RBL Details to DroneBL

Id 20
R.I.P. 0
Private 0
Name DroneBL
DNS Zone dnsbl.dronebl.org
IPv4 1
IPv6 1
Domain/URI 0
Type b
URL http://www.dronebl.org/
Has only TXT records 0
Comment
Last failed timestamp (UTC) 2018-05-26 19:05:10
Last nameserver check (UTC) 2018-05-27 02:33:58
Nameservers
  • rbldns3.ns.dronebl.org
  • rbldns6.ns.dronebl.org

Testentries

See also RFC 5782
Testentry Type (presence) Data of the last response Last verdict Last success timestamp (UTC) Last failed timestamp (UTC)
127.0.0.1 must_not success 2018-05-27 02:33:59 2012-09-06 02:38:28
127.0.0.2 must
A:
  • 127.0.0.1 (TTL=300)
TXT:
  • Testing class.
success 2018-05-27 02:33:58 2014-05-02 02:37:04
127.0.0.3 must
A:
  • 127.0.0.3 (TTL=300)
TXT:
  • IRC spam drone (litmus/sdbot/fyle)
success 2018-05-27 02:33:59 2014-07-31 02:35:11
127.0.0.5 must
A:
  • 127.0.0.5 (TTL=300)
TXT:
  • Bottler (experimental)
success 2018-05-27 02:33:59 2014-08-01 02:35:13
127.0.0.6 must
A:
  • 127.0.0.6 (TTL=300)
TXT:
  • Unknown worm or spambot
success 2018-05-27 02:33:59 2014-07-31 02:35:11
127.0.0.7 must
A:
  • 127.0.0.7 (TTL=300)
TXT:
  • DDoS drone
success 2018-05-27 02:33:59 2014-07-31 02:35:11
127.0.0.8 must
A:
  • 127.0.0.8 (TTL=300)
TXT:
  • Open SOCKS proxy
success 2018-05-27 02:33:59 2014-07-31 02:35:11
127.0.0.9 must
A:
  • 127.0.0.9 (TTL=300)
TXT:
  • Open HTTP proxy
success 2018-05-27 02:33:59 2014-07-31 02:35:11
127.0.0.10 must
A:
  • 127.0.0.10 (TTL=300)
TXT:
  • Proxychain
success 2018-05-27 02:33:58 2014-08-01 02:35:13
127.0.0.11 must
A:
  • 127.0.0.11 (TTL=300)
TXT:
  • Web Page Proxy
success 2018-05-27 02:33:58
127.0.0.13 must
A:
  • 127.0.0.13 (TTL=300)
TXT:
  • Automated dictionary attacks
success 2018-05-27 02:33:58 2014-08-01 02:35:13
127.0.0.14 must
A:
  • 127.0.0.14 (TTL=300)
TXT:
  • Open WINGATE proxy
success 2018-05-27 02:33:58 2014-08-01 02:35:13
127.0.0.15 must
A:
  • 127.0.0.15 (TTL=300)
TXT:
  • Compromised router / gateway
success 2018-05-27 02:33:58 2014-07-31 02:35:11
127.0.0.16 must
A:
  • 127.0.0.16 (TTL=300)
TXT:
  • Autorooting worms
success 2018-05-27 02:33:58
127.0.0.17 must
A:
  • 127.0.0.17 (TTL=300)
TXT:
  • Automatically determined botnet IPs (experimental)
success 2018-05-27 02:33:59
127.0.0.18 must
A:
  • 127.0.0.18 (TTL=300)
TXT:
  • Possibly compromised DNS/MX type hostname detected on IRC
success 2018-05-27 02:33:59
127.0.0.255 must
A:
  • 127.0.0.255 (TTL=300)
TXT:
  • Uncategorized threat class
success 2018-05-27 02:33:59 2014-07-31 02:35:11
::ffff:7f00:1 must_not success 2018-05-27 02:33:59
::ffff:7f00:2 must
A:
  • 127.0.0.1 (TTL=300)
TXT:
  • Testing class.
success 2018-05-27 02:33:58

Last listed entries found

Masked RC Listed entry Response return code Response TXT record Timestamp (UTC)
127.0.0.1 127.0.0.2 127.0.0.1
  • Testing class.
2018-05-24 15:53:41
::ffff:7f00:2 127.0.0.1
  • Testing class.
