You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2010/07/28 08:57:13 UTC
svn commit: r979961 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Wed Jul 28 06:57:13 2010
New Revision: 979961
URL: http://svn.apache.org/viewvc?rev=979961&view=rev
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=979961&r1=979960&r2=979961&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Wed Jul 28 06:57:13 2010
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201007272
+## khop-sc-neighbors.cf v 201007282
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -57,7 +57,7 @@ score KHOP_SC_TOP_CIDR8 0.9 0.1 0.9 0.
# 11.6286/0.0475 0.996 20100410 net, solo=11.7224/0.6900@0.944, ->LE as above
# http://www.spamcop.net/w3m?action=map;net=bmaxcnt;mask=16777215;sort=spamcnt
-header KHOP_SC_CIDR16 Received =~ /(?-xism:\b(?:11(?:0\.139|7\.197|3\.22)|59\.92)(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_CIDR16 Received =~ /(?-xism:\b(?:11(?:0\.139|7\.197)|59\.92)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_CIDR16 Relay CIDR /16 is among worst in SpamCop
tflags KHOP_SC_CIDR16 nopublish
score KHOP_SC_CIDR16 1.6 0.5 1.6 0.5
@@ -72,7 +72,7 @@ score KHOP_SC_CIDR16 1.6 0.5 1.6 0.5
# 0 /0 0 20100409 (wha!?)
# crap, still empty 20100410 bad scrape, script failed to populate rule
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:1(?:1\.224|5\.240|7\.241)|2(?:2\.16[38]|3\.2[67]))|41\.249|59\.94)(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:1(?:5\.240|7\.241|3\.22)|2(?:2\.16[38]|3\.2[67]))|41\.249|59\.94)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0.5
@@ -89,7 +89,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:(?:3\.233|8\.248)\.64|7\.118\.83|6\.81\.70)|0(?:3\.217\.14|6\.181\.8)5|22\.124\.178)|(?:9(?:5\.129\.16|3\.186\.9)|41\.137\.5|80\.65\.1)6|7(?:8\.138\.17[01]|9\.106\.109|7\.74\.36)|1(?:09\.95\.39|21\.54\.32)|61\.97\.32)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:(?:3\.233|8\.248)\.64|7\.118\.83|6\.81\.70)|0(?:3\.217\.145|6\.181\.84)|2(?:2\.124\.178|1\.143\.46))|1(?:2(?:3\.140\.193|1\.54\.32)|09\.95\.39)|7(?:8\.138\.17[01]|9\.106\.109|7\.74\.36)|(?:95\.129\.16|41\.137\.5)6)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
@@ -106,7 +106,7 @@ score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
# 0.2960/0 1.000 20100409
# 0.2905/0 1.000 20100410 net
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:3\.(?:233\.64|87\.76)|7\.118\.(?:82|90))|0(?:3\.(?:152\.2|82\.95)|6\.181\.8[3456])|21\.143\.46)|1(?:1(?:7\.241\.25[23]|1\.224\.250|5\.147\.237|0\.45\.144)|23\.(?:140\.193|252\.208)|88\.135\.2)|8(?:5\.26\.(?:23[2345]|164)|3\.149\.(?:21|3)|9\.232\.105|2\.178\.69)|7(?:7\.232\.14[23]|8\.138\.171|9\.106\.109)|41\.(?:(?:137\.2|95\.)4|254\.