SpamAssassin Rule: NUMERIC_HTTP_ADDR
Standard description: Uses a numeric IP address in URL
Contains a URL with a numeric address, such as http://192.168.36.67 This may indicate a webserver set up quickly without a DNS entry, or an attempt to avoid domain-based filtering. This indicates the message may be spam or phishing.
The default scores for this rule can be found in the online list of tests.