Thomas, ASSP version 2.1.2(12077) and previous versions way back
ASSP detects a string as a URI, when it is not a URI. The URI found are of the form "\d+.bm". Noted instances are from Yahoo mail servers. They get picked up from the "X-Yahoo-Newman-Id" field. In the example below, it is 3870.bm. X-Yahoo-Newman-Id =================== X-Yahoo-Newman-Id: 325124.3870...@omp1017.mail.ac4.yahoo.com =================== X-Assp-Detected-URI =================== X-Assp-Detected-URI: digitalone.in(1), 3870.bm(1), yahoo.com(5) =================== URI portion of log file =================== 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: found URI yahoo.com 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: registered URI yahoo.com for check 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: registered URI yahoo.com for check 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: found raw URI 325124.3870.bm@ 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: found URI 325124.3870.bm 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: registered TLD URI 3870.bm for check 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: found raw URI omp1017.mail.ac4.yahoo.com 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: found URI omp1017.mail.ac4.yahoo.com 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: registered TLD URI yahoo.com for check 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: found raw URI yahoo.com; 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: found URI yahoo.com 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: registered TLD URI yahoo.com for check 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: found raw URI yahoo.com; 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: found URI yahoo.com 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: registered TLD URI yahoo.com for check 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: found raw URI @yahoo.com> 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: found URI yahoo.com 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: registered TLD URI yahoo.com for check 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: found raw URI digitalone.in/ 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: found URI digitalone.in 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com info: registered TLD URI digitalone.in for check 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com URIBL: lookup returned <1> for 3870.bm - res: '' 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com URIBL: lookup returned <1> for digitalone.in - res: '' 12-Mar-25 08:54:50 80079-13804 [Worker_2] 98.139.53.212 <grahamb2...@yahoo.com> to: u...@example.com URIBL: lookup returned <1> for yahoo.com - res: '' =================== -- Michael Thomas Mathbox 978-687-3300 Toll Free: 1-877-MATHBOX (1-877-628-4269) ------------------------------------------------------------------------------ This SF email is sponsosred by: Try Windows Azure free for 90 days Click Here http://p.sf.net/sfu/sfd2d-msazure _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test