DroneBL

DroneBL is a community-maintained blacklist project that tracks compromised hosts, open proxies, and botnet nodes. Unlike spam-source blacklists, DroneBL focuses on network security threats.

If your IP is listed on DroneBL, it usually means your server or network device has a security problem — it may have been compromised by malware or is running a misconfigured proxy service.

DroneBL discovers problematic IPs through scanning and community reports. They use different return codes for different threat types: type 2 for spam samples, type 3 for open proxies, type 5 for botnet nodes, and type 13 for compromised hosts. This lets users choose which threat types to block.

After fixing the security issue, visit dronebl.org/lookup to look up your IP — the page includes a removal request form. Submissions are reviewed by volunteers, typically within a few hours to a day. Requesting removal without actually fixing the problem will result in rapid re-listing.