RBL Details to DroneBL

Id 20
R.I.P. 0
Private 0
Name DroneBL
DNS Zone dnsbl.dronebl.org
IPv4 1
IPv6 1
Domain/URI 0
Type b
URL http://www.dronebl.org/
Has only TXT records 0
Comment
Last failed timestamp (UTC) 2017-03-24 04:31:38
Last nameserver check (UTC) 2017-03-24 03:32:19
Nameservers
  • rbldns3.ns.dronebl.org
  • rbldns6.ns.dronebl.org

Testentries

See also RFC 5782
Testentry Type (presence) Data of the last response Last verdict Last success timestamp (UTC) Last failed timestamp (UTC)
127.0.0.1 must_not success 2017-03-24 03:32:22 2012-09-06 02:38:28
127.0.0.2 must
A:
  • 127.0.0.1 (TTL=300)
TXT:
  • Testing class.
success 2017-03-24 03:32:20 2014-05-02 02:37:04
127.0.0.3 must
A:
  • 127.0.0.3 (TTL=300)
TXT:
  • IRC spam drone (litmus/sdbot/fyle)
success 2017-03-24 03:32:21 2014-07-31 02:35:11
127.0.0.5 must
A:
  • 127.0.0.5 (TTL=300)
TXT:
  • Bottler (experimental)
success 2017-03-24 03:32:22 2014-08-01 02:35:13
127.0.0.6 must
A:
  • 127.0.0.6 (TTL=300)
TXT:
  • Unknown worm or spambot
success 2017-03-24 03:32:22 2014-07-31 02:35:11
127.0.0.7 must
A:
  • 127.0.0.7 (TTL=300)
TXT:
  • DDoS drone
success 2017-03-24 03:32:22 2014-07-31 02:35:11
127.0.0.8 must
A:
  • 127.0.0.8 (TTL=300)
TXT:
  • Open SOCKS proxy
success 2017-03-24 03:32:22 2014-07-31 02:35:11
127.0.0.9 must
A:
  • 127.0.0.9 (TTL=300)
TXT:
  • Open HTTP proxy
success 2017-03-24 03:32:22 2014-07-31 02:35:11
127.0.0.10 must
A:
  • 127.0.0.10 (TTL=300)
TXT:
  • Proxychain
success 2017-03-24 03:32:20 2014-08-01 02:35:13
127.0.0.11 must
A:
  • 127.0.0.11 (TTL=300)
TXT:
  • Web Page Proxy
success 2017-03-24 03:32:20
127.0.0.13 must
A:
  • 127.0.0.13 (TTL=300)
TXT:
  • Automated dictionary attacks
success 2017-03-24 03:32:20 2014-08-01 02:35:13
127.0.0.14 must
A:
  • 127.0.0.14 (TTL=300)
TXT:
  • Open WINGATE proxy
success 2017-03-24 03:32:20 2014-08-01 02:35:13
127.0.0.15 must
A:
  • 127.0.0.15 (TTL=300)
TXT:
  • Compromised router / gateway
success 2017-03-24 03:32:21 2014-07-31 02:35:11
127.0.0.16 must
A:
  • 127.0.0.16 (TTL=300)
TXT:
  • Autorooting worms
success 2017-03-24 03:32:21
127.0.0.17 must
A:
  • 127.0.0.17 (TTL=300)
TXT:
  • Automatically determined botnet IPs (experimental)
success 2017-03-24 03:32:21
127.0.0.18 must
A:
  • 127.0.0.18 (TTL=300)
TXT:
  • DNS/MX type hostname detected on IRC
success 2017-03-24 03:32:21
127.0.0.255 must
A:
  • 127.0.0.255 (TTL=300)
TXT:
  • Uncategorized threat class
success 2017-03-24 03:32:21 2014-07-31 02:35:11
::ffff:7f00:1 must_not success 2017-03-24 03:32:22
::ffff:7f00:2 must
A:
  • 127.0.0.1 (TTL=300)
TXT:
  • Testing class.
success 2017-03-24 03:32:20

