You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2010/04/12 04:57:08 UTC
svn commit: r933079 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Mon Apr 12 02:57:08 2010
New Revision: 933079
URL: http://svn.apache.org/viewvc?rev=933079&view=rev
Log:
auto-generated SpamCop neighbor rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=933079&r1=933078&r2=933079&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Mon Apr 12 02:57:08 2010
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 2010041022
+## khop-sc-neighbors.cf v 2010041122
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -54,7 +54,7 @@ score KHOP_SC_TOP_CIDR8 0.9 0.1 0.9 0.
# 11.5987/0.1295 spam/ham, 0.989 s/o @ 20100409 solo=11.6856/0.5731.953
# http://www.spamcop.net/w3m?action=map;net=bmaxcnt;mask=16777215;sort=spamcnt
-header KHOP_SC_CIDR16 Received =~ /(?-xism:\b92\.85(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_CIDR16 Received =~ /(?-xism:\b94\.179(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_CIDR16 Relay CIDR /16 is among worst in SpamCop
tflags KHOP_SC_CIDR16 nopublish
score KHOP_SC_CIDR16 1.6 0.5 1.6 0.5
@@ -68,7 +68,7 @@ score KHOP_SC_CIDR16 1.6 0.5 1.6 0.5
# 0.2102/0.0011 spam/ham, 0.995 s/o @ 20100406
# no hits 20100409 (wha!?)
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:2(?:2\.16[238]|3\.27)|18\.96|83\.87)|9(?:4\.179|2\.47)|41\.141)(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:2(?:2\.16[238]|3\.27)|18\.96|83\.87)|9(?:5\.133|2\.47)|41\.141)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0.5
@@ -83,7 +83,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:(?:1\.191\.17|3\.233\.6)4|7\.118\.82)|03\.82\.(?:81|94)|21\.143\.46)|1(?:89\.112\.218|13\.22\.69)|7(?:8\.138\.171|9\.106\.109)|8(?:9\.232\.105|3\.149\.3)|64\.187\.119|41\.214\.12)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:(?:1\.191\.17|3\.233\.6)4|7\.118\.82)|03\.82\.(?:81|94))|(?:64\.187\.11|113\.22\.6)9|8(?:9\.232\.105|3\.149\.3)|78\.138\.1(?:6[89]|7[01]))\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
@@ -98,7 +98,7 @@ score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
# 0.2126/0 spam/ham, 1.000 s/o @ 20100406
# 0.2960/0 spam/ham, 1.000 s/o @ 20100409
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:5\.147\.(?:2(?:3[0127]|0[123]|29)|192)|1\.224\.250|7\.242\.28|2\.76\.5)|9(?:6\.12\.2(?:4[245]|3[36])|0\.104\.162)|73\.45\.96)|2(?:0(?:3\.82\.(?:8[012]|9[234])|2\.(?:152\.243|70\.54)|9\.222\.0)|1(?:3\.(?:163\.11|87\.7)6|2\.63\.221|7\.118\.90))|8(?:5\.26\.(?:23[2345]|16[45])|1\.192\.211|9\.232\.105|2\.178\.69|3\.149\.3)|6(?:1\.(?:19\.(?:66|71)|7\.231)|2\.61\.164)|7(?:7\.232\.142|8\.138\.170|2\.21\.6)|41\.(?:2(?:23\.20|54\.)|140\.25)1|9(?:5\.129\.166|1\.203\.67))\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:5\.147\.(?:2(?:3[0127]|0[123]|29)|192)|1\.224\.250|7\.242\.28|2\.76\.5)|9(?:6\.12\.2(?:3[36]|4[45])|0\.104\.162)|73\.45\.96)|2(?:0(?:3\.82\.(?:8[012]|9[234])|2\.(?:152\.243|70\.54)|9\.222\.0)|1(?:3\.(?:163\.11|87\.7)6|2\.63\.221|7\.118\.90))|8(?:5\.26\.(?:23[2345]|16[45])|1\.192\.211|9\.232\.105|2\.178\.69|3\.149\.3)|7(?:7\.232\.142|8\.138\.170|9\.106\.109|2\.21\.6)|6(?:1\.(?:19\.7|7\.23)1|2\.61\.164)|9(?:5\.129\.166|1\.203\.67)|41\.(?:140\.25|254\.)1)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0.6