[01])|6(?:9\.25\.18|1\.19\.6)6|59\.99\.5[67]|91\.203\.67)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:3\.(?:233\.64|87\.76)|7\.118\.(?:82|90))|0(?:3\.(?:152\.2|82\.95)|6\.181\.8[3456]))|1(?:1(?:7\.241\.25[23]|1\.224\.250|5\.147\.237|0\.45\.144)|23\.252\.208|88\.135\.2)|8(?:5\.26\.(?:23[2345]|164)|3\.149\.(?:21|3)|9\.232\.105|2\.178\.69)|7(?:7\.232\.14[23]|8\.138\.171|9\.106\.109)|(?:6(?:9\.25\.18|1\.19\.6)|59\.99\.5)6|41\.(?:(?:137\.2|95\.)4|254\.1)|9(?:1\.203\.67|3\.186\.96))\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0.6
@@ -123,7 +123,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:0\.(?:1(?:4(?:9\.(?:104\.17|229\.14)1|6\.12\.119)|64\.248\.240|59\.149\.27|7\.212\.73)|2(?:(?:13\.71\.10|6\.67\.23)0|7\.184\.255|4\.208\.28)|4\.(?:155\.75|48\.11)|38\.212\.115|80\.156\.230)|3\.(?:1(?:(?:07\.184\.19|51\.96\.)3|98\.8\.211)|231\.238\.4)|4\.(?:1(?:26\.180\.10|16\.253\.5)|204\.203\.16|50\.9\.114)|6\.(?:1(?:2\.236\.4|\.209\.83)|201\.207\.183)|5\.(?:209\.228\.70|160\.253\.4|70\.36\.72)|9\.239\.248\.137)|2(?:2\.(?:252\.2(?:46\.23|34\.7)4|34\.215\.210)|3\.1(?:40\.193\.203|09\.218\.20)|5\.(?:160\.171\.223|20\.82\.197)|4\.137\.12\.10|1\.50\.16\.11)|1(?:1\.224\.25(?:0\.1(?:3[012345]|29)|5\.10)|8\.161\.250\.239|0\.45\.144\.227|3\.161\.64\.246|5\.248\.56\.145|9\.110\.107\.10|6\.0\.7\.2)|8(?:9\.(?:1(?:0(?:0\.8\.177|4\.56\.80)|60\.12\.180)|5\.54\.209)|(?:7\.85\.135\.19|0\.234\.4\.25)0)|7(?:4\.(?:139\.134\.19|34\.184\.21)9|5\.145\.(?:26\.145|41\.9))|09\.(?:160\.185\.91|64\.1\.207)|59\.148\.96\.251)|2(?:1(?:6\.(?:81\.7
(?:0\.(?:1(?:28|92)|64|2)|2\.(?:(?:19)?2|64)|1\.192)|157\.1(?:4(?:6\.1(?:28|92)|8\.(?:128|2))|5[04]\.192))|7\.(?:1(?:(?:39\.104\.21|16\.47\.)8|7(?:4\.229\.221|3\.21\.5))|76\.2\.129)|1\.(?:1(?:(?:91\.174\.14|3\.204\.)1|79\.124\.160)|247\.97\.135)|3\.(?:1(?:68\.182\.97|84\.224\.44)|22(?:6\.144\.65|\.150\.207))|8\.248\.(?:44\.196|11\.75)|0\.122\.170\.6)|0(?:3\.(?:1(?:53\.(?:44\.130|39\.18)|13\.164\.150)|2(?:17\.176\.65|55\.219\.82))|1\.(?:1(?:16\.140\.246|44\.130\.21)|2(?:35\.38\.48|51\.250\.3)|93\.247\.76)|0\.(?:1(?:11\.161\.194|41\.87\.135)|42\.204\.155|55\.234\.149|80\.140\.61)|2\.(?:1\.196\.147|78\.174\.16)|4\.45\.99\.(?:142|71)|5\.209\.97\.203|9\.239\.47\.205)|2(?:2\.(?:1(?:2(?:4\.178\.158|2\.157\.90)|07\.194\.1)|252\.223\.2|34\.131\.16)|0\.227\.245\.194|1\.143\.46\.33)|4\.2(?:05\.178\.21|12\.113\.5)6)|8(?:2\.(?:1(?:93\.140\.168|78\.168\.80|40\.91\.41)|243\.86\.20|91\.49\.127)|1\.(?:1(?:09\.54\.133|92\.103\.84)|2(?:0\.104\.173|1\.115\.38))|5\.(?:1(?:5(?:2\.101\.218|4\.5\.1
