Author: H.User5946 (29 Nov 10 6:53am)
I just spotted the following reply in my logs (I've attempting to validate how well my mod_perl http:BL plugin is working).
"This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)"
And further detail shows: Last Received From within 1 year, 4 months, 2 weeks
# host xxxxxxxxxxxxxx.22.214.171.124.dnsbl.httpbl.org
xxxxxxxxxxxxx.126.96.36.199.dnsbl.httpbl.org A 127.26.5.1
So why is the reply "127.26.5.1" ? That says Threat level 5 and last seen 26 days ago.
Same goes for: http://www.projecthoneypot.org/ip_188.8.131.52
[Aside: Why do I post as H.User5946 ? That didn't used to be the case]
Post Edited (29 Nov 10 7:33am)