2018-02-24 10:39:28
127.0.0.3 218.98.26.47 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-05-26 19:17:38
185.65.135.93 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-05-25 10:04:57
82.102.28.115 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-05-25 10:04:02
82.102.30.195 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-05-25 06:24:07
85.185.238.214 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
  • Open HTTP proxy
  • Open SOCKS proxy
2018-05-24 09:21:57
200.76.187.252 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-05-23 14:49:27
200.76.187.244 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-05-23 14:36:17
104.200.129.48 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-05-23 13:03:19
193.138.218.161 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-05-23 11:33:44
150.95.50.71 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-05-23 10:01:18
127.0.0.5 127.0.0.5 127.0.0.5
  • Bottler (experimental)
2017-06-24 20:38:30
127.0.0.6 185.71.40.205 127.0.0.6
  • Unknown worm or spambot
2018-05-25 08:58:39
91.200.12.106 127.0.0.6
  • Forum Spam Source
2018-05-24 14:23:40
91.200.12.0 127.0.0.6
  • Forum Spam Source
2018-05-23 16:58:27
185.128.25.163 127.0.0.6
  • IRC spam drone (litmus/sdbot/fyle)
  • Unknown worm or spambot
2018-05-22 11:46:20
217.64.127.139 127.0.0.6
  • Unknown worm or spambot
  • IRC spam drone (litmus/sdbot/fyle)
2018-05-21 09:17:18
119.18.153.110 127.0.0.6
  • Unknown worm or spambot
2018-05-20 15:06:28
89.31.57.5 127.0.0.6
  • Unknown worm or spambot
2018-05-18 14:55:27
5.206.231.215 127.0.0.6
  • Unknown worm or spambot
2018-05-15 16:16:50
154.127.52.158 127.0.0.6
  • Unknown worm or spambot
2018-05-15 12:42:00
72.169.96.18 127.0.0.6
  • Unknown worm or spambot
2018-05-14 18:28:43
127.0.0.7 181.189.233.98 127.0.0.7
  • DDoS drone
2018-05-25 20:23:28
176.65.85.61 127.0.0.7
  • DDoS drone
2018-05-25 19:37:59
84.208.175.13 127.0.0.7
  • DDoS drone
2018-05-22 18:52:57
201.132.84.170 127.0.0.7
  • DDoS drone
2018-05-16 00:07:29
85.9.74.232 127.0.0.7
  • DDoS drone
2018-05-15 20:24:29
117.21.221.210 127.0.0.7
  • DDoS drone
2018-05-14 04:38:52
115.78.133.43 127.0.0.7
  • DDoS drone
2018-05-07 09:06:59
74.95.133.202 127.0.0.7
  • DDoS drone
2018-04-25 16:02:50
200.178.3.56 127.0.0.7
  • DDoS drone
2018-04-20 15:14:57
49.158.106.194 127.0.0.7
  • DDoS drone
2018-04-11 14:55:38
127.0.0.8 159.89.227.240 127.0.0.8
  • Open SOCKS proxy
2018-05-27 02:17:18
192.241.248.190 127.0.0.8
  • Open SOCKS proxy
2018-05-25 03:35:48
66.122.95.218 127.0.0.8
  • Open SOCKS proxy
  • Open HTTP proxy
2018-05-24 09:59:18
85.185.238.214 127.0.0.8
  • IRC spam drone (litmus/sdbot/fyle)
  • Open HTTP proxy
  • Open SOCKS proxy
2018-05-24 09:21:57
190.92.48.93 127.0.0.8
  • Open HTTP proxy
  • Open SOCKS proxy
2018-05-23 22:39:30
209.122.193.17 127.0.0.8
  • Open SOCKS proxy
2018-05-23 14:50:24
80.21.241.84 127.0.0.8
  • Open SOCKS proxy
  • Open HTTP proxy
2018-05-23 11:40:00
93.58.108.138 127.0.0.8
  • Open SOCKS proxy
2018-05-23 10:12:17
71.213.189.12 127.0.0.8
  • Open SOCKS proxy
2018-05-22 18:55:50
66.158.238.251 127.0.0.8
  • Open SOCKS proxy
2018-05-22 17:43:18
127.0.0.9 173.212.208.25 127.0.0.9
  • Open HTTP proxy
2018-05-26 21:07:15
187.60.217.161 127.0.0.9
  • Open HTTP proxy
2018-05-25 16:06:56
167.99.73.205 127.0.0.9
