blob: 01f72b4ea833173206cb0de722c4c62ebacded81 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
<dnsbl>
<query id="rbl.efnetrbl.org.">
<response id="127.0.0.1">Open proxy</response>
<response id="127.0.0.2">Trojan spreader</response>
<response id="127.0.0.3">Trojan infected client</response>
<response id="127.0.0.4">TOR exit server</response>
<response id="127.0.0.5">Drones / Flooding</response>
</query>
<query id="dnsbl.dronebl.org.">
<response id="127.0.0.1">Testing data</response>
<response id="127.0.0.2">Sample</response>
<response id="127.0.0.3">IRC Drone</response>
<response id="127.0.0.5">Bottler</response>
<response id="127.0.0.6">Unknown spambot or drone</response>
<response id="127.0.0.7">DDOS drone</response>
<response id="127.0.0.8">SOCKS proxy</response>
<response id="127.0.0.9">HTTP proxy</response>
<response id="127.0.0.10">ProxyChain</response>
<!-- <response id="127.0.0.13">Brute force attackers</response> -->
<response id="127.0.0.14">Open Wingate Proxy</response>
<response id="127.0.0.15">Compromised router / gateway</response>
<!-- <response id="127.0.0.17">Automatically determined botnet IPs (experimental)</response> -->
<response id="127.0.0.255">Unknown</response>
</query>
<query id="dnsbl.sorbs.net.">
<response id="127.0.0.2">HTTP Proxy</response>
<response id="127.0.0.3">SOCKS Proxy</response>
<response id="127.0.0.4">Misc. proxy</response>
</query>
<query id="dnsbl.incredibl.org.">
<response id="127.0.0.2">SOCKS Proxy</response>
<response id="127.0.0.3">IRC Proxy</response>
<response id="127.0.0.4">HTTP Proxy</response>
<response id="127.0.0.5">IRC Drone</response>
<response id="127.0.0.6">TOR</response>
</query>
</dnsbl>
|
