You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2010/09/15 08:58:21 UTC

svn commit: r997207 - /spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf

Author: khopesh
Date: Wed Sep 15 06:58:21 2010
New Revision: 997207

URL: http://svn.apache.org/viewvc?rev=997207&view=rev
Log:
auto-generated rules

Modified:
    spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf

Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=997207&r1=997206&r2=997207&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Wed Sep 15 06:58:21 2010
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf	v 201009132
+## khop-sc-neighbors.cf	v 201009152
 ## Khopesh's syndication of SpamCop's top offenders and top offending networks.
 ## 
 ## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -57,7 +57,7 @@ score	 KHOP_SC_TOP_CIDR8  0.9 0.1 0.9 0.
 # 11.6286/0.0475 0.996 20100410  net, solo=11.7224/0.6900@0.944, ->LE as above
 
 # http://www.spamcop.net/w3m?action=map;net=bmaxcnt;mask=16777215;sort=spamcnt
-header	 KHOP_SC_CIDR16  Received =~ /(?-xism:\b190\.233(?:\.[012]?\d{1,2}){2}\b)/
+header	 KHOP_SC_CIDR16  Received =~ /___ FAILED TO POPULATE ___/
 describe KHOP_SC_CIDR16  Relay CIDR /16 is among worst in SpamCop
 tflags	 KHOP_SC_CIDR16  nopublish
 score	 KHOP_SC_CIDR16  1.6 0.5 1.6 0.5
@@ -72,7 +72,7 @@ score	 KHOP_SC_CIDR16  1.6 0.5 1.6 0.5
 # 0     /0      0     20100409  (wha!?)
 # crap, still empty   20100410  bad scrape, script failed to populate rule
 
-header	 KHOP_SC_TOP_CIDR16  Received =~ /(?-xism:\b(?:1(?:1(?:7\.(?:197|241)|3\.(?:169|22)|5\.240)|2(?:3\.2[67]|2\.168))|84\.229)(?:\.[012]?\d{1,2}){2}\b)/
+header	 KHOP_SC_TOP_CIDR16  Received =~ /(?-xism:\b1(?:2(?:3\.2[67]|2\.168)|1(?:5\.240|3\.22))(?:\.[012]?\d{1,2}){2}\b)/
 describe KHOP_SC_TOP_CIDR16  Relay CIDR /16 leads SpamCop in worst /16s
 tflags	 KHOP_SC_TOP_CIDR16  nopublish
 score	 KHOP_SC_TOP_CIDR16  2.0 0.5 2.0 0.5
@@ -89,7 +89,7 @@ score	 KHOP_SC_TOP_CIDR16  2.0 0.5 2.0 0
 
 
 # http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header	 KHOP_SC_CIDR24  Received =~ /(?-xism:\b(?:2(?:1(?:7\.(?:118\.8[12]|66\.146)|3\.233\.64)|2(?:2\.124\.178|1\.143\.46)|03\.217\.145)|1(?:09\.(?:205\.2(?:48|52)|166\.128|95\.39)|93\.239\.44|18\.71\.8)|8(?:7\.252\.227|9\.232\.105|3\.149\.21)|7(?:8\.1(?:08\.178|38\.170)|7\.74\.36)|9(?:5\.1(?:29\.16|54\.11)6|4\.23\.219)|64\.187\.99)\.[012]?\d{1,2}\b)/
+header	 KHOP_SC_CIDR24  Received =~ /(?-xism:\b(?:2(?:0(?:(?:2\.129\.23|3\.217\.14)5|9\.239\.47)|1(?:7\.(?:118\.8[12]|66\.146)|3\.233\.64)|2(?:2\.124\.178|1\.143\.46))|1(?:09\.(?:205\.2(?:5[23]|48)|95\.39)|93\.239\.44|18\.71\.8)|8(?:(?:1\.20\.10|5\.26\.23)4|7\.252\.227|3\.149\.21)|9(?:5\.1(?:29\.16|54\.11)6|4\.23\.219)|7(?:8\.138\.17[01]|7\.74\.36))\.[012]?\d{1,2}\b)/
 describe KHOP_SC_CIDR24  Relay CIDR /24 is among worst in SpamCop
 tflags	 KHOP_SC_CIDR24  nopublish
 score	 KHOP_SC_CIDR24  2.5 0.6 2.5 0.6
@@ -106,7 +106,7 @@ score	 KHOP_SC_CIDR24  2.5 0.6 2.5 0.6
 # 0.2960/0      1.000 20100409
 # 0.2905/0      1.000 20100410  net
 
