You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2010/04/17 04:57:11 UTC
svn commit: r935115 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Sat Apr 17 02:57:10 2010
New Revision: 935115
URL: http://svn.apache.org/viewvc?rev=935115&view=rev
Log:
auto-generated SpamCop neighbor rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=935115&r1=935114&r2=935115&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sat Apr 17 02:57:10 2010
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 2010041522
+## khop-sc-neighbors.cf v 2010041622
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -57,7 +57,7 @@ score KHOP_SC_TOP_CIDR8 0.9 0.1 0.9 0.
# 11.6286/0.0475 0.996 20100410 net, solo=11.7224/0.6900@0.944, ->LE as above
# http://www.spamcop.net/w3m?action=map;net=bmaxcnt;mask=16777215;sort=spamcnt
-header KHOP_SC_CIDR16 Received =~ /(?-xism:\b122\.173(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_CIDR16 Received =~ /(?-xism:\b(?:1(?:1(?:5\.240|7\.197)|21\.247)|95\.133|59\.94)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_CIDR16 Relay CIDR /16 is among worst in SpamCop
tflags KHOP_SC_CIDR16 nopublish
score KHOP_SC_CIDR16 1.6 0.5 1.6 0.5
@@ -72,7 +72,7 @@ score KHOP_SC_CIDR16 1.6 0.5 1.6 0.5
# 0 /0 0 20100409 (wha!?)
# crap, still empty 20100410 bad scrape, script failed to populate rule
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:2(?:2\.16[38]|3\.27)|1(?:7\.197|8\.96)|83\.87)|41\.(?:141|249)|95\.135)(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:2(?:2\.16[38]|3\.27)|18\.96|83\.87)|41\.(?:141|249)|95\.135|59\.92)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0.5
@@ -89,7 +89,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:3\.233\.64|7\.118\.82)|03\.87\.178)|6(?:4\.187\.119|2\.95\.110|1\.7\.231)|1(?:18\.217\.216|96\.40\.10)|78\.138\.1(?:6[89]|7[01])|41\.223\.248|89\.232\.105|93\.186\.96)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:3\.(?:160\.112|22\.69)|8\.217\.216)|9(?:3\.108\.38|6\.40\.10))|2(?:1(?:3\.233\.64|7\.118\.82)|03\.8(?:7\.178|2\.80))|6(?:2\.95\.110|1\.7\.231)|78\.138\.1(?:6[89]|7[01])|93\.186\.96)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
@@ -106,7 +106,7 @@ score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
# 0.2960/0 1.000 20100409
# 0.2905/0 1.000 20100410 net
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:2(?:0(?:3\.82\.(?:9[234]|8[01])|2\.(?:152\.243|70\.54)|9\.222\.0)|1(?:3\.(?:(?:163\.11|87\.7)6|233\.64)|2\.63\.221|7\.118\.90))|1(?:1(?:5\.147\.(?:2(?:0[123]|3[127]|29)|192)|3\.22\.69|2\.76\.5)|9(?:6\.12\.2(?:3[36]|4[45])|0\.104\.162)|73\.45\.96)|8(?:5\.26\.(?:1(?:6[45]|83)|23[2345])|1\.192\.211|9\.232\.105|2\.178\.69|3\.149\.3)|7(?:7\.232\.142|8\.138\.170|9\.106\.109|2\.21\.6)|41\.(?:2(?:23\.20|54\.)|140\.25)1|9(?:5\.129\.166|1\.203\.67)|62\.61\.164)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:2(?:0(?:3\.82\.(?:9[234]|8[01])|2\.(?:152\.243|70\.54)|9\.222\.0)|1(?:3\.(?:(?:163\.11|87\.7)6|233\.64)|2\.63\.221|7\.118\.90))|1(?:1(?:5\.147\.(?:2(?:3[27]|02|29)|192)|2\.76\.5)|9(?:6\.12\.2(?:3[36]|4[45])|0\.104\.162)|73\.45\.96)|8(?:5\.26\.(?:1(?:6[45]|8[36])|23[2345])|1\.192\.211|9\.232\.105|2\.178\.69|3\.149\.3)|7(?:7\.232\.142|8\.138\.170|9\.106\.109|2\.21\.6)|41\.(?:2(?:23\.20|54\.)|140\.25)1|9(?:5\.129\.166|1\.203\.67)|62\.61\.164)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0.6
@@ -123,7 +123,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:0\.(?:1(?:(?:49\.103\.23|04\.156\.9)8|91\.129\.191|61\.14\.132|83\.62\.154|7\.212\.73)|41\.(?:1(?:71\.154|99\.252)|223\.167)|2(?:4\.150\.68|6\.67\.230|7\.80\.93)|34\.154\.204|86\.207\.218|96\.68\.179)|5\.(?:1(?:(?:38\.84\.21|89\.46\.25)3|61\.(?:8\.1|9\.2))|2(?:02\.81\.154|38\.191\.68))|3\.1(?:0(?:7\.184\.192|8\.38\.228)|98\.8\.211)|6\.1(?:\.209\.(?:69|83)|2\.226\.220)|4\.54\.52\.239)|2(?:2\.(?:25(?:2\.234\.74|5\.112\.2)|166\.61\.134|34\.215\.210)|1\.1(?:\.(?:37\.14[67]|18\.244)|68\.226\.231)|(?:5\.132\.54\.21|\.191\.88\.5)0|3\.140\.(?:193\.203|250\.254))|1(?:(?:4\.32\.100\.12|9\.226\.84\.21|3\.160\.2\.5)8|(?:2\.221\.100\.17|8\.217\.216\.13)2|5\.(?:118\.134\.54|68\.53\.45)|1\.224\.250\.13[034])|73\.(?:45\.96\.(?:2(?:0[3467]|1[49])|1(?:0[12]|9[23])|98)|1(?:61\.201\.15|2\.120\.21)7)|8(?:6\.24\.(?:1[69]|21)\.|9\.84\.174\.25)3|51\.(?:44\.239\.62|76\.20\.218)|63\.23\.104\.129)|2(?:0(?:1\.(?:(?:5(?:3\.133\.20|9\.92\.24)|43\.
