You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2010/09/01 08:57:35 UTC
svn commit: r991448 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Wed Sep 1 06:57:35 2010
New Revision: 991448
URL: http://svn.apache.org/viewvc?rev=991448&view=rev
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=991448&r1=991447&r2=991448&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Wed Sep 1 06:57:35 2010
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201008312
+## khop-sc-neighbors.cf v 20100912
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -57,7 +57,7 @@ score KHOP_SC_TOP_CIDR8 0.9 0.1 0.9 0.
# 11.6286/0.0475 0.996 20100410 net, solo=11.7224/0.6900@0.944, ->LE as above
# http://www.spamcop.net/w3m?action=map;net=bmaxcnt;mask=16777215;sort=spamcnt
-header KHOP_SC_CIDR16 Received =~ /(?-xism:\b(?:(?:89\.12|59\.9)2|190\.233|92\.81)(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_CIDR16 Received =~ /(?-xism:\b(?:222\.253|59\.92|92\.84)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_CIDR16 Relay CIDR /16 is among worst in SpamCop
tflags KHOP_SC_CIDR16 nopublish
score KHOP_SC_CIDR16 1.6 0.5 1.6 0.5
@@ -72,7 +72,7 @@ score KHOP_SC_CIDR16 1.6 0.5 1.6 0.5
# 0 /0 0 20100409 (wha!?)
# crap, still empty 20100410 bad scrape, script failed to populate rule
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:2(?:3\.2[67]|2\.168)|1(?:5\.240|7\.241)|90\.(?:234|40))|2(?:17\.165|22\.253))(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:2(?:3\.2[67]|2\.168)|1(?:5\.240|7\.241)|90\.(?:23[34]|40))|92\.81)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0.5
@@ -89,7 +89,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:(?:3\.233|8\.248)\.64|7\.118\.81)|(?:01\.191\.19|22\.124\.17)8)|1(?:09\.(?:166\.136|95\.39)|78\.162\.225|59\.148\.96|15\.78\.81)|8(?:3\.1(?:49\.21|6\.167)|5\.2(?:22\.86|6\.234)|1\.20\.104)|9(?:5\.1(?:29\.16|54\.11)|3\.186\.9)6|(?:41\.137\.2|59\.97\.10)4|7(?:8\.138\.170|7\.74\.36))\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:(?:3\.233|8\.248)\.64|7\.118\.8[12]|6\.246\.55)|0(?:1\.191\.198|0\.4\.167))|1(?:9(?:0\.235\.213|3\.231\.238)|(?:09\.166\.13|59\.148\.9)6|15\.78\.81)|8(?:(?:1\.20\.10|5\.26\.23)4|3\.1(?:49\.21|6\.167))|9(?:5\.1(?:29\.16|54\.11)|3\.186\.9)6|(?:41\.137\.2|59\.97\.10)4|78\.138\.170)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
@@ -106,7 +106,7 @@ score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
