RBL Details to DroneBL

Id 20
R.I.P. 0
Private 0
Name DroneBL
DNS Zone dnsbl.dronebl.org
IPv4 1
IPv6 1
Domain/URI 0
Type b
URL http://www.dronebl.org/
Has only TXT records 0
Comment
Last failed timestamp (UTC) 2017-08-20 05:01:31
Last nameserver check (UTC) 2017-08-20 02:32:32
Nameservers
  • rbldns3.ns.dronebl.org
  • rbldns6.ns.dronebl.org

Testentries

See also RFC 5782
Testentry Type (presence) Data of the last response Last verdict Last success timestamp (UTC) Last failed timestamp (UTC)
127.0.0.1 must_not success 2017-08-20 02:32:34 2012-09-06 02:38:28
127.0.0.2 must
A:
  • 127.0.0.1 (TTL=300)
TXT:
  • Testing class.
success 2017-08-20 02:32:32 2014-05-02 02:37:04
127.0.0.3 must
A:
  • 127.0.0.3 (TTL=300)
TXT:
  • IRC spam drone (litmus/sdbot/fyle)
success 2017-08-20 02:32:33 2014-07-31 02:35:11
127.0.0.5 must
A:
  • 127.0.0.5 (TTL=300)
TXT:
  • Bottler (experimental)
success 2017-08-20 02:32:33 2014-08-01 02:35:13
127.0.0.6 must
A:
  • 127.0.0.6 (TTL=300)
TXT:
  • Unknown worm or spambot
success 2017-08-20 02:32:33 2014-07-31 02:35:11
127.0.0.7 must
A:
  • 127.0.0.7 (TTL=300)
TXT:
  • DDoS drone
success 2017-08-20 02:32:34 2014-07-31 02:35:11
127.0.0.8 must
A:
  • 127.0.0.8 (TTL=300)
TXT:
  • Open SOCKS proxy
success 2017-08-20 02:32:34 2014-07-31 02:35:11
127.0.0.9 must
A:
  • 127.0.0.9 (TTL=300)
TXT:
  • Open HTTP proxy
success 2017-08-20 02:32:34 2014-07-31 02:35:11
127.0.0.10 must
A:
  • 127.0.0.10 (TTL=300)
TXT:
  • Proxychain
success 2017-08-20 02:32:32 2014-08-01 02:35:13
127.0.0.11 must
A:
  • 127.0.0.11 (TTL=300)
TXT:
  • Web Page Proxy
success 2017-08-20 02:32:32
127.0.0.13 must
A:
  • 127.0.0.13 (TTL=300)
TXT:
  • Automated dictionary attacks
success 2017-08-20 02:32:32 2014-08-01 02:35:13
127.0.0.14 must
A:
  • 127.0.0.14 (TTL=300)
TXT:
  • Open WINGATE proxy
success 2017-08-20 02:32:32 2014-08-01 02:35:13
127.0.0.15 must
A:
  • 127.0.0.15 (TTL=300)
TXT:
  • Compromised router / gateway
success 2017-08-20 02:32:33 2014-07-31 02:35:11
127.0.0.16 must
A:
  • 127.0.0.16 (TTL=300)
TXT:
  • Autorooting worms
success 2017-08-20 02:32:33
127.0.0.17 must
A:
  • 127.0.0.17 (TTL=300)
TXT:
  • Automatically determined botnet IPs (experimental)
success 2017-08-20 02:32:33
127.0.0.18 must
A:
  • 127.0.0.18 (TTL=300)
TXT:
  • DNS/MX type hostname detected on IRC
success 2017-08-20 02:32:33
127.0.0.255 must
A:
  • 127.0.0.255 (TTL=300)
TXT:
  • Uncategorized threat class
success 2017-08-20 02:32:33 2014-07-31 02:35:11
::ffff:7f00:1 must_not success 2017-08-20 02:32:34
::ffff:7f00:2 must
A:
  • 127.0.0.1 (TTL=300)
TXT:
  • Testing class.
success 2017-08-20 02:32:32

Last listed entries found

Masked RC Listed entry Response return code Response TXT record Timestamp (UTC)
127.0.0.1 127.0.0.2 127.0.0.1
  • Testing class.
2017-08-15 08:44:09
::ffff:7f00:2 127.0.0.1
  • Testing class.