@@ -113,7 +113,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:0\.(?:1(?:49\.103\.238|83\.62\.154|7\.212\.73)|41\.(?:171\.154|223\.167)|34\.154\.204|96\.68\.179)|5\.(?:1(?:(?:38\.84\.21|89\.46\.25)3|61\.(?:8\.1|9\.2))|2(?:02\.81\.154|38\.191\.68)|5\.41\.190)|3\.(?:1(?:0(?:7\.184\.192|8\.38\.228)|98\.8\.211)|200\.173\.154)|4\.(?:0\.252\.175|250\.1\.111|44\.21\.49|54\.51\.28)|6\.(?:3\.166\.217|40\.10\.250))|2(?:2\.(?:16(?:0\.(?:179\.190|99\.42)|6\.61\.134)|252\.2(?:46\.23|34\.7)4|34\.215\.210)|1\.(?:1(?:\.(?:37\.14[567]|18\.244)|67\.33\.83)|242\.103\.202)|3\.1(?:40\.250\.254|9\.238\.212)|4\.(?:124\.43\.3|30\.252\.)2|(?:5\.20\.80|\.191\.88)\.50)|1(?:9\.(?:226\.(?:161\.154|84\.218)|110\.85\.126|75\.19\.230)|5\.1(?:18\.134\.54|40\.76\.100)|3\.(?:22\.69\.172|160\.2\.58)|1\.224\.250\.1(?:3[045]|29)|2\.221\.100\.172|4\.69\.241\.138|7\.110\.24\.250)|8(?:9\.(?:112\.218\.234|84\.174\.253)|6\.24\.(?:1[6789]|2[13])\.3|8\.108\.158\.135)|73\.(?:45\.96\.(?:2(?:1[01235]|0[18])|1(?:9[3578]|0[02])|
99)|161\.201\.157)|5(?:5\.212\.105\.12|1\.44\.239\.6)2)|2(?:0(?:1\.(?:1(?:55\.130\.179|0\.176\.43)|2(?:32\.107\.46|51\.250\.3)|(?:59\.92\.24|43\.13\.8)6)|2\.(?:1(?:24\.110\.219|44\.185\.170)|4(?:2\.133\.58|3\.181\.7)|87\.47\.130|75\.36\.72)|9\.(?:2(?:22\.0\.(?:[67]|1[29]|28|30)|54\.56\.106)|94\.196\.170)|0\.(?:141\.87\.135|95\.162\.200|80\.140\.61)|3\.(?:126\.152\.242|202\.255\.67)|6\.48\.103\.222|7\.255\.89\.50)|1(?:3\.(?:1(?:98\.(?:11(?:1\.207|3\.144|2\.90)|25\.33)|63\.116\.2(?:26|30)|38\.90\.158)|226\.144\.65)|1\.(?:1(?:(?:91\.174\.14|08\.94\.7)1|71\.31\.100)|24\.209\.253)|7\.(?:1(?:74\.229\.221|14\.11\.35)|76\.2\.129)|9\.(?:95\.(?:227\.218|148\.97)|143\.134\.110)|2\.(?:175\.53\.1|63\.221\.)10|6\.230\.133\.69|8\.248\.44\.196)|2(?:2\.(?:12(?:4\.1(?:56\.2|98\.1)31|0\.16\.15)|252\.223\.2)|1\.143\.46\.33))|8(?:2\.1(?:14\.(?:7(?:0\.54|9\.86)|(?:65|90)\.246)|93\.140\.168|40\.91\.41)|0\.(?:1(?:79\.231\.205|22\.70\.11)|93\.125\.186|69\.146\.54)|3\.(?:23(?:9\.33\.38|4\.89\.2)|142\
.111\.228)|9\.(?:211\.46\.21[08]|161\.141\.147)|1\.(?:192\.4|22\.)8\.62|6\.110\.168\.153|5\.18\.140\.45|7\.117\.35\.81|4\.22\.56\.50)|6(?:4\.(?:1(?:(?:20\.251\.18|64\.228\.20)6|87\.119\.[23])|70\.190\.10)|1\.(?:1(?:00\.228\.61|9\.71\.74)|7\.2(?:31\.23|41\.7)0)|0\.(?:49\.236\.137|51\.225\.213)|7\.(?:115\.179\.198|217\.48\.9)|9\.1(?:51\.79\.238|75\.88\.227)|3\.25(?:3\.107\.166|5\.22\.42)|6\.147\.115\.202)|7(?:7\.(?:1(?:20\.251\.37|92\.142\.63)|2(?:41\.17\.120|2\.162\.99)|73\.139\.2)|8\.(?:1(?:38\.169\.158|09\.36\.16)|40\.254\.1)|6\.(?:103\.160\.74|227\.84\.105)|2\.21\.6\.