-header	 KHOP_SC_TOP_CIDR24  Received =~ /(?-xism:\b(?:8(?:5\.26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|1\.(?:192\.2(?:15|38)|20\.104)|3\.149\.(?:3[27]?|21|45)|9\.232\.105|2\.178\.69)|2(?:1(?:7\.(?:8\.2(?:25|36)|118\.90)|3\.(?:233\.64|87\.76)|8\.248\.64|1\.202\.2)|03\.(?:152\.2|82\.95)|22\.236\.47)|1(?:1(?:3\.162\.(?:[67]7|245)|1\.224\.250|7\.241\.252|8\.160\.53)|93\.231\.238|88\.135\.2)|7(?:7\.232\.14[23]|8\.138\.171)|9(?:1\.203\.67|3\.186\.96)|61\.1(?:39\.151|9\.66)|41\.(?:254\.1|95\.4))\.[012]?\d{1,2}\b)/
+header	 KHOP_SC_TOP_CIDR24  Received =~ /(?-xism:\b(?:1(?:1(?:3\.162\.(?:2(?:28|45)|6[47]|77|96)|1\.224\.250|7\.241\.252|8\.160\.53)|(?:09\.166\.12|93\.231\.23)8|88\.135\.2)|8(?:5\.26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|3\.149\.(?:3[27]?|4[35]|21)|1\.192\.2(?:15|38)|9\.232\.105|2\.178\.69)|2(?:1(?:7\.(?:8\.2(?:25|36)|118\.90)|3\.(?:233\.64|87\.76)|8\.248\.64|1\.202\.2)|03\.(?:152\.2|82\.95)|22\.236\.47)|7(?:7\.232\.14[23]|8\.138\.171|9\.106\.109)|5(?:9\.99\.1(?:28|53)|8\.186\.220)|9(?:1\.203\.67|3\.186\.96)|41\.(?:254\.[01]|95\.4)|61\.19\.66)\.[012]?\d{1,2}\b)/
 describe KHOP_SC_TOP_CIDR24  Relay CIDR /24 leads SpamCop in worst /24s
 tflags	 KHOP_SC_TOP_CIDR24  nopublish
 score	 KHOP_SC_TOP_CIDR24  2.7 0.6 2.7 0.6
@@ -123,7 +123,7 @@ score	 KHOP_SC_TOP_CIDR24  2.7 0.6 2.7 0
 