# 0.2960/0 1.000 20100409
# 0.2905/0 1.000 20100410 net
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:8(?:5\.26\.(?:2(?:3[2345]|41)|164)|3\.149\.(?:3[27]?|21|45)|1\.192\.2(?:15|38)|9\.232\.105|2\.178\.69|0\.65\.16)|2(?:1(?:3\.(?:233\.64|87\.76)|7\.118\.(?:82|90)|1\.191\.174)|0(?:3\.(?:152\.2|82\.95)|9\.239\.47)|21\.143\.46)|1(?:1(?:3\.162\.(?:234|77)|7\.241\.25[23]|1\.224\.250)|9(?:0\.235\.209|3\.231\.238)|88\.135\.2)|5(?:9\.99\.(?:1(?:5[234]|28)|5[678])|8\.186\.(?:196|220))|7(?:7\.232\.14[23]|8\.138\.171)|6(?:7\.136\.92|1\.19\.66)|41\.(?:254\.[01]|95\.4)|91\.203\.67)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:8(?:5\.26\.(?:2(?:3[2345]|41)|164)|3\.149\.(?:3[27]?|21|45)|1\.192\.2(?:15|38)|9\.232\.105|2\.178\.69|0\.65\.16)|1(?:1(?:3\.162\.(?:(?:23|6)4|77)|7\.24(?:1\.25[23]|2\.0)|1\.224\.250)|78\.162\.225|90\.235\.209|88\.135\.2)|2(?:1(?:3\.(?:233\.64|87\.76)|1\.191\.174|7\.118\.90)|0(?:3\.(?:152\.2|82\.95)|9\.239\.47)|21\.143\.46)|5(?:9\.99\.(?:1(?:5[234]|28)|5[678])|8\.186\.(?:196|220))|7(?:7\.232\.14[23]|8\.138\.171)|41\.(?:254\.[01]|95\.4)|61\.19\.6[67]|91\.203\.67)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0.6
@@ -123,7 +123,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:2(?:0(?:0\.(?:2(?:19\.245\.41|32\.186\.48|\.137\.250)|1(?:41\.87\.135|52\.113\.24)|42\.204\.155|80\.140\.61)|3\.(?:1(?:5(?:2\.28\.130|3\.39\.194)|7(?:3\.123\.98|4\.53\.170))|2(?:17\.176\.6|09\.42\.)5)|1\.(?:1(?:44\.(?:130\.2|51\.4)1|16\.140\.246)|251\.250\.3)|2\.(?:144\.157\.69|86\.206\.230|28\.66\.251|75\.38\.205)|4\.(?:10\.1(?:41\.18[26]|39\.197)|8\.46\.130)|8\.(?:131\.186\.2|91\.133\.61)|5\.209\.97\.203|9\.239\.47\.205)|1(?:7\.(?:1(?:6(?:5\.133\.65|\.18\.210)|7(?:4\.232\.12|3\.21\.5)|16\.47\.8)|76\.2\.129)|1\.(?:1(?:(?:91\.174\.14|3\.204\.)1|52\.12\.114)|61\.34\.22)|3\.(?:1(?:36\.101\.3|68\.182\.9)7|226\.144\.65|79\.125\.122)|2\.(?:118\.142\.7[67]|200\.236\.134|85\.103\.45|57\.208\.0)|8\.(?:2(?:48\.44\.196|08\.76\.98)|150\.243\.114)|6\.246\.(?:16\.164|41\.238|55\.131)|0\.(?:212\.244\.145|91\.239\.10)|9\.253\.2(?:0\.10|5\.13)0)|2(?:2\.(?:12(?:4\.178\.158|2\.157\.90)|252\.223\.2)|0\.231\.(?:69\.1[34]|127\.9)|1\.143\.46\.33)|
4\.187\.205\.186)|1(?:9(?:5\.(?:16(?:1\.(?:40\.10|9\.2)|0\.253\.4)|9(?:3\.160\.193|5\.223\.18)|2(?:09\.228\.70|2\.104\.8))|3\.(?:1(?:(?:07\.184\.19|7\.253\.1)3|51\.12\.149)|23(?:\.122\.106|1\.238\.4)|33\.187\.94)|6\.(?:2(?:01\.207\.183|9\.215\.6)|12\.236\.4)|4\.1(?:26\.180\.10|58\.206\.58|46\.197\.5)|2\.(?:135\.141|204\.106)\.2|0\.27\.213\.218)|1(?:5\.(?:24(?:8\.(?:143\.99|56\.145)|0\.255\.254)|(?:113\.57|64\.110)\.139|31\.188\.253)|1\.224\.250\.1(?:3[02345]|29)|7\.