(?:24|81)|0\.118\.213\.198|5\.77\.187\.10)|9(?:(?:8\.126\.149\.9|7\.66\.79\.8)1|1\.1(?:93\.253\.23|50\.127\.9)3|3\.91\.196\.(?:132|99))|5(?:8\.27\.196\.8|9\.6\.146\.2)4|41\.215\.18\.110)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:0\.(?:1(?:49\.103\.238|83\.62\.154|7\.212\.73)|2(?:4\.150\.68|7\.80\.93)|41\.(?:171\.154|223\.167)|34\.154\.204|86\.207\.218|96\.68\.179)|5\.(?:1(?:(?:38\.84\.21|89\.46\.25)3|61\.(?:8\.1|9\.2))|238\.191\.68|5\.41\.190)|3\.(?:1(?:0(?:7\.184\.192|8\.38\.228)|98\.8\.211)|200\.173\.154)|6\.(?:1\.209\.(?:69|83)|3\.166\.217)|4\.0\.252\.175)|2(?:2\.(?:16(?:0\.(?:179\.190|99\.42)|6\.61\.134)|252\.2(?:46\.23|34\.7)4|34\.215\.210)|1\.1(?:6(?:8\.226\.231|7\.33\.83)|\.(?:37\.14[67]|18\.244))|(?:5\.165\.106\.19|\.191\.88\.5)0|4\.(?:124\.43\.3|30\.252\.)2|3\.140\.250\.254)|1(?:9\.(?:226\.(?:161\.154|84\.218)|110\.85\.126|75\.19\.230)|(?:2\.221\.100\.17|8\.217\.216\.13)2|5\.1(?:18\.134\.54|40\.76\.100)|1\.224\.250\.1(?:3[035]|29)|7\.110\.24\.250|3\.160\.2\.58)|8(?:9\.(?:112\.218\.234|84\.174\.253|72\.230\.76)|6\.24\.(?:1[6789]|2[13])\.3|8\.61\.252\.238)|73\.(?:45\.96\.(?:2(?:1[12345]|0[138])|1(?:9[3578]|00)|99)|1(?:61\.201\.15|2\.12
0\.21)7)|5(?:1\.(?:44\.239\.62|76\.20\.218)|5\.212\.105\.122))|2(?:0(?:1\.(?:1(?:16\.140\.246|55\.130\.179|0\.176\.43)|2(?:00\.178\.50|32\.107\.46)|(?:59\.92\.24|43\.13\.8)6)|0\.(?:1(?:17\.254\.129|41\.87\.135)|6(?:8\.124\.169|\.193\.90)|32\.239\.139|95\.162\.200|80\.140\.61)|2\.(?:1(?:24\.110\.219|44\.185\.170)|4(?:2\.133\.58|3\.181\.7)|75\.36\.72)|9\.(?:2(?:22\.0\.(?:[67]|1[29]|28)|54\.56\.106)|94\.196\.170)|3\.(?:126\.152\.242|202\.255\.67|59\.95\.113)|6\.48\.103\.222|7\.255\.89\.50)|1(?:3\.(?:1(?:98\.(?:11(?:1\.207|3\.144|2\.90)|25\.33)|63\.116\.2(?:26|30)|38\.90\.158)|226\.144\.65)|9\.(?:95\.(?:227\.218|148\.97|45\.81)|143\.134\.110)|1\.1(?:(?:91\.174\.14|08\.94\.7)1|71\.31\.100)|7\.(?:174\.229\.221|76\.2\.129)|8\.(?:248\.44\.196|38\.29\.80)|2\.(?:175\.53\.1|63\.221\.)10|6\.230\.133\.69)|2(?:2\.(?:12(?:4\.156\.231|0\.16\.15)|252\.223\.2)|1\.143\.46\.33))|8(?:2\.(?:1(?:14\.(?:65|90)\.246|78\.173\.197|93\.140\.168|40\.91\.41)|75\.56\.80)|9\.(?:2(?:11\.46\.21[08]|48\.126\.
206|32\.124\.80)|90\.153\.200)|0\.(?:1(?:79\.231\.205|22\.70\.11)|93\.125\.186)|5\.1(?:75\.6\.123|8\.140\.45|54\.6\.71)|3\.23(?:9\.33\.38|4\.89\.2)|1\.192\.48\.62|7\.117\.35\.81|4\.22\.56\.50)|6(?:4\.(?:1(?:(?:20\.251\.18|64\.228\.20)6|87\.119\.[23])|70\.190\.10)|1\.(?:1(?:00\.228\.61|9\.71\.74)|7\.2(?:31\.23|41\.7)0)|0\.(?:49\.236\.137|51\.225\.213)|7\.(?:115\.179\.198|217\.48\.9)|9\.1(?:51\.79\.238|75\.88\.227)|3\.253\.107\.166|2\.95\.110\.33)|7(?:7\.(?:1(?:20\.251\.37|92\.142\.63)|2(?:41\.17\.120|2\.162\.99)|73\.139\.2)|8\.1(?:38\.169\.158|09\.36\.16)|2\.21\.6\.(?:24|81)|6\.227\.84\.105|5\.77\.187\.10)|9(?:(?:8\.126\.149\.9|7\.66\.79\.8)1|3\.91\.196\.(?:132|99)|1\.150\.127\.93|5\.51\.121\.90)|41\.(?:190\.239\.178|215\.18\.110)|5(?:8\.27\.196\.8|9\.6\.146\.2)4)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work