RBL Details to DroneBL

Id 20
R.I.P. 0
Private 0
Name DroneBL
DNS Zone dnsbl.dronebl.org
IPv4 1
IPv6 1
Domain/URI 0
Type b
URL http://www.dronebl.org/
Has only TXT records 0
Comment
Last failed timestamp (UTC) 2017-06-26 23:00:53
Last nameserver check (UTC) 2017-06-27 02:32:26
Nameservers
  • rbldns3.ns.dronebl.org
  • rbldns6.ns.dronebl.org

Testentries

See also RFC 5782
Testentry Type (presence) Data of the last response Last verdict Last success timestamp (UTC) Last failed timestamp (UTC)
127.0.0.1 must_not success 2017-06-27 02:32:28 2012-09-06 02:38:28
127.0.0.2 must
A:
  • 127.0.0.1 (TTL=300)
TXT:
  • Testing class.
success 2017-06-27 02:32:26 2014-05-02 02:37:04
127.0.0.3 must
A:
  • 127.0.0.3 (TTL=300)
TXT:
  • IRC spam drone (litmus/sdbot/fyle)
success 2017-06-27 02:32:28 2014-07-31 02:35:11
127.0.0.5 must
A:
  • 127.0.0.5 (TTL=300)
TXT:
  • Bottler (experimental)
success 2017-06-27 02:32:28 2014-08-01 02:35:13
127.0.0.6 must
A:
  • 127.0.0.6 (TTL=300)
TXT:
  • Unknown worm or spambot
success 2017-06-27 02:32:28 2014-07-31 02:35:11
127.0.0.7 must
A:
  • 127.0.0.7 (TTL=300)
TXT:
  • DDoS drone
success 2017-06-27 02:32:28 2014-07-31 02:35:11
127.0.0.8 must
A:
  • 127.0.0.8 (TTL=300)
TXT:
  • Open SOCKS proxy
success 2017-06-27 02:32:28 2014-07-31 02:35:11
127.0.0.9 must
A:
  • 127.0.0.9 (TTL=300)
TXT:
  • Open HTTP proxy
success 2017-06-27 02:32:28 2014-07-31 02:35:11
127.0.0.10 must
A:
  • 127.0.0.10 (TTL=300)
TXT:
  • Proxychain
success 2017-06-27 02:32:26 2014-08-01 02:35:13
127.0.0.11 must
A:
  • 127.0.0.11 (TTL=300)
TXT:
  • Web Page Proxy
success 2017-06-27 02:32:26
127.0.0.13 must
A:
  • 127.0.0.13 (TTL=300)
TXT:
  • Automated dictionary attacks
success 2017-06-27 02:32:26 2014-08-01 02:35:13
127.0.0.14 must
A:
  • 127.0.0.14 (TTL=300)
TXT:
  • Open WINGATE proxy
success 2017-06-27 02:32:27 2014-08-01 02:35:13
127.0.0.15 must
A:
  • 127.0.0.15 (TTL=300)
TXT:
  • Compromised router / gateway
success 2017-06-27 02:32:27 2014-07-31 02:35:11
127.0.0.16 must
A:
  • 127.0.0.16 (TTL=300)
TXT:
  • Autorooting worms
success 2017-06-27 02:32:27
127.0.0.17 must
A:
  • 127.0.0.17 (TTL=300)
TXT:
  • Automatically determined botnet IPs (experimental)
success 2017-06-27 02:32:27
127.0.0.18 must
A:
  • 127.0.0.18 (TTL=300)
TXT:
  • DNS/MX type hostname detected on IRC
success 2017-06-27 02:32:27
127.0.0.255 must
A:
  • 127.0.0.255 (TTL=300)
TXT:
  • Uncategorized threat class
success 2017-06-27 02:32:27 2014-07-31 02:35:11
::ffff:7f00:1 must_not success 2017-06-27 02:32:29
::ffff:7f00:2 must
A:
  • 127.0.0.1 (TTL=300)
TXT:
  • Testing class.
success 2017-06-27 02:32:26

Last listed entries found

Masked RC Listed entry Response return code Response TXT record Timestamp (UTC)
127.0.0.1 127.0.0.2 127.0.0.1
  • Testing class.