(?:239\.20\.3|3\.4\.132)|4\.111\.197\.185|9\.46\.164\.226|6\.0\.7\.2)|2(?:4\.(?:1(?:05\.61\.122|58\.110\.64)|217\.198\.141|83\.63\.203)|2\.(?:5(?:4\.185\.3|5\.48\.1)8|252\.2(?:46\.23|34\.7)4)|5\.(?:20\.82\.198|46\.41\.66)|3\.27\.79\.11)|09\.(?:1(?:66\.1(?:36\.[0234567]|28\.[01247])|72\.31\.113)|236\.58\.66)|7(?:4\.(?:139\.134\.226|48\.120\.215)|8\.162\.225\.253)|8(?:6\.24\.(?:1[6789]|2[0123])\.3|8\.220\.44\.14)|(?:65\.132\.230\.25|36\.166\.1\.)3|59\.148\.96\.251)|8(?:2\.1(?:1(?:4\.(?:72\.62|69\.1)|7\.252\.136)|93\
.140\.168|40\.91\.41)|9\.(?:161\.1(?:41\.147|99\.235|58\.80)|21(?:6\.194\.185|8\.84\.122))|4\.(?:2(?:2\.48\.187|35\.50\.65)|94\.58\.72)|7\.2(?:26\.2(?:22\.22|42\.7)|35\.18\.30)|3\.1(?:42\.111\.228|6\.167\.14)|5\.(?:113\.210\.10|39\.204\.34)|6\.1(?:09\.194\.22|80\.32\.196)|1\.20\.104\.173|0\.65\.16\.71)|9(?:1\.(?:1(?:9(?:5\.136\.1|3\.199\.)4|49\.173\.2)|20(?:3\.13\.204|7\.244\.1))|5\.(?:170\.181\.251|20\.53\.159)|3\.(?:126\.15\.4|91\.196\.9)9|4\.(?:30\.208\.48|102\.5\.20))|7(?:8\.(?:138\.170\.173|26\.165\.112|40\.254\.1)|6\.(?:161\.241\.115|212\.39\.233)|0\.108\.253\.223|4\.198\.15\.16|2\.54\.21\.45)|6(?:6\.(?:96\.255\.7[012]|54\.115\.112)|1\.57\.32\.195|4\.70\.190\.10|8\.113\.3\.246)|41\.(?:1(?:37\.(?:24|30|56)\.4|41\.255\.22)|208\.116\.131))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:2(?:0(?:3\.(?:1(?:5(?:3\.(?:39\.194|44\.130)|2\.28\.130)|7(?:3\.123\.98|4\.53\.170))|2(?:17\.176\.6|09\.42\.)5)|0\.(?:1(?:41\.87\.135|52\.113\.24)|2(?:19\.245\.41|32\.186\.48)|42\.204\.155|80\.140\.61)|1\.(?:1(?:44\.(?:130\.2|51\.4)1|16\.140\.246)|2(?:44\.50\.13|51\.250\.)3)|2\.(?:144\.157\.69|86\.206\.230|28\.66\.251|75\.38\.205)|4\.(?:10\.1(?:41\.18[26]|39\.197)|8\.46\.130)|8\.(?:131\.186\.2|91\.133\.61)|9\.239\.47\.205|7\.111\.165\.1)|1(?:7\.(?:1(?:6(?:5\.133\.65|\.18\.210)|7(?:4\.232\.12|3\.21\.5)|16\.47\.8)|76\.2\.129)|1\.(?:1(?:(?:91\.174\.14|3\.204\.)1|52\.12\.114)|58\.59\.188)|3\.(?:1(?:36\.101\.3|68\.182\.9)7|226\.144\.65|79\.125\.122)|2\.(?:118\.142\.7[67]|200\.236\.134|85\.103\.45|57\.208\.0)|8\.(?:2(?:48\.44\.196|08\.76\.98)|150\.243\.114)|6\.246\.(?:4(?:1\.238|5\.106)|16\.164|55\.131)|0\.(?:212\.244\.145|91\.239\.10)|9\.253\.2(?:0\.10|5\.13)0)|2(?:2\.(?:12(?:4\.178\.158|2\.157\.90)|252\.223\.2)|0\.231\.(?:69\.1[3
