|(?:3\.111\.92\.12|1\.176\.35\.7)0|6\.111\.144\.194|8\.150\.211\.196|7\.103\.197\.93|4\.17\.27\.245)|4(?:1\.(?:22(?:0\.28\.138|6\.11\.117)|78\.77\.253|84\.135\.22)|6\.(?:229\.192\.208|105\.31\.6))|9(?:3\.1(?:23\.54\.138|84\.71\.66)|1\.212\.124\.153|5\.159\.105\.2)|5(?:4\.2(?:4(?:7\.19\.145|8\.80\.
211)|35\.106\.157)|9\.8\.26\.22)|7(?:2\.35\.20\.131|9\.188\.87\.18)|37\.(?:28\.165\.107|59\.238\.178))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work
|
