body GBKXWFLXF /\bgbkxwflxf\b/
describe GBKXWFLXF gbkxwflxf
score GBKXWFLXF 5
+
+# cord 2008-10-31
+# compensate false-positives for 140.Red-80-25-20.staticIP.rima-tde.net and stuff
+header STATIC_RIMA_TDE received =~ /staticIP\.rima-tde\.net/
+describe STATIC_RIMA_TDE static IP from rima-tde.net
+score STATIC_RIMA_TDE -5