> Thus, based on my own observations, it looks like the value of rules in > this particular area is going to be in scoring stuff that arrives before > the domains show up in the various SURBLs. > Quite possibly, though it seems to have been selectively targeted to some extent: at least it doesn't seem to have shotgunned the entire 'net. I'm guessing that because:
- it was bothering a few people on the list for a fair time - it has apparently taken longer than that to get onto the SURBLS so presumably hadn't hit either their honeypots or any/many who would report it. - I've never seen it here. I was simply feeling bored and wrote the set of patterns and meta as an exercise. Martin
