RBL Details to DroneBL

Id 20
R.I.P. 0
Private 0
Name DroneBL
DNS Zone dnsbl.dronebl.org
IPv4 1
IPv6 1
Domain/URI 0
Type b
URL http://www.dronebl.org/
Has only TXT records 0
Comment
Last failed timestamp (UTC) 2018-07-21 01:21:24
Last nameserver check (UTC) 2018-07-20 02:32:56
Nameservers
  • rbldns3.ns.dronebl.org
  • rbldns6.ns.dronebl.org

Testentries

See also RFC 5782
Testentry Type (presence) Data of the last response Last verdict Last success timestamp (UTC) Last failed timestamp (UTC)
127.0.0.1 must_not success 2018-07-20 02:32:58 2012-09-06 02:38:28
127.0.0.2 must
A:
  • 127.0.0.1 (TTL=300)
TXT:
  • Testing class.
success 2018-07-20 02:32:56 2014-05-02 02:37:04
127.0.0.3 must
A:
  • 127.0.0.3 (TTL=300)
TXT:
  • IRC spam drone (litmus/sdbot/fyle)
success 2018-07-20 02:32:57 2014-07-31 02:35:11
127.0.0.5 must
A:
  • 127.0.0.5 (TTL=300)
TXT:
  • Bottler (experimental)
success 2018-07-20 02:32:57 2014-08-01 02:35:13
127.0.0.6 must
A:
  • 127.0.0.6 (TTL=300)
TXT:
  • Unknown worm or spambot
success 2018-07-20 02:32:57 2014-07-31 02:35:11
127.0.0.7 must
A:
  • 127.0.0.7 (TTL=300)
TXT:
  • DDoS drone
success 2018-07-20 02:32:57 2014-07-31 02:35:11
127.0.0.8 must
A:
  • 127.0.0.8 (TTL=300)
TXT:
  • Open SOCKS proxy
success 2018-07-20 02:32:57 2014-07-31 02:35:11
127.0.0.9 must
A:
  • 127.0.0.9 (TTL=300)
TXT:
  • Open HTTP proxy
success 2018-07-20 02:32:58 2014-07-31 02:35:11
127.0.0.10 must
A:
  • 127.0.0.10 (TTL=300)
TXT:
  • Proxychain
success 2018-07-20 02:32:57 2014-08-01 02:35:13
127.0.0.11 must
A:
  • 127.0.0.11 (TTL=300)
TXT:
  • Web Page Proxy
success 2018-07-20 02:32:57
127.0.0.13 must
A:
  • 127.0.0.13 (TTL=300)
TXT:
  • Automated dictionary attacks
success 2018-07-20 02:32:57 2014-08-01 02:35:13
127.0.0.14 must
A:
  • 127.0.0.14 (TTL=300)
TXT:
  • Open WINGATE proxy
success 2018-07-20 02:32:57 2014-08-01 02:35:13
127.0.0.15 must
A:
  • 127.0.0.15 (TTL=300)
TXT:
  • Compromised router / gateway
success 2018-07-20 02:32:57 2014-07-31 02:35:11
127.0.0.16 must
A:
  • 127.0.0.16 (TTL=300)
TXT:
  • Autorooting worms
success 2018-07-20 02:32:57
127.0.0.17 must
A:
  • 127.0.0.17 (TTL=300)
TXT:
  • Automatically determined botnet IPs (experimental)
success 2018-07-20 02:32:57
127.0.0.18 must
A:
  • 127.0.0.18 (TTL=300)
TXT:
  • Possibly compromised DNS/MX type hostname detected on IRC
success 2018-07-20 02:32:57
127.0.0.255 must
A:
  • 127.0.0.255 (TTL=300)
TXT:
  • Uncategorized threat class
success 2018-07-20 02:32:57 2014-07-31 02:35:11
::ffff:7f00:1 must_not success 2018-07-20 02:32:58
::ffff:7f00:2 must
A:
  • 127.0.0.1 (TTL=300)
TXT:
  • Testing class.
success 2018-07-20 02:32:56

Last listed entries found

Masked RC Listed entry Response return code Response TXT record Timestamp (UTC)
127.0.0.1 127.0.0.2 127.0.0.1
  • Testing class.
2018-07-16 09:53:38
::ffff:7f00:2 127.0.0.1
  • Testing class.