4]|127\.9)|1\.143\.46\.33)|4\.187\.205\.186)|1(?:9(?:5\.(?:1(?:6(?:1\.(?:40\.10|8\.1|9\.2)|0\.253\.4)|45\.99\.146)|9(?:3\.160\.193|5\.223\.18)|2(?:09\.228\.70|2\.104\.8))|3\.(?:1(?:(?:07\.184\.19|7\.253\.1)3|51\.12\.149)|23(?:\.122\.106|1\.238\.4)|33\.187\.94)|4\.1(?:58\.206\.5[48]|26\.180\.10|46\.197\.5)|0\.(?:27\.213\.218|96\.168\.63)|6\.(?:12\.236\.4|29\.215\.6))|1(?:5\.(?:(?:113\.57|64\.110)\.139|248\.(?:143\.99|56\.145)|31\.188\.253)|1\.224\.250\.1(?:3[02345]|29)|7\.(?:239\.20\.3|3\.4\.132)|4\.111\.197\.185|9\.46\.164\.226|6\.0\.7\.2)|2(?:2\.(?:5(?:4\.185\.3|5\.48\.1)8|252\.2(?:46\.23|34\.7)4)|4\.(?:217\.198\.141|158\.110\.64|83\.63\.203)|3\.2(?:04\.183\.19|7\.79\.1)1|5\.(?:20\.82\.198|46\.41\.66))|09\.(?:1(?:66\.1(?:36\.[0234567]|28\.[0124])|96\.193\.3)|236\.58\.66)|7(?:4\.(?:139\.134\.226|48\.120\.215)|8\.162\.225\.2(?:32|53))|8(?:6\.(?:24\.(?:1[6789]|2[013])\.3|83\.188\.42)|7\.3\.0\.106)|(?:65\.132\.230\.25|36\.166\.1\.)3|59\.148\.96\.251)|8(?:2\.1(?:1(?:4\.(?:89\.16
4|72\.62|69\.1)|7\.252\.136)|93\.140\.168|40\.91\.41)|7\.(?:2(?:26\.2(?:22\.22|42\.7)|35\.18\.30)|70\.56\.159)|9\.(?:161\.1(?:41\.147|99\.235|58\.80)|216\.194\.185)|3\.1(?:42\.111\.228|6\.167\.14)|5\.(?:113\.210\.10|39\.204\.34)|6\.1(?:09\.194\.22|80\.32\.196)|4\.(?:22\.48\.187|94\.58\.72)|1\.20\.104\.173|0\.65\.16\.71)|9(?:1\.(?:1(?:9(?:5\.136\.1|3\.199\.)4|49\.173\.2)|20(?:3\.13\.204|7\.244\.1))|5\.(?:170\.181\.251|20\.53\.159)|3\.(?:126\.15\.4|91\.196\.9)9|4\.(?:30\.208\.48|102\.5\.20)|2\.242\.127\.42)|7(?:8\.(?:138\.170\.173|26\.165\.112|40\.254\.1)|6\.(?:161\.241\.115|212\.39\.233)|0\.108\.253\.223|7\.120\.86\.130|4\.198\.15\.16|2\.54\.21\.45)|6(?:6\.(?:96\.255\.7[012]|54\.115\.112)|4\.70\.190\.10)|41\.137\.(?:24|30|56)\.4)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work
@@ -140,7 +140,7 @@ score KHOP_SC_TOP200 4 0 4 0 # unneces
# PSBL-neighbors: any /24 with 73+ (2/7, 29%) IPs in the PSBL (not SpamCop),
# as obtained from rsync://psbl-mirror.surriel.com::psbl/psbl.txt
-header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ /(?-xism:\b(?:1(?:1(?:7\.(?:2(?:0(?:0\.(?:1(?:7[012346789]|9[2345678]|8[012345]|4[4567]|6\d)|2(?:1[0123456]|2[4567]|0[89]|42)|35|96)|4\.(?:1(?:6[01234567]|4[45])|22[56])|5\.(?:1(?:2[89]|4[45]|60?|7)?|33|5)|1\.(?:5[01]|112|49|65)|3\.[123])|4(?:1\.(?:1(?:7[67]?|1[23]|[59]2|60?|28|36|44)|2(?:5[234]|0[12]|3[23]|4[04]|24)|8[0123]?|64|9)|2\.(?:1(?:4[014]|04|32|96)?|8[045]?|4[04]|24?8|0)))|19(?:5\.(?:1(?:0[012346]|1)?|7[0123456]|6[456789]|9[6789])|9\.(?:1(?:[89]|1[23569]|7[89]|21|47)|4[89]|5\d|60)|6\.(?:2(?:3[123457]|2[45789]|12)|1(?:7[69]|81))|8\.(?:[02]|1(?:6[47])?|9[012345]|3[234]|8\d|73)|7\.(?:6[456]|9[678]|20|1)))|3\.(?:1(?:6(?:2\.(?:2(?:2[4578]|4[0345]|3[478]|1[67])|1(?:3[19]|01|42)|7[679]|9[678]|6[47]|56|87)|9\.(?:1(?:0[02389]|8[0123]|10|52)|9[02345]|3[28]|8[89]|63)|6\.(?:[05]|1(?:[0345]|62)?)|8\.14[03]|7\.164)|85\.1)|22\.[89]|53\.150)|8\.(?:68\.(?:1(?:9[236]|2[12]|66)|2(?:4[89]|5[23]))|71\.(?:[89]|10))|5\.1(?:47\.(?:2(?:0[