2017-06-09 09:06:11
127.0.0.3 146.247.171.179 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
  • Open SOCKS proxy
2017-08-19 11:40:47
210.86.237.27 127.0.0.3
  • Open SOCKS proxy
  • IRC spam drone (litmus/sdbot/fyle)
2017-08-19 11:22:32
72.143.74.250 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
  • Open SOCKS proxy
2017-08-19 11:21:53
50.78.251.113 127.0.0.3
  • Open SOCKS proxy
  • IRC spam drone (litmus/sdbot/fyle)
2017-08-19 10:32:32
201.174.45.72 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
  • Open SOCKS proxy
2017-08-19 10:13:37
81.170.245.34 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2017-08-19 10:12:56
101.100.171.69 127.0.0.3
  • Open SOCKS proxy
  • IRC spam drone (litmus/sdbot/fyle)
2017-08-18 20:08:15
84.40.84.67 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
  • Open SOCKS proxy
2017-08-18 20:05:38
209.167.114.75 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
  • Open SOCKS proxy
  • Unknown worm or spambot
2017-08-18 19:59:37
207.112.120.219 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
  • Open SOCKS proxy
2017-08-18 19:59:19
127.0.0.5 127.0.0.5 127.0.0.5
  • Bottler (experimental)
2017-06-24 20:38:30
127.0.0.6 197.214.192.34 127.0.0.6
  • Unknown worm or spambot
2017-08-20 01:12:05
163.121.188.3 127.0.0.6
  • Unknown worm or spambot
  • Open HTTP proxy
  • Open SOCKS proxy
2017-08-19 20:53:38
64.188.206.129 127.0.0.6
  • Open SOCKS proxy
  • Unknown worm or spambot
2017-08-19 20:38:36
24.138.98.148 127.0.0.6
  • Open SOCKS proxy
  • Unknown worm or spambot
2017-08-19 20:36:55
73.7.47.44 127.0.0.6
  • Open SOCKS proxy
  • Unknown worm or spambot
2017-08-19 11:41:11
96.90.55.73 127.0.0.6
  • Open SOCKS proxy
  • Unknown worm or spambot
2017-08-19 11:25:31
97.86.142.68 127.0.0.6
  • Open SOCKS proxy
  • Unknown worm or spambot
2017-08-19 11:24:34
216.113.24.90 127.0.0.6
  • Unknown worm or spambot
  • Open SOCKS proxy
2017-08-19 11:23:45
97.92.238.118 127.0.0.6
  • Unknown worm or spambot
  • Open SOCKS proxy
2017-08-19 10:33:06
4.15.218.22 127.0.0.6
  • Open SOCKS proxy
  • Unknown worm or spambot
2017-08-19 10:14:09
127.0.0.7 115.78.133.43 127.0.0.7
  • DDoS drone
2017-08-10 07:51:45
200.37.162.236 127.0.0.7
  • DDoS drone
2017-08-10 03:07:03
113.22.187.209 127.0.0.7
  • DDoS drone
2017-08-03 04:49:59
188.138.109.71 127.0.0.7
  • Layer 7 HTTP attacks
2017-06-07 05:54:25
183.182.102.136 127.0.0.7
  • DDoS drone
2017-03-14 03:30:20
127.0.0.7 127.0.0.7
  • DDoS drone
2017-02-10 20:59:01
108.61.122.152 127.0.0.7
  • DDoS drone
2017-01-03 05:11:23
89.107.184.121 127.0.0.7
  • Layer 7 HTTP attacks
2016-12-28 07:40:48
88.208.252.137 127.0.0.7
  • Layer 7 HTTP attacks
2016-12-19 11:06:55
54.248.250.232 127.0.0.7
  • Layer 7 HTTP attacks
2016-11-30 14:52:29
127.0.0.8 163.121.188.3 127.0.0.8
  • Unknown worm or spambot
  • Open HTTP proxy
  • Open SOCKS proxy
2017-08-19 20:53:38
67.14.236.163 127.0.0.8
  • Open SOCKS proxy
2017-08-19 20:39:01
64.188.206.129 127.0.0.8
  • Open SOCKS proxy
  • Unknown worm or spambot
2017-08-19 20:38:36
72.91.84.235 127.0.0.8
  • Open SOCKS proxy
2017-08-19 20:38:09
24.138.98.148 127.0.0.8
  • Open SOCKS proxy
  • Unknown worm or spambot
2017-08-19 20:36:55
137.74.234.242 127.0.0.8
  • Open SOCKS proxy
2017-08-19 17:26:06
73.7.47.44 127.0.0.8
  • Open SOCKS proxy