2018-02-24 10:39:28
127.0.0.3 200.229.146.162 127.0.0.3
  • Open HTTP proxy
  • IRC spam drone (litmus/sdbot/fyle)
2018-07-20 16:08:02
59.63.206.215 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-07-20 12:59:03
178.212.24.70 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-07-20 12:47:44
185.100.87.245 127.0.0.3
  • DDoS drone
  • IRC spam drone (litmus/sdbot/fyle)
2018-07-20 08:19:38
185.100.87.247 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-07-20 06:24:22
94.182.37.98 127.0.0.3
  • Unknown worm or spambot
  • IRC spam drone (litmus/sdbot/fyle)
2018-07-19 20:20:03
45.125.117.230 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-07-19 10:47:07
220.225.7.21 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-07-19 06:01:11
131.161.42.6 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-07-18 17:17:30
185.253.97.187 127.0.0.3
  • IRC spam drone (litmus/sdbot/fyle)
2018-07-18 08:57:50
127.0.0.5 127.0.0.5 127.0.0.5
  • Bottler (experimental)
2018-06-19 13:33:12
127.0.0.6 145.249.105.25 127.0.0.6
  • Unknown worm or spambot
2018-07-20 16:52:14
94.182.37.98 127.0.0.6
  • Unknown worm or spambot
  • IRC spam drone (litmus/sdbot/fyle)
2018-07-19 20:20:03
89.163.129.46 127.0.0.6
  • Unknown worm or spambot
2018-07-13 10:36:58
104.129.20.127 127.0.0.6
  • Abusing everyone.net
2018-07-11 10:35:38
104.129.20.0 127.0.0.6
  • Abusing everyone.net
2018-07-11 07:35:57
104.129.20.24 127.0.0.6
  • Abusing everyone.net
2018-07-10 19:50:46
104.129.20.154 127.0.0.6
  • Abusing everyone.net
2018-07-10 19:50:11
104.129.20.245 127.0.0.6
  • Abusing everyone.net
2018-07-10 19:49:39
162.253.152.170 127.0.0.6
  • localvisible spam source
2018-07-10 11:08:10
162.253.152.176 127.0.0.6
  • localvisible spam source
2018-07-10 11:07:56
127.0.0.7 185.100.87.245 127.0.0.7
  • DDoS drone
  • IRC spam drone (litmus/sdbot/fyle)
2018-07-20 08:19:38
1.52.230.52 127.0.0.7
  • DDoS drone
2018-07-19 12:49:49
92.115.3.157 127.0.0.7
  • DDoS drone
2018-07-19 08:24:28
86.35.135.95 127.0.0.7
  • DDoS drone
2018-07-18 13:30:15
89.120.224.96 127.0.0.7
  • DDoS drone
2018-07-17 06:38:59
223.85.202.109 127.0.0.7
  • DDoS drone
2018-07-10 14:52:18
223.85.202.108 127.0.0.7
  • DDoS drone
2018-07-10 14:14:30
185.100.87.249 127.0.0.7
  • IRC spam drone (litmus/sdbot/fyle)
  • DDoS drone
2018-07-10 02:30:01
190.13.138.114 127.0.0.7
  • DDoS drone
2018-07-09 20:34:24
58.186.224.151 127.0.0.7
  • DDoS drone
2018-07-06 01:53:20
127.0.0.8 89.248.172.234 127.0.0.8
  • Open SOCKS proxy
2018-07-20 16:11:55
92.222.196.249 127.0.0.8
  • Open SOCKS proxy
2018-07-19 19:21:19
103.38.161.44 127.0.0.8
  • Open SOCKS proxy
2018-07-19 01:41:24
181.112.61.162 127.0.0.8
  • Open SOCKS proxy
  • Open HTTP proxy
2018-07-18 19:13:58
95.110.208.125 127.0.0.8
  • Open SOCKS proxy
2018-07-18 12:52:06
5.35.248.86 127.0.0.8
  • Open SOCKS proxy
2018-07-18 07:23:36
95.110.224.30 127.0.0.8
  • Open SOCKS proxy
2018-07-17 10:38:11
95.110.194.245 127.0.0.8
  • IRC spam drone (litmus/sdbot/fyle)
  • Open SOCKS proxy
2018-07-17 05:24:10
198.46.197.241 127.0.0.8
  • Open SOCKS proxy
2018-07-15 07:27:08
138.197.202.197 127.0.0.8
  • Open SOCKS proxy
2018-07-14 22:40:15
127.0.0.9 103.15.60.21 127.0.0.9
  • Open HTTP proxy
2018-07-20 19:41:41
200.229.146.162 127.0.0.9
  • Open HTTP proxy
  • IRC spam drone (litmus/sdbot/fyle)
2018-07-20 16:08:02
213.60.151.29 127.0.0.9
  • Open HTTP proxy
2018-07-20 09:17:56