 
 # http://www.spamcop.net/w3m?action=hoshame
-header	 KHOP_SC_TOP200  Received =~ /(?-xism:\b(?:1(?:9(?:5\.(?:1(?:6(?:1\.(?:40\.10|8\.1|9\.2)|0\.253\.4)|17\.57\.151|50\.77\.247)|93\.160\.21[24]|230\.180\.150)|3\.(?:2(?:3(?:9\.44\.190|1\.238\.4)|01\.198\.229)|1(?:(?:07\.184\.19|7\.253\.1)3|58\.3\.218))|4\.1(?:26\.180\.1(?:19|0)|35\.105\.232|46\.197\.6|70\.16\.85)|6\.206\.255\.44|0\.186\.28\.90|2\.114\.71\.62)|1(?:5\.(?:1(?:08\.228\.67|17\.35\.158)|24(?:0\.255\.254|8\.56\.145)|60\.123\.59)|8\.(?:160\.53\.15|233\.97\.7)4|1\.224\.250\.1(?:3[2345]|29)|4\.25\.89\.78)|2(?:2\.(?:252\.2(?:46\.23|34\.7)4|180\.71\.130)|3\.192\.160\.13|4\.158\.76\.100|5\.20\.82\.198)|8(?:6\.(?:24\.(?:1[689]|21)\.|120\.138\.4)3|7\.38\.150\.146|9\.54\.144\.78|\.93\.2\.20)|7(?:8\.(?:217\.208\.2|32\.64\.195|61\.138\.81)|4\.13(?:9\.134\.237|2\.250\.50))|09\.(?:1(?:66\.128\.[01234567]|71\.18\.134)|87\.92\.107)|5(?:8\.193\.138\.40|9\.148\.96\.251))|2(?:1(?:1\.(?:1(?:(?:91\.174\.14|3\.204\.)1|47\.3\.74)|2(?:24\.129\.18|02\.2\.6)0|49\.57\.46)|3\.(?:1(?:68\.
 182\.97|84\.224\.44)|226\.144\.65|88\.3\.73)|7\.(?:17(?:4\.232\.12|3\.21\.5)|7(?:0\.34\.157|6\.2\.129))|8\.(?:248\.4(?:4\.196|\.82)|148\.45\.139)|2\.(?:111\.203\.180|42\.117\.62)|6\.48\.173\.152)|0(?:0\.(?:8(?:0\.140\.6|9\.41\.11)1|141\.87\.135|71\.102\.39)|1\.(?:1(?:16\.140\.246|44\.130\.21)|251\.250\.3)|9\.(?:239\.47\.205|62\.7\.7[89])|2\.1(?:29\.199\.171|45\.138\.5))|2(?:2\.(?:12(?:4\.178\.158|2\.157\.90)|2(?:36\.47\.95|52\.223\.2))|0\.231\.(?:127\.9|69\.13)|1\.143\.46\.33))|8(?:9\.(?:1(?:61\.1(?:41\.147|99\.235|58\.80)|07\.26\.229|56\.75\.171)|74\.3\.215)|2\.1(?:14\.(?:7(?:9\.163|2\.62)|65\.246)|93\.140\.16[48]|40\.91\.41)|7\.(?:2(?:52\.227\.(?:8[48]|40?|56|72)|26\.222\.22)|90\.108\.158)|0\.(?:2(?:35\.105\.14|55\.16\.13)0|13\.225\.223|65\.16\.71)|3\.(?:142\.111\.228|228\.20\.207|65\.97\.194)|5\.1(?:(?:14\.113\.13|8\.81\.16)3|7\.3\.215)|1\.(?:20\.104\.173|88\.212\.2)|4\.115\.194\.87|8\.255\.77\.25)|9(?:4\.(?:2(?:3(?:\.2(?:19\.101|26\.230)|2\.59\.33)|45\.156\.33)|1(?:53\.2
 48\.78|28\.19\.64|88\.32\.73|02\.5\.20)|79\.36\.210)|1\.1(?:9(?:(?:5\.136\.1|3\.199\.)4|8\.175\.252)|21\.(?:1(?:18\.218|75\.20)|30\.139)|03\.204\.130|49\.173\.2)|5\.(?:(?:6(?:9\.207\.15|2\.150\.8)|129\.166\.7)6|22(?:2\.115\.160|1\.242\.12))|3\.(?:9(?:5\.168\.122|1\.196\.99)|159\.240\.59)|8\.206\.125\.248|2\.96\.173\.100|6\.32\.185\.114)|6(?:4\.(?:187\.(?:1(?:26\.177|18\.65)|99\.[59])|62\.83\.94)|1\.(?:1(?:39\.151\.18|9\.252\.89)|20\.151\.241)|9\.1(?:72\.199\.16[56]|42\.92\.194|81\.94\.79)|2\.1(?:(?:41\.122\.14|05\.14\.22)6|13\.86\.7)|7\.162\.236\.209)|7(?:8\.(?:1(?:08\.178\.191|11\.47\.10)|97\.204\.0)|(?:6\.161\.241\.11|2\.54\.21\.4)5|9\.(?:38\.252\.179|29\.87\.37)|0\.108\.253\.223|4\.86\.100\.94)|41\.(?:137\.(?:(?:24|30|56)\.4|63\.20[123])|245\.178\.209))\b)/