  • Unknown worm or spambot
2017-08-19 11:41:11
146.247.171.179 127.0.0.8
  • IRC spam drone (litmus/sdbot/fyle)
  • Open SOCKS proxy
2017-08-19 11:40:47
97.82.143.18 127.0.0.8
  • Open SOCKS proxy
2017-08-19 11:26:13
88.149.195.69 127.0.0.8
  • Open SOCKS proxy
2017-08-19 11:25:48
127.0.0.9 199.68.196.125 127.0.0.9
  • Open HTTP proxy
2017-08-20 07:09:03
163.121.188.3 127.0.0.9
  • Unknown worm or spambot
  • Open HTTP proxy
  • Open SOCKS proxy
2017-08-19 20:53:38
189.209.79.161 127.0.0.9
  • open http proxy
2017-08-19 18:29:21
212.52.44.51 127.0.0.9
  • Open SOCKS proxy
  • Open HTTP proxy
2017-08-19 10:14:50
200.229.202.123 127.0.0.9
  • Open HTTP proxy
2017-08-19 10:14:34
194.79.46.83 127.0.0.9
  • Open HTTP proxy
2017-08-19 06:55:50
197.254.38.250 127.0.0.9
  • Open HTTP proxy
2017-08-19 03:30:59
37.120.250.132 127.0.0.9
  • Open HTTP proxy
2017-08-18 21:16:17
212.83.155.232 127.0.0.9
  • Proxychain
  • Open HTTP proxy
2017-08-18 16:22:26
201.252.229.176 127.0.0.9
  • Open HTTP proxy
2017-08-18 12:33:22
127.0.0.10 94.158.70.65 127.0.0.10
  • Proxychain
  • Open SOCKS proxy
2017-08-19 06:52:27
212.83.155.232 127.0.0.10
  • Proxychain
  • Open HTTP proxy
2017-08-18 16:22:26
183.222.102.96 127.0.0.10
  • Proxychain
  • Open HTTP proxy
2017-08-18 09:28:58
183.222.102.95 127.0.0.10
  • Proxychain
  • Open HTTP proxy
2017-08-18 09:25:41
94.177.237.97 127.0.0.10
  • Proxychain
2017-08-18 09:06:51
94.177.216.229 127.0.0.10
  • Proxychain
  • Open SOCKS proxy
2017-08-15 22:10:21
58.241.32.186 127.0.0.10
  • Open SOCKS proxy
  • Proxychain
2017-08-14 17:30:56
94.177.216.47 127.0.0.10
  • Open SOCKS proxy
  • Proxychain
2017-08-14 17:07:51
104.238.191.117 127.0.0.10
  • Proxychain
  • Open HTTP proxy
2017-08-11 19:47:42
41.242.142.236 127.0.0.10
  • Proxychain
  • Open HTTP proxy
2017-08-10 17:14:18
127.0.0.11 127.0.0.11 127.0.0.11
  • Web Page Proxy
2017-02-19 07:47:52
37.58.58.206 127.0.0.11
  • Web Page Proxy
2017-01-18 14:59:56
46.101.74.197 127.0.0.11
  • hola vpn
2016-09-05 12:28:30
104.131.89.84 127.0.0.11
  • hola vpn
2016-08-19 20:09:29
107.170.136.239 127.0.0.11
  • hola vpn
2016-04-08 12:39:32
127.0.0.12 8.8.8.8 127.0.0.12
  • Open DNS Resolver
2017-08-19 15:23:43
78.131.55.248 127.0.0.12
  • Open DNS Resolver
2017-08-18 12:36:59
190.82.117.18 127.0.0.12
  • Open HTTP proxy
  • Unknown worm or spambot
  • Open DNS Resolver
2017-08-16 15:06:25
82.208.58.214 127.0.0.12
  • Open DNS Resolver
2017-08-16 06:45:40
187.189.191.130 127.0.0.12
  • Open DNS Resolver
2017-08-07 18:32:38
153.150.18.170 127.0.0.12
  • Open DNS Resolver
2017-08-04 05:16:37
186.103.169.162 127.0.0.12
  • Open DNS Resolver
  • Open HTTP proxy
2017-08-03 16:49:14
191.102.115.58 127.0.0.12
  • Open DNS Resolver
2017-08-03 14:03:00
208.67.220.220 127.0.0.12
  • Open DNS Resolver
2017-08-02 19:35:46
186.47.47.148 127.0.0.12
  • Open DNS Resolver
2017-08-02 14:54:33
127.0.0.13 71.6.167.142 127.0.0.13
  • Automated dictionary attacks
2017-08-18 00:56:23
91.200.12.126 127.0.0.13
  • Automated dictionary attacks
2017-08-16 23:51:25
94.102.49.193 127.0.0.13
  • Automated dictionary attacks
2017-08-11 07:23:00
89.248.172.16 127.0.0.13
  • Automated dictionary attacks
2017-08-08 11:15:12
141.212.122.176 127.0.0.13
  • Automated dictionary attacks
2017-08-06 09:13:45
71.6.165.200 127.0.0.13
  • Automated dictionary attacks