Last listed entries found

Masked RC Listed entry Response return code Response TXT record Timestamp (UTC)
127.0.0.1 127.0.0.2 127.0.0.1
  • Testing class.
2017-03-23 18:21:47
::ffff:7f00:2 127.0.0.1
  • Testing class.
2017-03-20 16:57:00
127.0.0.3 89.248.171.132 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2017-03-23 02:12:03
207.226.143.113 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2017-03-22 04:24:42
182.48.82.110 127.0.0.3
  • used by irc spam bot
2017-03-18 13:43:29
61.178.221.228 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
  • Unknown worm or spambot
2017-03-18 11:10:26
89.221.209.100 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2017-03-17 06:23:21
64.68.255.254 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2017-03-16 15:53:55
220.167.207.74 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2017-03-15 13:10:36
183.60.48.25 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2017-03-15 12:07:32
168.235.68.204 127.0.0.3
  • used by irc spam bot
2017-03-14 21:49:26
5.135.179.42 127.0.0.3
  • used by irc spam bot
2017-03-14 16:58:02
127.0.0.6 91.200.12.7 127.0.0.6
  • Forum Spam Source
2017-03-24 03:10:30
50.3.132.24 127.0.0.6
  • Mail Spam Source with invalid contact details in ARIN
2017-03-23 23:13:49
185.179.204.3 127.0.0.6
  • localvisible spam source
2017-03-23 20:04:25
76.10.242.253 127.0.0.6
  • Unknown worm or spambot
2017-03-23 12:15:03
68.71.180.111 127.0.0.6
  • Unknown worm or spambot
2017-03-23 10:36:56
50.3.24.226 127.0.0.6
  • Mail Spam Source with invalid contact details in ARIN
2017-03-23 09:59:13
50.3.24.237 127.0.0.6
  • Mail Spam Source with invalid contact details in ARIN
2017-03-23 09:28:40
103.9.115.142 127.0.0.6
  • Unknown worm or spambot
  • open http tunnel
  • Open HTTP proxy
2017-03-23 09:25:30
50.3.86.173 127.0.0.6
  • Mail Spam Source with invalid contact details in ARIN
2017-03-23 06:54:26
50.3.86.172 127.0.0.6
  • Mail Spam Source with invalid contact details in ARIN
2017-03-23 06:53:32
127.0.0.7 183.182.102.136 127.0.0.7
  • DDoS drone
2017-03-14 03:30:20
188.138.109.71 127.0.0.7
  • Layer 7 HTTP attacks
2017-02-15 07:25:23
127.0.0.7 127.0.0.7
  • DDoS drone
2017-02-10 20:59:01
108.61.122.152 127.0.0.7
  • DDoS drone
2017-01-03 05:11:23
89.107.184.121 127.0.0.7
  • Layer 7 HTTP attacks
2016-12-28 07:40:48
88.208.252.137 127.0.0.7
  • Layer 7 HTTP attacks
2016-12-19 11:06:55
54.248.250.232 127.0.0.7
  • Layer 7 HTTP attacks
2016-11-30 14:52:29
50.112.95.211 127.0.0.7
  • Layer 7 HTTP attacks
2016-11-17 10:15:02
200.178.3.56 127.0.0.7
  • DDoS drone
2016-11-16 12:28:17
185.78.29.33 127.0.0.7
  • DDoS drone
2016-10-23 05:03:02
127.0.0.8 94.102.49.190 127.0.0.8
  • Open SOCKS proxy
2017-03-23 17:48:49
37.191.206.53 127.0.0.8
  • Open SOCKS proxy
2017-03-23 09:25:04
212.3.183.83 127.0.0.8
  • Open SOCKS proxy
2017-03-23 09:18:46
176.62.66.148 127.0.0.8
  • Open SOCKS proxy
2017-03-23 06:13:16
200.7.91.162 127.0.0.8
  • Open SOCKS proxy
2017-03-22 11:26:54
61.91.183.174 127.0.0.8
  • Open SOCKS proxy
2017-03-22 11:07:56
66.43.232.240 127.0.0.8
  • Open SOCKS proxy
2017-03-22 07:11:58
95.111.100.143 127.0.0.8
  • Open SOCKS proxy
2017-03-21 13:40:12
198.1.79.212 127.0.0.8
  • open sock proxy
2017-03-20 16:45:15
198.8.63.102 127.0.0.8
  • Open SOCKS proxy
  • Unknown worm or spambot
2017-03-20 14:06:22
127.0.0.9 199.168.148.90 127.0.0.9
  • Scraped
  • open http proxy
2017-03-24 00:59:19
128.199.254.170 127.0.0.9
  • Open HTTP proxy
2017-03-23 15:11:42
5.199.130.188 127.0.0.9
  • Open HTTP proxy
2017-03-23 13:33:01
203.77.230.115 127.0.0.9
  • open http proxy
  • Scraped
2017-03-23 11:08:28
103.9.115.142 127.0.0.9
  • Unknown worm or spambot
  • open http tunnel
  • Open HTTP proxy
2017-03-23 09:25:30
45.118.113.202 127.0.0.9
  • Open HTTP proxy
2017-03-23 08:44:14
201.234.190.164 127.0.0.9
  • Open HTTP proxy
2017-03-22 21:57:47
221.180.170.16 127.0.0.9
  • Open HTTP proxy
2017-03-22 20:32:14
192.99.159.95 127.0.0.9
  • Open HTTP proxy
2017-03-22 20:30:53
43.249.140.230 127.0.0.9
  • Open HTTP proxy
2017-03-22 15:13:20
127.0.0.10 127.0.0.10 127.0.0.10
  • Proxychain
2016-11-11 15:54:11
127.0.0.11 127.0.0.11 127.0.0.11
  • Web Page Proxy
2017-02-19 07:47:52
37.58.58.206 127.0.0.11
  • Web Page Proxy
2017-01-18 14:59:56
46.101.74.197 127.0.0.11
  • hola vpn
2016-09-05 12:28:30
104.131.89.84 127.0.0.11