2017-06-26 20:09:38
::ffff:7f00:2 127.0.0.1
  • Testing class.
2017-06-09 09:06:11
127.0.0.3 186.4.174.212 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2017-06-27 03:12:26
23.235.227.106 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2017-06-26 09:31:34
107.168.71.11 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2017-06-26 08:33:50
109.230.32.155 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2017-06-25 21:25:27
87.236.30.51 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2017-06-25 07:08:03
85.132.71.98 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2017-06-24 18:46:41
168.194.108.12 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2017-06-24 16:25:38
104.219.251.135 127.0.0.3
  • Open SOCKS proxy
  • IRC spam drone (litmus/sdbot/fyle)
2017-06-23 08:49:54
177.180.164.8 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
  • Open SOCKS proxy
2017-06-23 05:24:43
79.62.100.10 127.0.0.3
  • Open SOCKS proxy
  • IRC spam drone (litmus/sdbot/fyle)
2017-06-23 04:02:33
127.0.0.5 127.0.0.5 127.0.0.5
  • Bottler (experimental)
2017-06-24 20:38:30
127.0.0.6 91.200.12.35 127.0.0.6
  • Forum Spam Source
2017-06-26 14:37:07
154.72.74.82 127.0.0.6
  • Unknown worm or spambot
2017-06-25 19:14:22
91.200.12.95 127.0.0.6
  • Forum Spam Source
2017-06-25 03:42:24
91.200.12.153 127.0.0.6
  • Forum Spam Source
2017-06-25 03:04:39
81.6.139.84 127.0.0.6
  • Unknown worm or spambot
2017-06-23 10:32:45
193.254.188.22 127.0.0.6
  • Unknown worm or spambot
2017-06-23 08:06:01
91.200.12.1 127.0.0.6
  • Forum Spam Source
2017-06-22 07:29:07
95.130.11.147 127.0.0.6
  • open http tunnel
  • Unknown worm or spambot
2017-06-22 05:24:01
200.49.42.109 127.0.0.6
  • Unknown worm or spambot
2017-06-22 01:27:25
5.196.66.162 127.0.0.6
  • Unknown worm or spambot
2017-06-21 22:50:00
127.0.0.7 188.138.109.71 127.0.0.7
  • Layer 7 HTTP attacks
2017-06-07 05:54:25
183.182.102.136 127.0.0.7
  • DDoS drone
2017-03-14 03:30:20
127.0.0.7 127.0.0.7
  • DDoS drone
2017-02-10 20:59:01
108.61.122.152 127.0.0.7
  • DDoS drone
2017-01-03 05:11:23
89.107.184.121 127.0.0.7
  • Layer 7 HTTP attacks
2016-12-28 07:40:48
88.208.252.137 127.0.0.7
  • Layer 7 HTTP attacks
2016-12-19 11:06:55
54.248.250.232 127.0.0.7
  • Layer 7 HTTP attacks
2016-11-30 14:52:29
50.112.95.211 127.0.0.7
  • Layer 7 HTTP attacks
2016-11-17 10:15:02
200.178.3.56 127.0.0.7
  • DDoS drone
2016-11-16 12:28:17
185.78.29.33 127.0.0.7
  • DDoS drone
2016-10-23 05:03:02
127.0.0.8 179.218.12.24 127.0.0.8
  • Open SOCKS proxy
2017-06-27 04:47:06
189.102.79.139 127.0.0.8
  • Open SOCKS proxy
2017-06-26 12:50:10
94.23.93.232 127.0.0.8
  • Open SOCKS proxy
2017-06-26 07:38:55
187.185.112.182 127.0.0.8
  • Open SOCKS proxy
2017-06-26 01:16:01
94.23.92.30 127.0.0.8
  • Open SOCKS proxy
2017-06-24 05:11:03
104.219.251.135 127.0.0.8
  • Open SOCKS proxy
  • IRC spam drone (litmus/sdbot/fyle)
2017-06-23 08:49:54
178.251.138.147 127.0.0.8
  • open sock proxy