  • Open HTTP proxy
2018-05-25 09:47:38
216.107.149.114 127.0.0.9
  • Open HTTP proxy
2018-05-24 15:01:46
66.122.95.218 127.0.0.9
  • Open SOCKS proxy
  • Open HTTP proxy
2018-05-24 09:59:18
85.185.238.214 127.0.0.9
  • IRC spam drone (litmus/sdbot/fyle)
  • Open HTTP proxy
  • Open SOCKS proxy
2018-05-24 09:21:57
190.92.48.93 127.0.0.9
  • Open HTTP proxy
  • Open SOCKS proxy
2018-05-23 22:39:30
190.185.101.131 127.0.0.9
  • Open HTTP proxy
2018-05-23 12:44:37
80.21.241.84 127.0.0.9
  • Open SOCKS proxy
  • Open HTTP proxy
2018-05-23 11:40:00
200.93.222.244 127.0.0.9
  • Open HTTP proxy
2018-05-22 19:02:20
127.0.0.10 47.90.102.66 127.0.0.10
  • Proxychain
2018-05-12 07:02:18
213.6.147.138 127.0.0.10
  • Open SOCKS proxy
  • Proxychain
2018-04-27 19:24:38
212.129.47.10 127.0.0.10
  • Open HTTP proxy
  • Proxychain
2018-03-17 02:03:43
127.0.0.10 127.0.0.10
  • Proxychain
2018-02-28 06:39:30
138.201.33.97 127.0.0.10
  • Proxychain
2018-02-12 15:17:43
82.200.205.49 127.0.0.10
  • Proxychain
  • Open HTTP proxy
2018-02-10 19:55:01
113.252.159.5 127.0.0.10
  • Open HTTP proxy
  • Proxychain
2018-01-24 08:57:59
139.59.117.11 127.0.0.10
  • Proxychain
  • Open SOCKS proxy
  • Open HTTP proxy
2018-01-24 08:15:51
62.210.28.114 127.0.0.10
  • Open HTTP proxy
  • Proxychain
2018-01-19 08:09:02
212.129.25.112 127.0.0.10
  • Open HTTP proxy
  • Proxychain
2018-01-18 09:44:08
127.0.0.11 85.17.24.66 127.0.0.11
  • Web Page Proxy
2018-03-09 06:01:31
127.0.0.11 127.0.0.11
  • Web Page Proxy
2017-09-19 16:52:12
37.58.58.206 127.0.0.11
  • Web Page Proxy
2017-01-18 14:59:56
46.101.74.197 127.0.0.11
  • hola vpn
2016-09-05 12:28:30
104.131.89.84 127.0.0.11
  • hola vpn
2016-08-19 20:09:29
107.170.136.239 127.0.0.11
  • hola vpn
2016-04-08 12:39:32
127.0.0.12 31.45.246.170 127.0.0.12
  • Open DNS Resolver
2018-05-19 05:22:33
190.128.238.34 127.0.0.12
  • Open DNS Resolver
2018-05-18 14:32:33
203.186.8.146 127.0.0.12
  • Open DNS Resolver
2018-05-18 09:52:13
91.200.116.21 127.0.0.12
  • Open DNS Resolver
2018-05-18 06:47:58
5.158.82.254 127.0.0.12
  • Open DNS Resolver
2018-05-18 06:47:27
217.144.21.30 127.0.0.12
  • Open DNS Resolver
2018-05-18 05:59:46
8.8.8.8 127.0.0.12
  • Open DNS Resolver
2018-05-17 13:09:27
190.85.112.139 127.0.0.12
  • Open DNS Resolver
2018-05-11 19:23:36
184.70.171.154 127.0.0.12
  • Open DNS Resolver
2018-05-11 18:59:03
208.67.220.220 127.0.0.12
  • Open DNS Resolver
2018-05-07 12:14:16
127.0.0.13 181.214.206.101 127.0.0.13
  • Automated dictionary attacks
2018-05-23 13:36:20
61.177.172.86 127.0.0.13
  • Automated dictionary attacks
2018-05-21 14:57:35
71.6.158.166 127.0.0.13
  • Automated dictionary attacks
2018-05-14 17:35:48
181.214.206.20 127.0.0.13
  • Automated dictionary attacks
2018-05-11 05:43:13
89.248.169.103 127.0.0.13
  • Automated dictionary attacks
2018-05-09 12:31:01
198.20.70.114 127.0.0.13
  • Automated dictionary attacks
2018-05-08 06:19:45
202.101.6.82 127.0.0.13
  • Automated dictionary attacks
2018-05-07 14:26:43
181.214.206.133 127.0.0.13
  • Automated dictionary attacks
2018-05-07 05:14:22
71.6.165.200 127.0.0.13
  • Automated dictionary attacks
2018-05-07 01:26:09
91.209.70.221 127.0.0.13
  • Automated dictionary attacks
2018-05-02 10:33:56
127.0.0.14 127.0.0.14 127.0.0.14
  • Open WINGATE proxy
2015-10-12 19:17:16
127.0.0.15 185.165.29.78 127.0.0.15