84.243.195.194 127.0.0.9
  • Open HTTP proxy
2018-07-19 13:14:20
201.148.126.14 127.0.0.9
  • Open HTTP proxy
2018-07-19 04:35:20
181.143.129.178 127.0.0.9
  • Open HTTP proxy
2018-07-18 21:28:59
181.113.30.202 127.0.0.9
  • Open HTTP proxy
2018-07-18 21:14:07
181.112.61.162 127.0.0.9
  • Open SOCKS proxy
  • Open HTTP proxy
2018-07-18 19:13:58
189.204.220.161 127.0.0.9
  • Open HTTP proxy
2018-07-18 17:13:09
212.129.47.10 127.0.0.9
  • Proxychain
  • Open HTTP proxy
2018-07-18 15:40:20
127.0.0.10 212.129.47.10 127.0.0.10
  • Proxychain
  • Open HTTP proxy
2018-07-18 15:40:20
103.53.0.178 127.0.0.10
  • Open SOCKS proxy
  • Proxychain
2018-07-12 07:23:14
127.0.0.10 127.0.0.10
  • Proxychain
2018-06-08 16:35:30
106.75.140.145 127.0.0.10
  • Proxychain
2018-05-31 12:53:10
94.177.237.167 127.0.0.10
  • Proxychain
  • Open HTTP proxy
2018-05-29 00:06:41
94.177.237.212 127.0.0.10
  • Open HTTP proxy
  • Proxychain
2018-05-29 00:03:09
47.90.102.66 127.0.0.10
  • Proxychain
2018-05-12 07:02:18
213.6.147.138 127.0.0.10
  • Open SOCKS proxy
  • Proxychain
2018-04-27 19:24:38
138.201.33.97 127.0.0.10
  • Proxychain
2018-02-12 15:17:43
82.200.205.49 127.0.0.10
  • Proxychain
  • Open HTTP proxy
2018-02-10 19:55:01
127.0.0.11 85.17.24.66 127.0.0.11
  • Web Page Proxy
2018-03-09 06:01:31
127.0.0.11 127.0.0.11
  • Web Page Proxy
2017-09-19 16:52:12
37.58.58.206 127.0.0.11
  • Web Page Proxy
2017-01-18 14:59:56
46.101.74.197 127.0.0.11
  • hola vpn
2016-09-05 12:28:30
104.131.89.84 127.0.0.11
  • hola vpn
2016-08-19 20:09:29
107.170.136.239 127.0.0.11
  • hola vpn
2016-04-08 12:39:32
127.0.0.12 31.45.246.170 127.0.0.12
  • Open DNS Resolver
2018-05-19 05:22:33
190.128.238.34 127.0.0.12
  • Open DNS Resolver
2018-05-18 14:32:33
203.186.8.146 127.0.0.12
  • Open DNS Resolver
2018-05-18 09:52:13
91.200.116.21 127.0.0.12
  • Open DNS Resolver
2018-05-18 06:47:58
5.158.82.254 127.0.0.12
  • Open DNS Resolver
2018-05-18 06:47:27
217.144.21.30 127.0.0.12
  • Open DNS Resolver
2018-05-18 05:59:46
8.8.8.8 127.0.0.12
  • Open DNS Resolver
2018-05-17 13:09:27
190.85.112.139 127.0.0.12
  • Open DNS Resolver
2018-05-11 19:23:36
184.70.171.154 127.0.0.12
  • Open DNS Resolver
2018-05-11 18:59:03
208.67.220.220 127.0.0.12
  • Open DNS Resolver
2018-05-07 12:14:16
127.0.0.13 181.214.206.189 127.0.0.13
  • Automated dictionary attacks
2018-07-20 13:24:03
181.214.206.148 127.0.0.13
  • Automated dictionary attacks
2018-07-20 06:12:14
181.214.206.133 127.0.0.13
  • Automated dictionary attacks
2018-07-18 09:45:51
181.214.206.144 127.0.0.13
  • Automated dictionary attacks
2018-07-17 04:16:13
37.49.231.64 127.0.0.13
  • Automated dictionary attacks
2018-07-17 04:10:16
61.177.172.107 127.0.0.13
  • Automated dictionary attacks
2018-07-13 00:48:52
103.79.141.185 127.0.0.13
  • Automated dictionary attacks
2018-07-09 09:56:48
202.101.6.82 127.0.0.13
  • Automated dictionary attacks
2018-07-05 03:33:09
181.214.206.101 127.0.0.13
  • Automated dictionary attacks
2018-07-05 03:31:58
80.82.77.17 127.0.0.13
  • Automated dictionary attacks
2018-07-02 13:04:57
127.0.0.14 127.0.0.14 127.0.0.14
  • Open WINGATE proxy
2015-10-12 19:17:16
127.0.0.15 77.247.181.165 127.0.0.15
  • Compromised router / gateway
2018-07-19 03:57:31
200.24.212.196 127.0.0.15
  • Compromised router / gateway
  • Automatically determined botnet IPs (experimental)
2018-07-17 20:01:31
166.62.102.29 127.0.0.15
  • Compromised router / gateway