2017-06-23 08:23:32
177.180.164.8 127.0.0.8
  • IRC spam drone (litmus/sdbot/fyle)
  • Open SOCKS proxy
2017-06-23 05:24:43
79.62.100.10 127.0.0.8
  • Open SOCKS proxy
  • IRC spam drone (litmus/sdbot/fyle)
2017-06-23 04:02:33
187.66.47.216 127.0.0.8
  • IRC spam drone (litmus/sdbot/fyle)
  • Open SOCKS proxy
2017-06-23 01:22:45
127.0.0.9 93.174.90.30 127.0.0.9
  • open http tunnel
2017-06-26 21:46:34
37.48.80.101 127.0.0.9
  • Open HTTP proxy
2017-06-26 15:52:24
187.33.161.184 127.0.0.9
  • Open HTTP proxy
2017-06-26 14:09:52
190.10.8.50 127.0.0.9
  • open http tunnel
2017-06-25 19:08:52
77.78.91.14 127.0.0.9
  • Open HTTP proxy
2017-06-23 11:06:47
85.90.163.65 127.0.0.9
  • open http proxy
2017-06-23 06:28:54
88.198.96.2 127.0.0.9
  • open http proxy
2017-06-23 04:57:48
5.199.130.188 127.0.0.9
  • Open HTTP proxy
2017-06-22 05:33:53
95.130.11.147 127.0.0.9
  • open http tunnel
  • Unknown worm or spambot
2017-06-22 05:24:01
216.218.134.12 127.0.0.9
  • open http proxy
2017-06-22 04:21:47
127.0.0.10 164.160.142.60 127.0.0.10
  • Proxychain
2017-06-25 22:53:52
127.0.0.10 127.0.0.10
  • Proxychain
2016-11-11 15:54:11
127.0.0.11 127.0.0.11 127.0.0.11
  • Web Page Proxy
2017-02-19 07:47:52
37.58.58.206 127.0.0.11
  • Web Page Proxy
2017-01-18 14:59:56
46.101.74.197 127.0.0.11
  • hola vpn
2016-09-05 12:28:30
104.131.89.84 127.0.0.11
  • hola vpn
2016-08-19 20:09:29
107.170.136.239 127.0.0.11
  • hola vpn
2016-04-08 12:39:32
127.0.0.12 8.8.8.8 127.0.0.12
  • Open DNS Resolver
2017-06-26 13:59:04
218.56.144.220 127.0.0.12
  • Open DNS Resolver
2017-06-26 07:25:54
202.59.161.229 127.0.0.12
  • Open DNS Resolver
2017-06-24 04:34:59
82.208.58.214 127.0.0.12
  • Open DNS Resolver
2017-06-23 09:50:32
91.142.212.252 127.0.0.12
  • Open DNS Resolver
2017-06-21 10:36:56
66.49.192.115 127.0.0.12
  • Open DNS Resolver
2017-06-19 08:47:01
91.200.36.222 127.0.0.12
  • Open DNS Resolver
2017-06-16 09:50:12
212.47.253.4 127.0.0.12
  • Open DNS Resolver
2017-06-15 11:12:00
200.54.216.195 127.0.0.12
  • Open DNS Resolver
2017-06-14 16:42:07
90.181.244.2 127.0.0.12
  • Open DNS Resolver
2017-06-12 10:04:39
127.0.0.13 113.108.21.16 127.0.0.13
  • Automated dictionary attacks
2017-06-23 12:32:57
198.20.69.74 127.0.0.13
  • Automated dictionary attacks
2017-06-23 03:44:29
221.194.47.224 127.0.0.13
  • Automated dictionary attacks
2017-06-23 01:15:22
71.6.165.200 127.0.0.13
  • Automated dictionary attacks
2017-06-22 07:30:49
89.248.172.16 127.0.0.13
  • Automated dictionary attacks
2017-06-21 10:36:00
94.102.49.193 127.0.0.13
  • Automated dictionary attacks
2017-06-21 07:49:37
198.20.87.98 127.0.0.13
  • Automated dictionary attacks
2017-06-20 16:32:45
71.6.158.166 127.0.0.13
  • Automated dictionary attacks
2017-06-15 14:07:30
80.59.61.107 127.0.0.13
  • Automated dictionary attacks
2017-06-15 13:05:46
71.6.167.142 127.0.0.13
  • Automated dictionary attacks
2017-06-14 07:42:41
127.0.0.14 127.0.0.14 127.0.0.14
  • Open WINGATE proxy
2015-10-12 19:17:16