13\.8)6|2(?:00\.178\.50|32\.107\.46)|1(?:0\.176\.43|44\.87\.36)|7\.225\.15)|0\.(?:11(?:6\.243\.197|7\.254\.129)|(?:95\.162\.20|6\.193\.9)0|210\.214\.176|3\.170\.217|80\.140\.61)|9\.(?:2(?:22\.0\.(?:[46]|1[39]|2[78])|54\.56\.106)|94\.196\.170)|3\.(?:126\.152\.242|229\.24\.25|59\.95\.113)|4\.(?:10\.139\.16[02]|202\.250\.207)|2\.(?:164\.52\.100|42\.133\.58)|6\.48\.103\.222|7\.255\.89\.50)|1(?:3\.(?:1(?:98\.11(?:1\.207|2\.90)|63\.116\.2(?:26|30)|86\.47\.150)|226\.144\.65)|7\.(?:7(?:6\.2\.129|7\.78\.2)|64\.10(?:4\.107|0\.66))|6\.(?:155\.3(?:9\.(?:14|22)|8\.233)|230\.133\.69)|9\.95\.(?:227\.218|148\.97|45\.81)|1\.1(?:91\.174\.141|71\.31\.100)|(?:2\.63\.221\.1|8\.38\.29\.8)0|0\.112\.121\.12)|2(?:2\.(?:12(?:4\.156\.231|0\.16\.15)|252\.223\.2)|1\.143\.46\.33))|8(?:9\.(?:2(?:11\.4(?:6\.21[08]|7\.162)|32\.124\.80)|42\.116\.44|74\.181\.6)|2\.(?:1(?:14\.(?:65|90)\.246|78\.173\.197|40\.91\.41)|75\.56\.80)|0\.(?:1(?:79\.2(?:12\.151|31\.205)|22\.70\.11)|93\.125\.186)|(?:7\.126\.68\.21|3\.3\
.237\.19)5|5\.1(?:75\.6\.123|54\.6\.71)|1\.192\.48\.62|6\.72\.93\.138|4\.22\.56\.50)|6(?:1\.(?:1(?:00\.228\.61|9\.71\.74)|247\.49\.142|7\.231\.230|9\.6\.245)|4\.(?:1(?:(?:20\.251\.18|64\.228\.20)6|87\.119\.3)|70\.190\.10)|(?:9\.151\.79\.23|5\.163\.88\.9)8|0\.(?:49\.236\.137|51\.225\.213)|2\.(?:103\.171\.28|95\.110\.33)|7\.(?:115\.179\.198|217\.48\.9)|3\.253\.107\.166)|7(?:7\.(?:1(?:20\.251\.37|92\.142\.63)|2(?:1\.134\.95|2\.162\.99)|73\.139\.2)|6\.2(?:27\.84\.105|52\.37\.46)|9\.(?:29\.110\.27|87\.57\.186)|8\.1(?:50\.110\.1|09\.36\.)16|2\.21\.6\.24)|9(?:5\.(?:188\.80\.244|77\.218\.249|51\.121\.90)|3\.(?:91\.196\.(?:132|99)|157\.148\.46)|(?:1\.150\.127\.9|4\.23\.203\.17)3|8\.244\.54\.105|7\.66\.79\.81)|41\.(?:2(?:0(?:5\.209\.70|6\.61\.243|7\.162\.2)|15\.18\.110|50\.251\.88)|1(?:41\.251\.126|90\.239\.178))|59\.(?:90\.214\.99|6\.146\.24))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:2(?:0(?:1\.(?:2(?:15\.112\.231|00\.178\.50|32\.107\.46)|(?:5(?:3\.133\.20|9\.92\.24)|43\.13\.8)6|1(?:0\.176\.43|44\.87\.36)|7\.225\.15)|0\.(?:11(?:1\.161\.194|6\.243\.197|7\.254\.129)|(?:95\.162\.20|6\.193\.9)0|210\.214\.176|3\.170\.217|80\.140\.61)|9\.(?:2(?:22\.0\.(?:1[369]|27|4)|54\.56\.106)|94\.196\.170)|3\.(?:126\.152\.242|229\.24\.25|59\.95\.113)|4\.(?:10\.139\.16[02]|202\.250\.207)|2\.(?:164\.52\.100|42\.133\.58)|6\.48\.103\.222|7\.255\.89\.50)|1(?:3\.