The Threat Rating
Threat Rating
The Threat Rating is a metric that describes how dangerous an IP is based off its observed suspicious activity. These activities include sending spam messages, performing dictionary attacks, harvesting addresses, posting spam comments to web forms, hosting bad web pages (phish sites, etc), and breaking nofollow or certain robot.txt rules.
A Logarithmic Score
The Threat Rating is a logarithmic score -- much like the Richter's scale for measuring earthquakes. A Threat Rating of 25 can be interpreted as the equivalent of sending 100 spam messages to a honey pot trap.
Threat Rating | IP that is as threatening as one that has sent |
25 | 100 spam messages |
50 | 10,000 spam messages |
75 | 1,000,000 spam messages |
As seen in HTTP:BL
The Threat Rating is the third octet returned by a result IP from HTTP:BL.