55)|8\.81\.162)|80\.200\.129)|9\.(?:1(?:61\.(?:141\.1|223\.2)47|41\.92\.194)|231\.178\.16)|3\.(?:208\.(?:245\.5|90\.19)6|142\.111\.228)|4\.(?:22\.(?:48\.187|52\.13)|55\.75\.225)|7\.2(?:19\.(?:245\.98|9\.17)|01\.96\.206)|8\.(?:255\.153\.106|183\.90\.127)|0\.(?:93\.125\.186|65\.16\.71)|6\.(?:106\.1\.134|98\.76\.253))|6(?:4\.(?:16(?:4\.228\.206|5\.253\.230)|244\.130\.98)|9\.(?:25\.186\.22[789]|151\.79\.238|68\.22\.146)|2\.1(?:7(?:4\.85\.186|6\.169\.79)|03\.171\.28)|1\.(?:100\.228\.61|97\.32\.104)|0\.51\.225\.213|5\.163\.15\.140)|7(?:6\.(?:22(?:9\.144\.140|7\.84\.105)|161\.241\.115)|(?:7\.22\.175\.17|2\.51\.44\.23)4|0\.(?:108\.253\.223|45\.67\.142)|8\.10(?:8\.143\.59|9\.36\.60)|4\.(?:55\.68\.14|92\.90\.58)|9\.187\.150\.122)|9(?:1\.(?:2(?:0(?:5\.131\.6|7\.42\.17)|14\.128\.2[034])|1(?:98\.175\.25|49\.173\.)2)|3\.91\.196\.99|4\.52\.190\.12|5\.93\.55\.251|8\.142\.7\.197)|41\.(?:137\.(?:24|30|56)\.|210\.32\.1)4|59\.18\.64\.3)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:0\.(?:1(?:49\.(?:104\.17|229\.14)1|64\.248\.240|59\.149\.27|7\.212\.73)|2(?:4(?:8\.241\.167|\.208\.28)|(?:13\.71\.10|6\.67\.23)0)|(?:38\.212\.11|4\.155\.7)5|80\.156\.230)|3\.(?:1(?:(?:07\.184\.19|7\.253\.1|51\.96\.)3|98\.8\.211)|231\.238\.4|77\.182\.99)|4\.(?:1(?:26\.180\.10|16\.253\.5)|204\.203\.16|50\.9\.114)|6\.(?:1(?:2\.236\.4|\.209\.83)|201\.207\.183)|5\.(?:7(?:0\.36\.72|2\.0\.5)|160\.253\.4)|9\.239\.248\.137)|2(?:3\.(?:1(?:40\.193\.203|09\.218\.20)|252\.208\.166)|2\.(?:252\.2(?:46\.23|34\.7)4|34\.215\.210)|5\.(?:160\.171\.223|20\.82\.197)|4\.137\.12\.10|1\.50\.16\.11)|1(?:5\.(?:117\.35\.158|248\.56\.145)|1\.224\.250\.1(?:3[1234]|29)|8\.161\.25(?:0\.23|1\.9)9|0\.45\.144\.227|3\.161\.64\.246|9\.110\.107\.10|6\.0\.7\.2)|8(?:9\.(?:1(?:60\.12\.180|00\.8\.177)|5\.54\.209)|(?:7\.85\.135\.19|0\.234\.4\.25)0|6\.200\.12\.4)|7(?:4\.(?:139\.134\.19|34\.184\.21)9|5\.145\.(?:26\.145|41\.9)|8\.217\.208\.2)|09\.(?:160\.185\.91|
64\.1\.207)|59\.148\.96\.251)|2(?:1(?:6\.(?:157\.1(?:4(?:6\.1(?:28|92)|8\.(?:128|2))|5[04]\.192)|81\.7(?:0\.(?:1(?:28|92)|64|2)|2\.(?:64|2)|1\.192))|7\.(?:1(?:7(?:4\.2(?:29\.22|32\.1)1|3\.21\.5)|(?:39\.104\.21|16\.47\.)8)|76\.2\.129)|1\.(?:1(?:79\.124\.160|91\.174\.141)|247\.97\.135)|3\.(?:22(?:6\.144\.65|\.150\.207)|168\.182\.97)|(?:8\.248\.44\.19|0\.122\.170\.)6|9\.74\.59\.251)|0(?:1\.(?:1(?:1(?:4\.255\.132|6\.140\.246)|44\.130\.21|56\.151\.85)|2(?:3(?:2\.46\.2|5\.38\.)48|51\.250\.3)|93\.247\.76)|3\.(?:1(?:53\.(?:44\.130|39\.18)|13\.164\.150)|2(?:17\.176\.65|55\.219\.82))|0\.(?:111\.161\.194|42\.204\.155|55\.234\.149|80\.140\.61)|5\.209\.97\.203|9\.239\.47\.205|2\.1\.196\.147|4\.45\.99\.71)|2(?:2\.(?:1(?:2(?:4\.178\.158|2\.157\.90)|07\.194\.1)|252\.223\.2|34\.131\.16)|0\.227\.245\.194|1\.143\.46\.33)|4\.212\.113\.56)|8(?:5\.(?:1(?:5(?:2\.101\.218|4\.5\.155)|8\.81\.162)|235\.194\.130|80\.200\.129)|2\.(?:1(?:93\.140\.168|78\.168\.80|40\.91\.41)|243\.86\.20|91\.49\.127)|1\.(?