(?:1(?:98\.11(?:1\.207|2\.90)|63\.116\.2(?:26|30)|86\.47\.150)|226\.144\.65)|7\.(?:7(?:6\.2\.129|7\.78\.2)|23\.188\.62|64\.100\.66)|6\.(?:155\.3(?:9\.(?:2[24]|14)|8\.233)|230\.133\.69)|9\.95\.(?:227\.218|148\.97|45\.81)|1\.1(?:91\.174\.141|71\.31\.100)|8\.(?:111\.179\.134|38\.29\.80)|0\.(?:112\.121\.12|5\.68\.20)|2\.63\.221\.10)|2(?:2\.(?:12(?:4\.156\.231|0\.16\.15)|252\.223\.2)|1\.143\.46\.33))|1(?:9(?:0\.(?:1(?:(?:49\.103\.23|04\.156\.9)8|91\.129\.191|61\.14\.132|7\.212
\.73)|41\.(?:1(?:71\.154|99\.252)|223\.167)|2(?:4\.150\.68|6\.67\.230|7\.80\.93)|34\.154\.204|86\.207\.218|96\.68\.179)|5\.(?:1(?:61\.(?:8\.1|9\.2)|89\.46\.253|74\.4\.209)|238\.191\.68)|3\.1(?:0(?:7\.184\.192|8\.38\.228)|98\.8\.211)|6\.(?:1\.209\.(?:69|83)|25\.26\.198)|4\.54\.52\.239)|2(?:2\.(?:25(?:2\.234\.74|5\.112\.2)|166\.61\.134|34\.215\.210)|1\.1(?:\.(?:37\.14[67]|18\.244)|68\.226\.231)|3\.140\.193\.203|5\.132\.54\.210)|1(?:(?:4\.32\.100\.12|9\.226\.84\.21|3\.160\.2\.5)8|5\.(?:118\.134\.54|68\.53\.45)|1\.224\.250\.13[34]|8\.217\.216\.132)|73\.(?:45\.96\.(?:2(?:0[34567]|1[49])|1(?:0[12]|9[24])|98)|1(?:61\.201\.15|2\.120\.21)7)|8(?:9\.(?:84\.174\.253|72\.230\.76)|6\.24\.(?:1[69]|21)\.3)|51\.(?:44\.239\.62|76\.20\.218)|63\.23\.104\.129|40\.109\.82\.93)|8(?:2\.(?:1(?:14\.(?:65|90)\.246|78\.173\.197|40\.91\.41)|75\.56\.80)|9\.(?:2(?:11\.46\.21[08]|32\.124\.80)|42\.116\.44|74\.181\.6)|0\.(?:179\.2(?:12\.151|31\.205)|93\.125\.186)|(?:7\.126\.68\.21|3\.3\.237\.19)5|5\.1(?:75\.
6\.123|54\.6\.71)|1\.192\.48\.62|6\.72\.93\.138|4\.22\.56\.50)|6(?:(?:(?:7\.115\.179\.1|5\.163\.88\.)9|9\.(?:151\.79\.23|79\.214\.11))8|1\.(?:1(?:00\.228\.61|9\.71\.74)|247\.49\.142|7\.231\.230|9\.6\.245)|2\.(?:1(?:82\.108\.213|03\.171\.28)|95\.110\.33)|4\.(?:1(?:64\.228\.206|87\.119\.3)|70\.190\.10)|3\.253\.107\.166|0\.49\.236\.137)|7(?:7\.(?:1(?:20\.251\.37|92\.142\.63)|22(?:5\.177\.160|\.162\.99)|73\.139\.2)|6\.(?:1(?:03\.160\.74|72\.157\.10)|227\.84\.105)|9\.(?:29\.110\.27|87\.57\.186)|8\.1(?:50\.110\.1|09\.36\.)16|4\.92\.90\.58|2\.21\.6\.24)|9(?:5\.(?:188\.80\.244|77\.218\.249|51\.121\.90)|3\.(?:91\.196\.(?:132|99)|157\.148\.46)|1\.(?:150\.127\.93|214\.128\.24)|4\.(?:23\.203\.17|85\.241\.19)3|8\.244\.54\.105|7\.66\.79\.81)|41\.(?:2(?:0(?:5\.209\.70|6\.61\.243)|15\.18\.110|50\.251\.88)|190\.239\.178)|59\.(?:90\.214\.99|6\.146\.24))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work