+header	 KHOP_SC_TOP200  Received =~ /(?-xism:\b(?:1(?:9(?:5\.(?:16(?:1\.(?:40\.10|8\.1|9\.2)|0\.253\.4)|(?:230\.180\.1|5\.124\.2)50|93\.160\.21[24])|4\.(?:1(?:26\.180\.1(?:19|0)|35\.105\.232|70\.16\.85)|44\.21\.48|50\.9\.114|79\.63\.86)|3\.(?:2(?:3(?:9\.44\.190|1\.238\.4)|01\.198\.229)|1(?:07\.184\.19|7\.253\.1)3)|0\.(?:186\.28\.90|26\.249\.98))|1(?:5\.(?:24(?:0\.255\.254|8\.56\.145)|117\.35\.158|60\.123\.59)|1\.(?:224\.250\.1(?:3[234]|29)|68\.108\.200)|8\.(?:160\.53\.15|233\.97\.7)4|9\.46\.164\.226)|2(?:2\.(?:252\.2(?:46\.23|34\.7)4|180\.71\.130)|4\.(?:158\.76\.100|83\.63\.203)|3\.192\.160\.13|5\.20\.82\.198|1\.50\.16\.11)|8(?:(?:6\.24\.(?:16|21)|3\.81\.169)\.3|7\.38\.1(?:36\.107|50\.146)|8\.226\.115\.16|9\.54\.144\.78|\.93\.2\.20)|7(?:8\.(?:217\.208\.2|32\.64\.195|61\.138\.81)|4\.13(?:9\.134\.237|2\.250\.50)|3\.45\.113\.26)|09\.(?:1(?:66\.128\.[01234567]|71\.18\.134)|87\.92\.107)|5(?:8\.193\.138\.40|9\.148\.96\.251))|2(?:0(?:0\.(?:(?:8(?:0\.140\.6|9\.41\.11)|219\.245\.4)1|
 1(?:41\.87\.135|52\.113\.24)|71\.102\.39)|1\.(?:1(?:16\.140\.246|44\.130\.21)|55\.136\.241|251\.250\.3)|9\.(?:239\.47\.205|62\.7\.7[89])|2\.1(?:31\.238\.114|45\.138\.5)|8\.(?:131\.186\.2|51\.23\.195)|4\.10\.139\.194)|1(?:1\.(?:1(?:52\.12\.114|3\.204\.1)|2(?:24\.129\.18|02\.2\.6)0)|3\.(?:1(?:09\.83\.167|84\.224\.44)|226\.144\.65)|2\.(?:11(?:1\.203\.180|8\.142\.77)|42\.117\.62)|7\.(?:17(?:4\.232\.12|3\.21\.5)|76\.2\.129)|8\.(?:248\.4(?:4\.196|\.82)|148\.45\.139))|2(?:2\.(?:12(?:4\.178\.158|2\.157\.90)|2(?:36\.47\.95|52\.223\.2))|0\.231\.(?:127\.9|69\.13)|1\.143\.46\.33))|8(?:9\.(?:1(?:61\.1(?:41\.147|99\.235|58\.80)|56\.75\.171|89\.169\.14)|23\.170\.128|74\.3\.215)|0\.(?:2(?:5(?:4\.110\.29|5\.16\.130)|35\.105\.140)|13\.225\.223|65\.16\.71)|7\.(?:2(?:52\.227\.(?:8[48]|40?|56|72)|26\.2(?:22\.22|42\.7))|90\.108\.158)|2\.1(?:93\.140\.16[48]|14\.79\.163|40\.91\.41)|3\.(?:142\.111\.228|228\.20\.207|65\.97\.194)|1\.(?:20\.104\.173|88\.212\.2)|4\.(?:115\.194\.87|51\.21\.83)|5\.1(?:14\
 .113\.133|7\.3\.215)|8\.255\.77\.25|6\.98\.9\.137)|9(?:1\.(?:1(?:9(?:(?:5\.136\.1|3\.199\.)4|8\.175\.252|9\.143\.1)|21\.(?:118\.218|30\.139)|03\.204\.130|49\.173\.2)|203\.62\.131)|4\.(?:1(?:53\.248\.78|28\.19\.64|88\.32\.73|02\.5\.20)|2(?:3(?:\.219\.101|2\.59\.33)|45\.156\.33)|79\.36\.210)|3\.(?:9(?:5\.168\.122|1\.196\.99)|1(?:59\.240\.5|26\.15\.4)9)|5\.(?:129\.166\.76|48\.248\.210)|2\.96\.173\.100)|6(?:9\.(?:1(?:72\.199\.16[56]|42\.92\.194)|234\.110\.210)|1\.(?:1(?:39\.151\.18|9\.252\.89)|20\.151\.241)|2\.1(?:(?:41\.122\.14|05\.14\.22)6|13\.86\.7)|4\.(?:187\.1(?:26\.177|18\.65)|251\.50\.5))|7(?:8\.(?:1(?:11\.47\.(?:10|6)|08\.178\.191)|40\.254\.1)|(?:6\.161\.241\.11|2\.54\.21\.4)5|9\.(?:38\.252\.179|29\.87\.37)|0\.108\.253\.223|7\.229\.35\.131|4\.86\.100\.94)|41\.(?:137\.(?:(?:24|30|56)\.4|63\.20[123])|245\.178\.209))\b)/
 describe KHOP_SC_TOP200  Relay listed in SpamCop top 200 spammer IPs
 tflags	 KHOP_SC_TOP200  nopublish
 score	 KHOP_SC_TOP200  4 0 4 0	# unnecessary if DNSBLs work
@@ -140,7 +140,7 @@ score	 KHOP_SC_TOP200  4 0 4 0	# unneces
 