:1(?:09\.54\.133|92\.103\.84)|2(?:0\.104\.173|1\.115\.38))|9\.(?:1(?:61\.(?:141\.1|223\.2)47|52\.151\.223)|231\.178\.16)|7\.2(?:19\.(?:245\.98|9\.17)|24\.204\.130|01\.96\.206)|8\.(?:255\.153\.106|183\.90\.127)|0\.(?:93\.125\.186|65\.16\.71)|4\.(?:22\.48\.187|55\.75\.225)|3\.208\.(?:245\.5|90\.19)6|6\.98\.76\.253)|6(?:2\.(?:1(?:7(?:4\.85\.186|6\.169\.79)|03\.171\.28)|68\.171\.115)|4\.(?:16(?:4\.228\.206|5\.253\.230)|244\.130\.98)|9\.(?:25\.186\.22[789]|151\.79\.238|68\.22\.146)|1\.(?:10(?:0\.228\.61|7\.48\.119)|97\.32\.104)|0\.51\.225\.213|5\.163\.15\.140|8\.55\.224\.165)|9(?:1\.(?:2(?:0(?:5\.131\.6|7\.42\.17)|14\.128\.2[034])|1(?:(?:98\.175\.25|49\.173\.)2|12\.37\.10))|8\.(?:142\.7\.197|222\.89\.13)|5\.(?:93\.55\.251|160\.52\.4)|2\.105\.153\.23|3\.91\.196\.99)|7(?:(?:9\.187\.150\.12|0\.45\.67\.14)2|(?:7\.22\.175\.17|2\.51\.44\.23)4|8\.10(?:8\.143\.59|9\.36\.60)|4\.(?:55\.68\.14|92\.90\.58)|6\.227\.84\.105)|41\.(?:137\.(?:24|30|56)\.|210\.32\.1)4|59\.18\.64\.3)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work
@@ -140,7 +140,7 @@ score KHOP_SC_TOP200 4 0 4 0 # unneces
# PSBL-neighbors: any /24 with 73+ (2/7, 29%) IPs in the PSBL (not SpamCop),
# as obtained from rsync://psbl-mirror.surriel.com::psbl/psbl.txt
-header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ /(?-xism:\b(?:1(?:1(?:7\.(?:2(?:0(?:0\.(?:1(?:8[012345]?|9[2345678]|7[016789]|4[458]|6\d|00)|2(?:1[0123456]|2[4567]|0[89]|43)|5[0245]|9[6789]|3[34]|60|81)|5\.(?:1(?:[678]|0[0123]|4[456]|92?)?|6[45678]|2[012]?|9[6789]|3[345]|5?0)|4\.(?:[03]|1(?:6[0124578]|4[45])|2(?:24|40)?)|1\.(?:6[457]|4[89]|5[01]|96)|3\.(?:[34]|1(?:4[45])?)|6\.128)|4(?:1\.(?:1(?:7[67]?|1[23]|44|52|6)?|2(?:5[234]|1[67]|4[04]|32)|8[01238]|4?0|56)|2\.(?:1(?:4[014]|32|96)?|4[045]|[68]?0|24?8)))|19(?:9\.(?:1(?:6[0123456]|1[34568]|8[01234]|7[6789]|4[568]|9[347])|4[89]|8[01]|5\d|2)|8\.(?:[045]|1(?:6[012]|70)?|2(?:08)?|3[23456]|9[01234]|8\d)|7\.(?:2(?:4[23]|52)|6[456789]|9[6789]|16[14]|7[01]|54)|6\.2(?:3[0124]|2[69])|5\.(?:6[456789]|70)|4\.96))|6\.7(?:1\.(?:14[79]|3[26]|5[67]|43)|4\.1(?:0[123479]|1[025]))|3\.(?:1(?:62\.(?:2[34]4|7[79]|67|96)|85\.1)|22\.8)|5\.1(?:47\.(?:2(?:3[0127]|0[123]|29)|192)|86\.65)|9\.15(?:9\.19[568]|5\.[07])|4\.79\.15[78]|8\.71\.[89]|0\.49