  • Compromised router / gateway
2018-05-26 11:48:08
181.214.87.4 127.0.0.15
  • Compromised router / gateway
2018-05-22 13:10:00
124.193.236.138 127.0.0.15
  • Compromised router / gateway
2018-05-15 11:19:08
111.160.124.231 127.0.0.15
  • Compromised router / gateway
2018-05-14 03:19:54
203.190.163.125 127.0.0.15
  • Compromised router / gateway
2018-05-11 16:22:35
73.158.127.66 127.0.0.15
  • Compromised router / gateway
2018-05-09 18:15:38
61.90.150.242 127.0.0.15
  • Compromised router / gateway
2018-05-07 07:38:52
118.163.135.17 127.0.0.15
  • IRC spam drone (litmus/sdbot/fyle)
  • Compromised router / gateway
2018-05-03 11:08:33
193.201.224.208 127.0.0.15
  • Compromised router / gateway
2018-04-24 21:19:07
2404:8680:1101:320:150:95:25:106 127.0.0.15
  • Compromised router / gateway
2018-04-24 08:43:22
127.0.0.16 93.174.93.46 127.0.0.16
  • Autorooting worms
2018-05-10 14:55:53
91.197.232.107 127.0.0.16
  • Autorooting worms
2018-05-08 08:46:19
115.85.192.40 127.0.0.16
  • Autorooting worms
2018-03-26 20:22:22
89.248.171.31 127.0.0.16
  • Autorooting worms
2018-03-26 10:07:03
220.225.7.31 127.0.0.16
  • SSH2 Bruteforce
  • Compromised router / gateway
2018-03-21 11:59:04
60.174.195.41 127.0.0.16
  • Compromised router / gateway
  • Autorooting worms
2018-02-26 05:05:45
222.186.58.131 127.0.0.16
  • SSH Bruteforce
2017-12-13 01:07:55
89.197.125.35 127.0.0.16
  • Autorooting worms
2017-12-06 04:33:14
89.248.171.234 127.0.0.16
  • Autorooting worms
2017-12-04 05:39:02
80.82.78.92 127.0.0.16
  • Autorooting worms
2017-12-04 03:01:08
127.0.0.17 116.12.48.104 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2018-05-24 19:58:16
190.7.129.82 127.0.0.17
  • Scraped
2018-05-21 16:08:48
221.226.11.229 127.0.0.17
  • Open SOCKS proxy
  • Scraped
2018-05-21 01:33:06
213.155.227.246 127.0.0.17
  • Scraped
2018-05-18 06:49:49
140.143.241.113 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2018-05-18 04:25:36
190.153.236.109 127.0.0.17
  • Scraped
2018-05-17 14:32:32
203.232.224.16 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2018-05-17 01:04:55
175.156.142.252 127.0.0.17
  • Scraped
2018-05-16 13:41:03
91.209.246.253 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2018-05-14 13:10:40
23.94.27.173 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2018-05-14 13:05:08
127.0.0.18 213.60.23.233 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-05-25 11:43:20
81.180.92.50 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-05-22 10:35:45
87.229.45.137 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-05-15 14:18:10
148.240.238.90 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-05-11 15:08:32
217.10.204.126 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-05-10 13:52:03
93.108.244.64 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-05-04 18:11:41
149.62.173.111 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-05-04 06:59:50
190.3.71.90 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-05-03 18:49:48
77.104.250.234 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-04-25 06:25:47
148.233.0.18 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-04-24 16:09:20
127.0.0.255 198.100.144.218 127.0.0.255
  • Uncategorized threat class
2018-03-01 14:07:38
127.0.0.255 127.0.0.255
  • Uncategorized threat class
2017-01-02 22:53:49