 # PSBL-neighbors:  any /24 with 73+ (2/7, 29%) IPs in the PSBL (not SpamCop),
 # as obtained from rsync://psbl-mirror.surriel.com::psbl/psbl.txt
-header	 KHOP_PSBL_CIDR24	X-Spam-Relays-Untrusted =~ /(?-xism:\b(?:1(?:1(?:7\.(?:2(?:0(?:0\.(?:1(?:9[2345678]|7[016789]|8[01234]|4[45]|6\d)|2(?:1[01234567]|0[89]|4[02]|25)|3[24]|53)|5\.(?:1(?:4[45]|00|29|6)?|34|65|98)|4\.(?:1(?:6[01246]|4[45]|70)|225)|1\.(?:112|48|50|66))|4(?:1\.(?:[09]|2(?:5[234]|1[67]|4[04]|00|24|32)|1(?:7[67]?|2?8|3?6|12|44|9)|8[0123]?|6[45]|48)|2\.(?:1(?:4[0148]|96)?|8[04]?|4[04]|24?8|6?0)))|1(?:9(?:9\.(?:1(?:1[234569]|8[0125]|7[789]|4[56]|21|50)|5[01234567]|4[89]|[26]0|33)|6\.(?:2(?:2[45689]|3[0136]|08|12)|1(?:79|81)|34)|8\.(?:[025]|9[012345]|(?:16)?1|3[234]?|49?|8\d)|5\.(?:10[12346]|6[4789]|7[023]|9[79])|7\.(?:6[4567]|96)|4\.9[67])|\.2(?:4[89]|51)))|3\.(?:1(?:6(?:2\.(?:2(?:4[03456]|2[4578]|1[67]|3[49])|1(?:3[189]|0[01]|2[48])|7[04679]|6[457]|9[678]|56|87)|8\.(?:[06]|1(?:4[0123]|2[89]|3[78]|7[67]|08))|9\.(?:1(?:8[0123]|0[89])|33|89|94)|7\.(?:1(?:11|69)?|40)|6\.(?:(?:17)?1|3))|85\.1)|22\.6?8)|8\.(?:68\.(?:1(?:9[26]|21)|2(?:4[89]|53))|71\.[89])|5\.147\.(?:
 2(?:0[123]|3[012]|29)|192)|4\.79\.142|6\.71\.1)|2(?:2\.1(?:6(?:8\.(?:2(?:1[1789]|3[1378]|0[23]?|4[78]?|5[03]|23)|1(?:[178]|6[08]?)|31|69)|3\.184|1\.19)|76\.1(?:5[35]|48))|3\.(?:2(?:52\.2(?:08|10)|8\.20[12]|7\.9[79]|3\.255|2\.53)|18\.(?:24[012]|123))|0\.6(?:0\.(?:[03]|1?1)|1\.1[45]|2\.163|3\.7))|8(?:3\.8(?:(?:0\.17|7\.19)8|1\.114)|0\.194\.1|8\.135\.2)|9(?:0\.110\.155|4\.230\.146))|5(?:9\.9(?:9\.(?:1(?:5[2345]|2[89]|3[01]|60|92)|5[6789]|20[89]|4[01]|[37]2)|5\.(?:2[01235789]|6[45678]|1[368]?|7[013]?|3[29]|47|55|9)|7\.(?:2(?:1[01678]|0[89])|192)|8\.1(?:6[0123]|9[23]|44|52)|4\.(?:11[234]|41))|8\.18(?:6\.(?:2(?:1[6789]|20)|1(?:9[67]|4))|7\.(?:36|8)))|2(?:1(?:7\.(?:8\.2(?:25|36)|118\.90|66\.146)|3\.87\.(?:194|76)|2\.23\.10[45]|8\.248\.64)|0(?:3\.(?:1(?:28\.250|92\.224|52\.2)|82\.95)|2\.(?:152\.243|90\.102))|22\.25(?:3\.(?:1(?:77)?|2[4678]|30)|2\.(?:159|247)|4\.7[789]))|8(?:5\.26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|3\.149\.(?:3[27]?|4[345]|2[18])|9\.2(?:04\.1(?:37|53)|32\.105)|2\.
 1(?:32\.248|78\.69)|1\.192\.2(?:15|38))|9(?:2\.39\.(?:7[019]|65)|5\.154\.116|1\.203\.67)|41\.(?:254\.[012]|95\.[248]|191\.27)|7(?:7\.232\.14[23]|8\.138\.17[01])|61\.19\.6[567])\.[012]?\d{1,2}\b)/
