Blacklist wiki · Retired
abuse.ch Drone
The abuse.ch Drone list specifically identifies IP addresses that are part of botnets (compromised machines being remotely controlled for spam, DDoS, or other malicious activities).
- Zone
- Additional
- Tier
- Author
At a glance
- Zone
- drone.abuse.ch
- Tier
- Additional. Smaller or specialist lists with a narrower reach. Lower impact on its own, but worth clearing; a scan reports a listing here as information.
- What it lists
- IP addresses identified as botnet drones (compromised systems under remote control).
- Impact
- Medium: indicates your IP is part of a botnet, which is a serious security issue.
- How to check
- Nothing to check: the zone no longer answers queries.
- How to delist
- No need: a list that has shut down holds no listings.
- Auto-expiry
- Does not auto-expire. Full remediation required.
How to get delisted
Kept for reference: this list no longer operates.
- 01Check your IP at abuse.ch
- 02Your system is likely compromised and part of a botnet
- 03Perform a full malware scan and system audit
- 04Consider reimaging the affected system if heavily compromised
- 05Contact abuse.ch with evidence that the botnet infection has been removed