123]|3[012]|29)|192)|86\.65)|6\.71\.17)|2(?:2\.1(?:6(?:8\.(?:2(?:[678]|0[12679]?|2[12357]?|5[135]?|1[16]?|4[58]?|3?3)|1(?:[23489]|6[045]|7[245])|[37][01]|6[89]?|4)|1\.1(?:96?|30)|3\.34)|76\.15[35])|3\.(?:2(?:8\.(?:14[013]|201|30)|2\.5[234]|52\.208|7\.83)|18\.24[02])|0\.6(?:0\.(?:[034567]|1(?:3[12]|29))|1\.[047]))|8(?:3\.8(?:1\.(?:114|52)|0\.132|7\.198)|8\.135\.2)|9(?:0\.110\.155|4\.230\.146)|78\.122\.36)|5(?:9\.(?:9(?:9\.(?:1(?:5[23456]|[36][01]|2[89]|44|92)|2(?:0[89]|10|5)|5[6789]|7[23]|[46]0|32)|5\.(?:[89]|[27][012345679]?|1[01345689]?|6[456789]?|5[013458]|4[679]?|3\d?)|7\.(?:2(?:1[016789]|0[89])|1(?:9[23]|04))|8\.1(?:6[018]|9[23]|44|52|76))|164\.(?:[03]|12))|8\.1(?:8(?:6\.(?:2(?:1[6789]|20)|1(?:9[67]|4))|7\.8)|0\.13))|2(?:0(?:3\.(?:1(?:28\.250|71\.196|92\.224|52\.2)|210\.19[78]|82\.95)|2\.(?:1(?:24\.(?:73|89)|52\.243)|90\.102))|1(?:3\.(?:87\.(?:76|89)|108\.172)|7\.(?:8\.2(?:25|36)|118\.90)|2\.23\.10[45])|22\.25(?:3\.(?:2[89]|179)|4\.7[37]))|8(?:5\.26\.(?:1(?:6[45]|8[36])|
2(?:3[2345]|41))|3\.149\.(?:3[27]?|4[345]|2[18])|9\.2(?:04\.1(?:37|53)|32\.105)|2\.1(?:32\.248|78\.69)|1\.192\.2(?:15|38))|9(?:2\.39\.(?:7[01]|65)|1\.203\.67)|7(?:8\.138\.17[01]|7\.232\.142)|41\.(?:254\.[012]|95\.[248])|61\.19\.6[567])\.[012]?\d{1,2}\b)/
+header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ /(?-xism:\b(?:1(?:1(?:7\.(?:2(?:0(?:0\.(?:1(?:7[012346789]|9[23456789]|8[012345]|4[4567]|6\d)|2(?:1[0123456]|2[4567]|0[89]|42)|35|59|96)|4\.(?:1(?:6[01234567]|4[45])|22[567])|5\.(?:[05]|1(?:2[89]|4[45]|60?)?|33)|1\.(?:11[24]|4[89]|5[01]|65)|3\.[123])|4(?:1\.(?:[09]|1(?:7[67]?|1[23]|[59]2|60?|28|36|44)|2(?:5[234]|0[12]|3[23]|4[04]|24)|8[0123]?|56|64)|2\.(?:1(?:4[014]|04|32|96)?|8[045]?|4[04]|24?8|32|0)))|1(?:9(?:9\.(?:1(?:[89]|1[2345689]|7[689]|4[67]|6[03]|21|50)|4[89]|5\d|60)|5\.(?:1(?:0[012346]|1)?|6[456789]?|7[0123456]|9[6789])|6\.(?:2(?:3[123457]|2[46789]|1[27]|40)|1(?:7[69]|81))|8\.(?:[02]|1(?:6[47])?|9[012345]|3[234]|8\d|49|73)|7\.(?:[13]|6[4567]|9[678]|20?))|\.248))|3\.(?:1(?:6(?:2\.(?:2(?:2[4578]|4[0345]|3[478]|1[67])|1(?:3[19]|01|42)|7[679]|9[678]|6[47]|56|87)|9\.(?:1(?:0[02389]?|8[0123]|10|52)|9[012345]|8[89]|38)|6\.(?:[057]|1(?:[0345]|72)?|218)|7\.(?:1(?:6[24]|28)|39|2)|8\.(?:1(?:4[03]|08)|64))|70\.155|85\.1)|22\.