\.193)|2(?:2\.1(?:6(?:8\.(?:2(?:[78]|0[0135679]?|1[037]?|4[079]?|2[57]?|3[35]?|5[12]?)|1(?:[459]|6[24]?|70?)|3[01]|69?|71|8)|1\.(?:1(?:9[68]|53)|5[67]|242|69)|3\.(?:1(?:8[45]?|24)|6[17]|23|34)|2\.(?:7[67]|21))|76\.1(?:5[2345]|4[89]|37))|0\.6(?:0\.(?:[04]|1(?:28|31)?)|1\.(?:19|2))|4\.253\.(?:1(?:3[0139]|1[35])|226|82)|3\.252\.208|5\.63\.97)|8(?:3\.87\.(?:(?:19|5)8|226)|2\.(?:48\.20|237\.)9|8\.135\.2)|7(?:8\.122\.(?:209|36|84)|5\.100\.17[035])|9(?:0\.110\.155|4\.230\.146))|5(?:9\.(?:9(?:5\.(?:[89]|1(?:[23568]|0[16]?)?|2[012345689]|3[0125678]|6[456789]?|7[0123]?|5[146]|47?)|9\.(?:1(?:5[2345]|2[89]|30|93)|5[6789]|2[45]|4[08]|32|8)|8\.(?:1(?:[59]2|44|60)|(?:20|8)0)|7\.2(?:1[0678]|0[89]|48)|4\.(?:11[25]?|4[03])|2\.245)|1(?:64\.(?:[0389]|2(?:04)?|1[03]?)|77\.[56]))|8\.18(?:6\.(?:21[69]|14)|7\.8))|2(?:1(?:7\.(?:118\.(?:82|90)|8\.2(?:25|36)|66\.146)|2\.(?:49\.(?:7[49]|9[02]|67)|23\.10[45])|3\.(?:87\.(?:194|76)|162\.68)|0\.89\.(?:3[67]|50)|8\.248\.64)|0(?:3\.(?:1(?:(?:92\.22|15\.9)4|5
2\.2)|82\.95)|1\.191\.195|2\.152\.243))|8(?:5\.26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|9\.2(?:04\.1(?:37|53)|32\.105)|3\.149\.(?:3[27]?|4[45]|21)|1\.192\.2(?:11|38)|2\.178\.69)|9(?:3\.8(?:5\.19[23456]|4\.1)|2\.39\.(?:7[019]|65)|1\.203\.67)|41\.(?:2(?:02\.(?:20[123]|19[56])|54\.[012])|95\.[248])|7(?:7\.232\.14[23]|8\.138\.17[01]|9\.106\.109)|6(?:2\.24\.(?:127|99)|1\.19\.6[567]))\.[012]?\d{1,2}\b)/
+header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ /(?-xism:\b(?:1(?:1(?:7\.(?:2(?:0(?:0\.(?:1(?:9[2345678]?|8[012345]?|7[016789]|4[458]|2[89]|6\d?|00)|2(?:1[0123456]|2[4567]?|4[0123]?|0[89])|5[012345678]|6[0346]|9[6789]|3[34]|4[89]|81)|5\.(?:1(?:[78]|0[0123]|4[456]|2[89]|60?|92?)?|3[23456]|6[45678]|2[012]?|9[6789]|5[02]?|48?|0)|4\.(?:1(?:6[01234578]|4[45])?|2(?:24|40)?|3)|1\.(?:6[4567]|5[013]|4[89]|9[67]|[78]1|113)|3\.(?:[0234]|1(?:44|76)?)|6\.128)|4(?:1\.(?:2(?:5[234]?|4[04]?|1[67]|2[48]|3[24])|1(?:7[67]?|1[23]|4[45]|[59]2|3?6)?|8[01238]|5[67]|4?0)|2\.(?:1(?:4[014]|3?2|96)?|4[045]|[68]?0|24?8|32)))|19(?:9\.(?:1(?:1[2345689]|6[0123456]|8[01234]|9[34567]|4[4568]|7[6789]|2[01])|2(?:41)?|8[016]|4[89]|5\d|66)|7\.(?:1(?:6[0134]|1[45]|70)?|2(?:4[2346789]|5[12])|6[456789]|9[6789]|5[04]|7[01]|49|0)|8\.(?:[04]|1(?:6[01267]|9[14]|70|86)?|2(?:0[89])?|3[23456]?|9[012345]|50?|8\d)|6\.(?:2(?:2[45689]|3[01245]|09)|17[79])|5\.(?:6[456789]|7[01])|4\.9[68]))|6\.7(?:1\.(?:14[79]|2[089]|4[349