2018-07-17 19:56:47
73.158.127.66 127.0.0.15
  • Compromised router / gateway
2018-07-08 12:21:44
217.116.195.33 127.0.0.15
  • Compromised router / gateway
  • IRC spam drone (litmus/sdbot/fyle)
2018-07-02 15:10:22
124.117.241.152 127.0.0.15
  • Compromised router / gateway
2018-06-29 19:50:23
173.164.33.177 127.0.0.15
  • Compromised router / gateway
  • IRC spam drone (litmus/sdbot/fyle)
2018-06-10 19:16:01
198.46.141.101 127.0.0.15
  • Compromised router / gateway
  • IRC spam drone (litmus/sdbot/fyle)
2018-06-10 19:13:57
62.220.58.154 127.0.0.15
  • Compromised router / gateway
  • IRC spam drone (litmus/sdbot/fyle)
2018-06-09 21:21:57
184.176.146.75 127.0.0.15
  • IRC spam drone (litmus/sdbot/fyle)
  • Compromised router / gateway
2018-06-08 23:12:55
127.0.0.16 93.174.93.46 127.0.0.16
  • Autorooting worms
2018-05-10 14:55:53
91.197.232.107 127.0.0.16
  • Autorooting worms
2018-05-08 08:46:19
115.85.192.40 127.0.0.16
  • Autorooting worms
2018-03-26 20:22:22
89.248.171.31 127.0.0.16
  • Autorooting worms
2018-03-26 10:07:03
220.225.7.31 127.0.0.16
  • SSH2 Bruteforce
  • Compromised router / gateway
2018-03-21 11:59:04
60.174.195.41 127.0.0.16
  • Compromised router / gateway
  • Autorooting worms
2018-02-26 05:05:45
222.186.58.131 127.0.0.16
  • SSH Bruteforce
2017-12-13 01:07:55
89.197.125.35 127.0.0.16
  • Autorooting worms
2017-12-06 04:33:14
89.248.171.234 127.0.0.16
  • Autorooting worms
2017-12-04 05:39:02
80.82.78.92 127.0.0.16
  • Autorooting worms
2017-12-04 03:01:08
127.0.0.17 200.24.212.196 127.0.0.17
  • Compromised router / gateway
  • Automatically determined botnet IPs (experimental)
2018-07-17 20:01:31
212.237.18.249 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2018-07-03 08:23:20
207.182.140.2 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2018-06-01 10:26:48
207.182.140.34 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2018-06-01 10:26:36
181.65.209.233 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2018-05-29 17:43:35
116.12.48.104 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2018-05-24 19:58:16
190.7.129.82 127.0.0.17
  • Scraped
2018-05-21 16:08:48
221.226.11.229 127.0.0.17
  • Open SOCKS proxy
  • Scraped
2018-05-21 01:33:06
213.155.227.246 127.0.0.17
  • Scraped
2018-05-18 06:49:49
140.143.241.113 127.0.0.17
  • Automatically determined botnet IPs (experimental)
2018-05-18 04:25:36
127.0.0.18 213.60.23.233 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-07-18 10:54:40
77.243.15.38 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-07-10 03:47:06
88.151.100.114 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-07-05 09:07:11
89.184.1.39 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-06-14 08:10:03
201.48.118.185 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-06-01 21:47:07
81.180.92.50 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-05-22 10:35:45
87.229.45.137 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-05-15 14:18:10
148.240.238.90 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-05-11 15:08:32
217.10.204.126 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-05-10 13:52:03
93.108.244.64 127.0.0.18
  • Possibly compromised DNS/MX type hostname detected on IRC
2018-05-04 18:11:41
127.0.0.255 198.100.144.218 127.0.0.255
  • Uncategorized threat class
2018-03-01 14:07:38
127.0.0.255 127.0.0.255
  • Uncategorized threat class
2017-01-02 22:53:49