Message Board

Newbie/Basic Questions

server can't find smcuukxzlodk.139.72.233.72.dnsbl.httpbl.org: NXDOMAIN

Author: D.Sob (23 Feb 12 7:11am)

Hi

I wanted to query this ip: 72.233.72.139

root@www1:/home/jordan# nslookup smcuukxzlodk.139.72.233.72.dnsbl.httpbl.org
Server: 10.0.80.11
Address: 10.0.80.11#53

** server can't find smcuukxzlodk.139.72.233.72.dnsbl.httpbl.org: NXDOMAIN

but when I go to your website:
http://www.projecthoneypot.org/ip_72.233.72.139

it says something else.

can you help please?

Re: server can't find smcuukxzlodk.139.72.233.72.dnsbl.httpbl.org: NXDOMAIN

Author: D.Sob (26 Feb 12 10:21am)

anyone?

Re: server can't find smcuukxzlodk.139.72.233.72.dnsbl.httpbl.org: NXDOMAIN

Author: R.Woolley2 (11 Mar 12 2:24pm)

Checking programmatically this today (12th March 2012 AU time) I receive...

PHP:
[result] mysecrethash.72.233.72.139.dnsbl.httpbl.org
returns full query, so passed as invalid test (meaning not listed)

Perl:
[result] blank
passed as invalid test (meaning not listed)

Using the form interface on the projecthoneypot.org home page:...
Threat Rating: (Not yet scored. Check again soon.)

So all the same "invalid" (OK) response.

NOTE DO NOT just use the url with displayed GET query string as displayed in the on-site form response page. That is a meaningless dynamically shown reference. You MUST use the form which sends a POST data stream from the legitimate site page OR relevant programming interface.

That is why I assume the different response; one method (GET) is not a legitimate request and do not try to use it.

Regards.

Re: server can't find smcuukxzlodk.139.72.233.72.dnsbl.httpbl.org: NXDOMAIN

Author: R.Woolley2 (11 Mar 12 2:29pm)

PS having now displayed it, if that is your real secret ID shown in your post then it is now pretty much useless and I suggest you create a new account!!!!!!

Re: server can't find smcuukxzlodk.139.72.233.72.dnsbl.httpbl.org: NXDOMAIN

Author: L.Theobald2 (11 Apr 12 3:51am)

I'm with the OP here and am having trouble understanding the blacklist responses. Like the original poster, my NSLookup returns the following:

> mysecretkey.23.150.22.58.dnsbl.httpbl.org
Server: 172.25.1.38
Address: 172.25.1.38#53

** server can't find mysecretkey.23.150.22.58.dnsbl.httpbl.org: NXDOMAIN

And from my Java implementation, I also get a not found response. I tried the IP address from the original poster & that too was coming back as not found.

Both of them return spammers from the IP Lookup form (mine a comment spammer, the OP's was a rule breaker).

So why do they not return something more useful from the NS Lookup.

@R.Woolley2 - The example you posted didn't have the IP address reversed. Is that the trick? You're not actually meant to reverse the IP address as it's listed?