+header	 KHOP_PSBL_CIDR24	X-Spam-Relays-Untrusted =~ /(?-xism:\b(?:1(?:1(?:7\.(?:2(?:0(?:0\.(?:1(?:9[2345678]|7[016789]|8[01234]|6\d|45)|2(?:1[01234567]|0[89]|4[02]|25)|3[234]|5[23]|99)|5\.(?:1(?:4[45]|00|6)?|34)|4\.1(?:6[01245]|4[45]|70)|1\.(?:48|66))|4(?:1\.(?:2(?:5[234]|1[67]|4[04]|00|24|32)|1(?:[89]|7[67]?|3?6|12|44)|8[0123]?|6[45]|48)|2\.(?:1(?:4[0148]|96)?|4[04]|24?8|80?|0)))|1(?:9(?:9\.(?:1(?:1[3456]|8[012]|4[56]|7[79]|21)|5[01234567]|4[89]|33)|8\.(?:[02]|9[012345]|1(?:65)?|3[234]?|8\d)|6\.(?:2(?:2[45689]|3[136]|12)|34)|5\.(?:10[124]|6[789]|97)|7\.(?:6[4567]|96|3)|4\.9[67])|\.248))|3\.(?:1(?:6(?:2\.(?:2(?:4[03456]|2[4578]|1[67]|3[49])|1(?:2[348]|0[01]|3[89])|7[04679]|6[457]|8[037]|9[678]|56)|8\.1(?:4[0123]|2[89]|3[78]|76)|7\.(?:(?:11)?1|40|2)|9\.1(?:8[0123]|09)|6\.3)|85\.1)|22\.6?8)|8\.(?:68\.(?:1(?:2[01]|9[26])|2(?:4[89]|5[23]))|71\.[89])|5\.147\.(?:2(?:0[123]|3[012]|29)|192)|0\.49\.193|4\.79\.142|6\.71\.1)|2(?:2\.1(?:6(?:8\.(?:2(?:1[0589]|0[23]?|3[13]|48|53)|1(?:[78]
 |68?)|69)|3\.184|1\.19)|76\.15[35])|3\.(?:2(?:52\.2(?:08|10)|8\.(?:143|202)|3\.255|7\.97)|18\.24[012])|0\.6(?:0\.(?:1?1|3)|2\.163|3\.7))|8(?:3\.8(?:0\.1(?:32|78)|7\.198)|0\.194\.1|8\.135\.2)|9(?:0\.110\.155|4\.230\.146))|5(?:9\.(?:9(?:9\.(?:1(?:5[2345]|2[89]|3[01]|92)|5[6789]|4[01]|[37]2|208|60)|5\.(?:2[0123589]|6[4578]|1[68]?|7[01]?|3[29]|47|55)|7\.(?:2(?:1[01678]|0[89])|192)|8\.1(?:6[0123]|9[23]|44|52)|4\.(?:113|41))|164\.2)|8\.18(?:6\.(?:2(?:1[6789]|20)|1(?:9[67]|4))|7\.8))|2(?:1(?:7\.(?:8\.2(?:25|36)|118\.90|66\.146)|3\.87\.(?:194|76)|2\.23\.10[45]|8\.248\.64)|22\.25(?:3\.(?:2[45678]|3[01]|177)|2\.(?:159|247)|4\.7[789])|0(?:3\.(?:1(?:28\.250|92\.224|52\.2)|82\.95)|2\.152\.243))|8(?:5\.26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|3\.149\.(?:3[27]?|4[345]|2[18])|9\.2(?:04\.1(?:37|53)|32\.105)|2\.1(?:32\.248|78\.69)|1\.192\.2(?:15|38))|9(?:2\.39\.(?:7[019]|65)|5\.154\.116|1\.203\.67)|41\.(?:254\.[012]|95\.[248]|191\.27)|7(?:7\.232\.14[23]|8\.138\.17[01])|6(?:1\.19\.6[567]|2\.24
 \.127))\.[012]?\d{1,2}\b)/
 describe KHOP_PSBL_CIDR24	Relay's IP/24 CIDR contains many PSBL hits
 tflags	 KHOP_PSBL_CIDR24	nopublish
 score	 KHOP_PSBL_CIDR24	1.8 0.8 1.8 0.8