]|3[26]|5[67]|63|0)|4\.1(?:0[123479]|1[258]|2[01]))|3\.(?:1(?:62\.(?:2(?:2[458]|4[34]|34)|7[079]|[59]6|67)|85\.1)|22\.[89])|5\.1(?:47\.(?:2(?:3[0127]|0[123]|29)|192)|86\.(?:6[569]|73))|8\.(?:68\.(?:2(?:4[89]|52)|192)|71\.[89])|9\.15(?:9\.19[568]|5\.[078])|0\.(?:172\.31|49\.193)|4\.79\.15[78])|2(?:2\.1(?:6(?:8\.(?:[489]|2(?:[678]|0[01345679]?|4[0245789]?|1[012367]?|2[05789]?|3[01358]?|5[1245]?)|1(?:[14589]|6[2346]?|70?)|[37][01]|6[89]?)|1\.(?:1(?:9[68]|37?|53|0)|24[23]|5[67]|69)|3\.(?:1(?:8[45]?|24|6)|6[17]|23|34)|2\.(?:2(?:[147]|28)|7[67]|39))|76\.1(?:5[2345]|4[89]|37))|0\.6(?:0\.(?:[24]|1(?:3[148]|2[89]|0)?)|1\.(?:1[079]|23?|4))|4\.253\.(?:1(?:3[013679]|6[0126]|1[35])|2(?:26|30)|8[12]|35)|3\.252\.208|5\.63\.97)|8(?:3\.87\.(?:(?:19|6)8|5[89]|226)|2\.(?:48\.20|237\.)9|8\.135\.2)|7(?:8\.12(?:2\.(?:20[89]|8[45]|36)|5\.0)|5\.100\.17[01345])|9(?:6\.202\.2(?:08|22)|0\.110\.155|4\.230\.146))|5(?:9\.(?:9(?:5\.(?:[89]|1(?:[235689]|0[016]?)?|2[012345689]?|3[01245678]|6[456789]?|7[0123
45]?|5[1456]?|4[79]?)|9\.(?:1(?:5[2345]|2[89]|9[23]|30)|2(?:[45]|0[089])|5[6789]|4[08]|7[23]|32|8)|4\.(?:1(?:1[2345]?|30|43|77)|4[0123]|99|8)|8\.(?:1(?:9[23]|44|52|60|76)|(?:20|8)0)|7\.2(?:1[0678]|0[89]|48)|2\.24[56])|1(?:64\.(?:[0389]|1[0123]?|2(?:04)?)|77\.[56]))|8\.18(?:6\.(?:21[689]|14)|7\.8))|2(?:1(?:7\.(?:118\.(?:82|90)|8\.2(?:25|36)|66\.146)|3\.(?:1(?:08\.172|62\.68)|87\.(?:194|76))|2\.(?:49\.(?:7[49]|9[02]|67)|23\.10[45])|0\.89\.(?:3[67]|50)|8\.248\.64)|0(?:3\.(?:1(?:(?:92\.22|15\.9)4|71\.19[67]|52\.2)|82\.95)|1\.191\.195|2\.152\.243))|8(?:5\.26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|3\.149\.(?:3[27]?|2[18]|4[45])|9\.2(?:04\.1(?:37|53)|32\.105)|2\.(?:209\.218|178\.69)|1\.192\.2(?:11|38))|9(?:3\.8(?:5\.1(?:9[234567]|0)|4\.1)|2\.39\.(?:7[019]|65)|1\.203\.67)|41\.(?:2(?:02\.(?:19[3569]|20[123])|54\.[012])|95\.[248])|7(?:7\.232\.14[23]|8\.138\.17[01]|9\.106\.109)|6(?:2\.24\.(?:127|99)|1\.19\.6[567]))\.[012]?\d{1,2}\b)/
describe KHOP_PSBL_CIDR24 Relay's IP/24 CIDR contains many PSBL hits
tflags KHOP_PSBL_CIDR24 nopublish
score KHOP_PSBL_CIDR24 1.8 0.8 1.8 0.8