> I've added your KAM rules, we'll see how that helps.
FYI, Looks like a false-positive in their on [email protected] in the corpus. Same thing with [email protected].
Otherwise, I've got some good framework on some rules to block this onslaught.
Let me know what you see reported now. Regards, KAM