127.0.0.15 108.61.123.72 127.0.0.15
  • Compromised router / gateway
2017-05-25 13:12:48
91.200.12.175 127.0.0.15
  • Compromised router / gateway
2017-04-07 12:20:54
94.102.56.181 127.0.0.15
  • Compromised router / gateway
2017-03-24 02:52:38
89.248.160.150 127.0.0.15
  • Compromised router / gateway
2017-02-20 16:03:32
80.82.78.170 127.0.0.15
  • Compromised router / gateway
2017-02-17 10:14:57
127.0.0.16 89.248.171.31 127.0.0.16
  • Autorooting worms
2017-06-24 17:21:39
93.174.93.46 127.0.0.16
  • Autorooting worms
2017-06-07 06:59:11
195.22.126.189 127.0.0.16
  • Autorooting worms
2017-05-21 19:35:50
89.248.171.223 127.0.0.16
  • Autorooting worms
2017-05-20 14:03:14
91.200.12.145 127.0.0.16
  • Autorooting worms
2017-05-16 22:58:00
93.158.215.70 127.0.0.16
  • SSH Bruteforce
2017-05-10 02:09:51
93.158.215.69 127.0.0.16
  • SSH2 Bruteforce
2017-05-07 14:59:23
91.200.12.150 127.0.0.16
  • Autorooting worms
2017-04-29 23:37:23
89.197.125.35 127.0.0.16
  • Autorooting worms
2017-03-31 02:24:53
185.40.4.208 127.0.0.16
  • Autorooting worms
2017-03-23 02:42:49
127.0.0.17 210.51.180.216 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-06-26 09:40:04
62.90.64.26 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-06-26 08:44:29
82.211.31.206 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-06-25 12:11:51
142.54.174.130 127.0.0.17
  • Scraped
2017-06-25 08:10:20
110.77.242.204 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-06-25 01:52:54
192.3.137.158 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-06-24 13:41:59
190.12.77.17 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-06-22 15:41:13
200.76.182.246 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-06-22 14:51:50
62.4.19.181 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-06-22 11:20:29
213.97.87.103 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-06-22 06:24:40
127.0.0.18 91.143.198.162 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-06-26 08:32:03
195.56.146.128 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-06-26 06:12:47
200.181.132.237 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-06-23 18:50:32
201.16.221.85 127.0.0.18
  • DNS/MX type hostname detected on IRC
  • Automatically determined botnet IPs (experimental)
2017-06-21 20:23:31
5.79.64.50 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-06-21 17:02:25
54.72.47.140 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-06-21 09:43:29
190.81.112.140 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-06-19 16:25:44
203.113.148.62 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-06-19 12:10:16
197.85.186.126 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-06-18 09:36:05
2.228.35.19 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-06-15 11:10:52
127.0.0.255 198.100.144.218 127.0.0.255
  • Uncategorized threat class
2017-02-07 16:34:23
127.0.0.255 127.0.0.255
  • Uncategorized threat class
2017-01-02 22:53:49