DroneBL DNSBL
DroneBL is a real-time blocklist or blacklist that identifies IPs tied to automated abuse like botnets, open proxies, and IRC drones.
Updated on 17 Jun 2026: We updated this guide with clearer DroneBL lookup behavior, listing types, delisting steps, and email impact guidance.
Summarize with
Check if you are listed on DroneBL DNSBL
And 143 other blocklists.
Spamhaus
0Spam
Cisco
NoSolicitado
URIBL
abuse.ro
ALPHANET
Anonmails
Ascams
BLOCKEDSERVERS
Calivent Networks
EFnet
JustSpam
Kempt.net
NordSpam
RV-SOFT Technology
Scientific Spam
Spamikaze
SpamRATS
SPFBL
Suomispam
System 5 Hosting
Team Cymru
Validity
www.blocklist.de Fail2Ban-Reporting Service
ZapBL
2stepback.dk
Fayntic Services
ORB UK
technoirc.org
TechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftWhat is DroneBL DNSBL?
The DroneBL DNSBL is a real-time DNS-based IP address blocklist that tracks devices involved in automated malicious activity. It can be used as an email blacklist, but its primary focus is broader: protecting real-time and near-real-time services such as IRC networks, gaming servers, forums, and other community platforms from abuse. DroneBL maintains a database of abusable or compromised machines, which helps services reduce phishing attacks, spam, botnet traffic, brute-force attempts, open proxy abuse, and other automated network abuse. This blacklist (or blocklist) is designed to identify IPs associated with malware, viruses, open proxies, compromised routers, rooted systems, and other high-risk hosts.
DroneBL provides public access to its data through its DNSBL zone: dnsbl.dronebl.org. The service is free for both commercial and non-commercial use, and commercial users are encouraged to contribute back through mirrors, code, reports, or other operational support. A manual lookup involves reversing the IP address, appending the DNSBL zone name (e.g., 23.42.168.192.dnsbl.dronebl.org for the IP 192.168.42.23), and checking for an A record. If a record is returned, the IP is listed on the blacklist. NXDOMAIN means DroneBL does not list that IP.
The DroneBL DNSBL can be integrated into various platforms to block connections from listed IPs. Common integrations include:
- IRC servers: IRC daemons and proxy monitors can use DroneBL to deny connections from known abusive hosts.
- Mail servers: Mail transfer agents can query dnsbl.dronebl.org during SMTP handling and reject or score messages from listed clients.
- Firewalls and access controls: Network controls can query DroneBL before allowing inbound connections, especially for abuse-prone services.
- IDS and routing equipment: Network security systems can use DroneBL data as one signal for blocking abusable IPs.
Who runs DroneBL DNSBL?
The DroneBL software was originally written and maintained by William Pitcock and Steve Church, with contributions from others in the community. The DroneBL software is open source, available under a permissive BSD-style license. The DroneBL service and its DNSBL are maintained by the DroneBL Team, a volunteer and contributor group.
How DroneBL listing types work
When a DNSBL query returns an address, the last octet identifies the reason category. DroneBL publishes reply types for IRC drones, spambots, DDoS drones, SOCKS or HTTP proxies, open DNS resolvers, brute-force attackers, compromised routers or gateways, autorooting worms, and automatically detected botnet IPs. Treat the code as context, not proof that the same issue still exists on the device today.
Some active entries are rechecked and cleared by the service that listed them, but not every IP is rechecked automatically. If the listing affects you, use the delisting workflow rather than waiting for expiration.
How do I get removed and delisted from DroneBL DNSBL?
Before requesting removal from this blocklist, resolve the underlying issue. A listing on DroneBL DNSBL usually means the IP address was previously used for automated abuse. That is often not your fault, because internet providers often reassign IP addresses. If the listing is recent or you have a permanent IP address, check for compromised devices, update routers and modems, disable WAN-facing administration where it is not needed, change weak passwords, and run malware scans on computers using the connection.
To request delisting, you must be the primary user of the IP address. If you are using a VPN, public Wi-Fi, shared server, or workplace network, contact the service administrator instead. Start on the DroneBL lookup page. It is best to do this from the affected device, as the page will show the current IP in the search field. If you are on a different device, enter the blocked IP address manually. Follow the instructions shown for that listing; DroneBL says staff cannot remove automatically added entries if those instructions are not followed. After submitting the removal request, the listing is reviewed by the party responsible for the listing or by DroneBL's volunteer process. If the listing is not removed within about a week, contact the team on IRC for an update.
What's the impact of being listed on DroneBL DNSBL?
The impact of being listed on DroneBL DNSBL is generally low for mainstream email deliverability because it is not one of the large mail-provider blocklists. Its impact can be higher for non-email services. IRC networks, gaming servers, forums, and community platforms use DroneBL to block proxies, botnets, and other automated abuse. If your IP address sends email, you can see SMTP rejections from receivers that query dnsbl.dronebl.org, especially where the listing type points to malware, open proxy behavior, or a compromised router. If mail is affected, Suped's product can help connect blocklist (blacklist) events with SPF, DKIM, and DMARC results so you can separate IP reputation issues from authentication failures.