2017-08-04 21:45:36
71.6.146.186 127.0.0.13
  • Automated dictionary attacks
2017-08-03 05:24:57
198.20.70.114 127.0.0.13
  • Automated dictionary attacks
2017-07-28 03:00:15
198.20.87.98 127.0.0.13
  • Automated dictionary attacks
2017-07-26 03:54:02
66.240.192.138 127.0.0.13
  • Automated dictionary attacks
2017-07-24 10:46:09
127.0.0.14 127.0.0.14 127.0.0.14
  • Open WINGATE proxy
2015-10-12 19:17:16
127.0.0.15 108.61.123.72 127.0.0.15
  • Compromised router / gateway
2017-05-25 13:12:48
91.200.12.175 127.0.0.15
  • Compromised router / gateway
2017-04-07 12:20:54
94.102.56.181 127.0.0.15
  • Compromised router / gateway
2017-03-24 02:52:38
89.248.160.150 127.0.0.15
  • Compromised router / gateway
2017-02-20 16:03:32
80.82.78.170 127.0.0.15
  • Compromised router / gateway
2017-02-17 10:14:57
127.0.0.16 91.197.232.109 127.0.0.16
  • Autorooting worms
2017-08-17 13:19:44
193.201.224.216 127.0.0.16
  • Autorooting worms
2017-08-16 02:02:43
89.248.171.31 127.0.0.16
  • Autorooting worms
2017-08-08 16:10:29
185.165.29.69 127.0.0.16
  • Autorooting worms
2017-08-08 00:55:42
72.2.170.24 127.0.0.16
  • Autorooting worms
2017-08-07 20:54:14
113.195.145.79 127.0.0.16
  • SSH Bruteforce
2017-08-02 00:24:45
91.197.232.107 127.0.0.16
  • Autorooting worms
2017-08-01 00:29:09
58.48.178.200 127.0.0.16
  • Autorooting worms
2017-07-16 13:29:45
50.63.25.22 127.0.0.16
  • SSH Bruteforce
2017-07-15 12:38:13
180.128.21.46 127.0.0.16
  • Autorooting worms
2017-07-14 15:11:15
127.0.0.17 140.86.51.236 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-08-20 04:27:51
92.222.82.230 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-08-19 18:19:41
50.75.202.117 127.0.0.17
  • Open SOCKS proxy
  • Scraped
2017-08-19 09:59:04
12.183.20.36 127.0.0.17
  • Open SOCKS proxy
  • Scraped
2017-08-18 20:09:45
67.79.193.142 127.0.0.17
  • Scraped
  • Open SOCKS proxy
2017-08-18 20:06:35
64.122.173.86 127.0.0.17
  • Scraped
  • Open SOCKS proxy
2017-08-18 20:06:00
212.233.216.133 127.0.0.17
  • Open SOCKS proxy
  • Scraped
2017-08-18 20:02:44
85.214.75.217 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-08-18 16:57:51
52.11.75.170 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2017-08-18 14:37:16
85.204.49.252 127.0.0.17
  • Scraped
2017-08-18 14:07:21
127.0.0.18 217.10.204.126 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-08-18 12:28:30
195.138.72.124 127.0.0.18
  • Open SOCKS proxy
  • DNS/MX type hostname detected on IRC
2017-08-18 10:13:07
195.56.146.128 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-08-17 09:22:59
176.31.22.33 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-08-16 10:02:35
54.72.47.140 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-08-09 04:42:22
87.229.45.137 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-08-03 04:12:35
157.205.219.41 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-07-30 01:17:02
103.240.135.132 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-07-27 05:22:04
93.56.58.57 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-07-21 07:00:45
197.85.186.126 127.0.0.18
  • DNS/MX type hostname detected on IRC
2017-07-18 10:52:00
127.0.0.255 198.100.144.218 127.0.0.255
  • Uncategorized threat class
2017-08-16 17:11:28
127.0.0.255 127.0.0.255
  • Uncategorized threat class
2017-01-02 22:53:49