[89]|53\.150)|8\.(?:68\.(?:1(?:9[236]|2[12])|2(?:4[89]|5[23]))|71\.(?:[89]|10))|5\.1(?:47\.(?:2(?:0[123]|3[012]|29)|192)|86\.6[45])|6\.71\.17)|2(?:2\.1(?:6(?:8\.(?:2(?:[678]|0[125679]?|2[12357]?|1[126]?|4[578]?|5[135]?|3?3)|1(?:[234589]|6[0345]?|7[2345]?)|6[89]?|7[01]?|3[01]|4)|1\.1(?:9[236]?|30|53)|3\.34)|76\.15[35])|3\.(?:2(?:8\.(?:14[013]|201|30)|7\.(?:8[368]|103)|52\.2(?:08|11)|2\.(?:177|52)|3\.251)|1(?:8\.24[02]|6\.21))|0\.6(?:0\.(?:[03467]|1(?:3[12]|29)?)|1\.(?:[047]|13)))|8(?:3\.8(?:1\.(?:114|52)|0\.132|7\.198)|8\.135\.2)|9(?:0\.110\.155|4\.230\.146)|78\.122\.36)|5(?:9\.(?:9(?:5\.(?:[089]|2[012345679]?|1[01345689]?|7[01234569]?|5[013458]?|6[456789]?|4[679]?|3\d?)|9\.(?:1(?:5[23456]|[36][01]|2[89]|44|92)|2(?:0[89]|10|5)|5[6789]|7[23]|[46]0|32)|7\.(?:2(?:1[016789]|0[89])|1(?:9[23]|04))|8\.1(?:6[018]|9[23]|44|52|76)|4\.74|6\.95)|164\.(?:[03]|12))|8\.1(?:8(?:6\.(?:2(?:1[6789]|20)|1(?:9[67]|4))|7\.(?:3[67]|8))|0\.13))|2(?:0(?:3\.(?:1(?:71\.19[67]|28\.250|92\.224|52\.2)|210
\.198|82\.95)|2\.(?:1(?:24\.(?:73|89)|52\.243)|90\.102))|1(?:7\.(?:118\.(?:82|90)|8\.2(?:25|36))|3\.(?:87\.(?:194|76|89)|108\.172)|2\.23\.10[45])|22\.25(?:3\.(?:1(?:79)?|2[89])|4\.(?:7[37]|217|93)|2\.(?:159|203)))|8(?:5\.26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|3\.149\.(?:3[27]?|4[345]|2[18])|9\.2(?:04\.1(?:37|53)|32\.105)|2\.1(?:32\.248|78\.69)|1\.192\.2(?:15|38))|9(?:2\.39\.(?:7[01]|65)|1\.203\.67)|7(?:8\.138\.17[01]|7\.232\.142)|41\.(?:254\.[012]|95\.[248])|61\.19\.6[567])\.[012]?\d{1,2}\b)/
describe KHOP_PSBL_CIDR24 Relay's IP/24 CIDR contains many PSBL hits
tflags KHOP_PSBL_CIDR24 nopublish
score KHOP_PSBL_CIDR24 1.8 0.8 1.8 0.8