{
    "ok": true,
    "source": "scotnet-dnsbl-public-history",
    "generated_at": 1782324485,
    "generated_at_iso": "2026-06-24T18:08:05Z",
    "requested_limit": 10,
    "history": {
        "code": "127.0.0.4",
        "confidence_band": "high",
        "confidence_score": 85,
        "event_count": 7,
        "events": [
            {
                "category": "observed",
                "code": "127.0.0.4",
                "kind": "observed",
                "severity": "high",
                "source": "apache-security",
                "summary": "Apache security: path_traversal; 2 evidence item(s); 1 attack session(s)/7d, 1/30d",
                "time": 1781555705,
                "time_iso": "2026-06-15T20:35:05Z"
            },
            {
                "category": "path_traversal",
                "kind": "attack",
                "method": "POST",
                "severity": "high",
                "source": "apache-security",
                "status": 400,
                "summary": "Path Traversal • POST • HTTP 400",
                "target": "/cgi-bin/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh",
                "time": 1781555588,
                "time_iso": "2026-06-15T20:33:08Z"
            },
            {
                "category": "command_injection_probe",
                "kind": "attack",
                "method": "POST",
                "severity": "high",
                "source": "apache-security",
                "status": 400,
                "summary": "Command-injection probe • POST • HTTP 400",
                "target": "/bin/sh",
                "time": 1781555587,
                "time_iso": "2026-06-15T20:33:07Z"
            },
            {
                "category": "Misc Attack",
                "kind": "attack",
                "severity": "medium",
                "source": "threatmail",
                "summary": "ET COMPROMISED Known Compromised or Hostile Host Traffic group 1",
                "time": 1781475513,
                "time_iso": "2026-06-14T22:18:33Z"
            },
            {
                "category": "observed",
                "code": "127.0.0.4",
                "kind": "observed",
                "severity": "medium",
                "source": "threatmail",
                "summary": "Threat Prevention: Misc Attack / ET COMPROMISED Known Compromised or Hostile Host Traffic group 1",
                "time": 1781472005,
                "time_iso": "2026-06-14T21:20:05Z"
            },
            {
                "category": "Misc Attack",
                "kind": "attack",
                "severity": "medium",
                "source": "threatmail",
                "summary": "ET COMPROMISED Known Compromised or Hostile Host Traffic group 1",
                "time": 1781384398,
                "time_iso": "2026-06-13T20:59:58Z"
            },
            {
                "category": "add",
                "code": "127.0.0.4",
                "kind": "add",
                "severity": "medium",
                "source": "threatmail",
                "summary": "Threat Prevention: Misc Attack / ET COMPROMISED Known Compromised or Hostile Host Traffic group 1",
                "time": 1781381104,
                "time_iso": "2026-06-13T20:05:04Z"
            }
        ],
        "events_returned": 7,
        "expires_at": 1784147588,
        "first_event_at": 1781381104,
        "ip": "109.100.14.222",
        "last_delisted_at": null,
        "last_event_at": 1781555705,
        "last_expired_at": null,
        "listed": true,
        "primary_source": "apache_security",
        "reason": "Threat Prevention: Misc Attack / ET COMPROMISED Known Compromised or Hostile Host Traffic group 1",
        "repeat_offender": false,
        "sources": [
            "apache-security",
            "threatmail"
        ],
        "status": "listed",
        "suppression_until": null
    }
}