  • hola vpn
2016-08-19 20:09:29
107.170.136.239 127.0.0.11
  • hola vpn
2016-04-08 12:39:32
127.0.0.12 178.213.202.253 127.0.0.12
  • Open DNS Resolver
2017-03-24 01:16:41
8.8.8.8 127.0.0.12
  • Open DNS Resolver
2017-03-23 22:52:34
187.189.46.224 127.0.0.12
  • Open DNS Resolver
2017-03-23 14:29:51
5.34.180.32 127.0.0.12
  • Open DNS Resolver
2017-03-22 13:02:09
190.81.61.142 127.0.0.12
  • Open DNS Resolver
2017-03-21 16:40:53
8.8.4.4 127.0.0.12
  • Open DNS Resolver
2017-03-20 19:47:49
190.63.185.34 127.0.0.12
  • Open DNS Resolver
2017-03-18 11:28:31
69.162.64.226 127.0.0.12
  • Open DNS Resolver
2017-03-17 12:38:51
222.124.215.20 127.0.0.12
  • Open DNS Resolver
2017-03-17 12:10:47
69.162.64.237 127.0.0.12
  • Open DNS Resolver
2017-03-17 07:54:39
127.0.0.13 198.20.69.74 127.0.0.13
  • Automated dictionary attacks
2017-03-23 21:43:38
71.6.165.200 127.0.0.13
  • Automated dictionary attacks
2017-03-23 14:35:27
50.224.4.179 127.0.0.13
  • Automated dictionary attacks
2017-03-23 06:06:04
198.20.87.98 127.0.0.13
  • Automated dictionary attacks
2017-03-22 21:38:18
221.194.47.224 127.0.0.13
  • Automated dictionary attacks
2017-03-19 01:14:52
121.18.238.114 127.0.0.13
  • Automated dictionary attacks
2017-03-19 01:13:01
80.67.172.162 127.0.0.13
  • Automated dictionary attacks
2017-03-19 00:11:30
121.18.238.98 127.0.0.13
  • Automated dictionary attacks
2017-03-18 03:18:22
119.249.54.71 127.0.0.13
  • Automated dictionary attacks
2017-03-18 03:16:46
71.6.146.186 127.0.0.13
  • Automated dictionary attacks
2017-03-16 23:14:40
127.0.0.14 127.0.0.14 127.0.0.14
  • Open WINGATE proxy
2015-10-12 19:17:16
127.0.0.15 94.102.56.181 127.0.0.15
  • Compromised router / gateway
2017-03-24 02:52:38
89.248.160.150 127.0.0.15
  • Compromised router / gateway
2017-02-20 16:03:32
80.82.78.170 127.0.0.15
  • Compromised router / gateway
2017-02-17 10:14:57
127.0.0.16 185.40.4.208 127.0.0.16
  • Autorooting worms
2017-03-23 02:42:49
80.82.78.92 127.0.0.16
  • Autorooting worms
2017-03-20 03:13:18
93.174.93.46 127.0.0.16
  • Autorooting worms
2017-03-19 03:01:31
91.200.12.150 127.0.0.16
  • Autorooting worms
2017-03-12 13:40:57
220.130.42.127 127.0.0.16
  • Autorooting worms
2017-03-06 03:16:53
189.198.156.86 127.0.0.16
  • SSH Bruteforce
2017-03-04 04:49:46
77.105.32.86 127.0.0.16
  • SSH2 Bruteforce
2017-02-20 14:55:46
89.197.125.35 127.0.0.16
  • Autorooting worms
2017-02-20 06:11:35
193.86.66.130 127.0.0.16
  • Autorooting worms
2017-02-20 03:09:11
220.225.7.45 127.0.0.16
  • SSH2 Bruteforce
2017-02-12 16:27:06
127.0.0.17 80.120.146.11 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-03-24 01:17:48
96.243.18.45 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-03-23 23:05:05
103.56.207.69 127.0.0.17
  • Scraped
2017-03-23 13:28:01
192.3.95.45 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-03-23 11:21:19
150.107.149.27 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-03-23 10:51:08
189.254.234.244 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-03-23 09:51:52
213.226.8.125 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-03-23 09:26:14
23.95.53.149 127.0.0.17
  • Scraped
2017-03-23 08:42:02
186.121.202.67 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-03-23 08:12:06
181.121.4.103 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-03-23 07:12:39
127.0.0.18 5.79.64.50 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-03-21 08:38:42
200.143.169.181 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-03-20 14:54:54
87.229.45.137 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-03-19 08:03:10
87.118.116.62 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-03-17 13:37:30
220.247.200.30 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-03-17 13:12:33
109.2.129.2 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-03-16 13:44:59
212.52.157.198 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-03-14 16:05:06
178.216.170.1 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-03-13 14:23:10
109.188.85.151 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-03-12 05:18:57
210.143.99.17 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-03-08 06:31:44
127.0.0.255 198.100.144.218 127.0.0.255
  • Uncategorized threat class
2017-02-07 16:34:23
127.0.0.255 127.0.0.255
  • Uncategorized threat class
2017-01-02 22:53:49