{
    "ok": true,
    "source": "scotnet-dnsbl-public-history",
    "generated_at": 1782324485,
    "generated_at_iso": "2026-06-24T18:08:05Z",
    "requested_limit": 10,
    "history": {
        "code": "127.0.0.4",
        "confidence_band": "high",
        "confidence_score": 85,
        "event_count": 37,
        "events": [
            {
                "category": "observed",
                "code": "127.0.0.4",
                "kind": "observed",
                "severity": "high",
                "source": "apache-security",
                "summary": "Apache security: path_traversal; 7 evidence item(s); 1 attack session(s)/7d, 1/30d",
                "time": 1781567708,
                "time_iso": "2026-06-15T23:55:08Z"
            },
            {
                "category": "generic_4xx",
                "kind": "attack",
                "method": "GET",
                "severity": "medium",
                "source": "apache-security",
                "status": 404,
                "summary": "Repeated suspicious 4xx target • GET • HTTP 404",
                "target": "/___proxy_subdomain_whm/login/",
                "time": 1781567517,
                "time_iso": "2026-06-15T23:51:57Z"
            },
            {
                "category": "generic_4xx",
                "kind": "attack",
                "method": "GET",
                "severity": "medium",
                "source": "apache-security",
                "status": 404,
                "summary": "Repeated suspicious 4xx target • GET • HTTP 404",
                "target": "/___proxy_subdomain_whm/login/",
                "time": 1781567516,
                "time_iso": "2026-06-15T23:51:56Z"
            },
            {
                "category": "path_traversal",
                "kind": "attack",
                "method": "GET",
                "severity": "high",
                "source": "apache-security",
                "status": 302,
                "summary": "Path Traversal • GET • HTTP 302",
                "target": "/proc/self/environ",
                "time": 1781567504,
                "time_iso": "2026-06-15T23:51:44Z"
            },
            {
                "category": "framework_exploit_probe",
                "kind": "attack",
                "method": "GET",
                "severity": "high",
                "source": "apache-security",
                "status": 302,
                "summary": "Framework exploit probe • GET • HTTP 302",
                "target": "/actuator/beans",
                "time": 1781567498,
                "time_iso": "2026-06-15T23:51:38Z"
            },
            {
                "category": "framework_exploit_probe",
                "kind": "attack",
                "method": "GET",
                "severity": "high",
                "source": "apache-security",
                "status": 302,
                "summary": "Framework exploit probe • GET • HTTP 302",
                "target": "/actuator/threaddump",
                "time": 1781567497,
                "time_iso": "2026-06-15T23:51:37Z"
            },
            {
                "category": "framework_exploit_probe",
                "kind": "attack",
                "method": "GET",
                "severity": "high",
                "source": "apache-security",
                "status": 302,
                "summary": "Framework exploit probe • GET • HTTP 302",
                "target": "/actuator/logfile",
                "time": 1781567496,
                "time_iso": "2026-06-15T23:51:36Z"
            },
            {
                "category": "framework_exploit_probe",
                "kind": "attack",
                "method": "GET",
                "severity": "high",
                "source": "apache-security",
                "status": 302,
                "summary": "Framework exploit probe • GET • HTTP 302",
                "target": "/actuator/health",
                "time": 1781567494,
                "time_iso": "2026-06-15T23:51:34Z"
            },
            {
                "category": "framework_exploit_probe",
                "kind": "attack",
                "method": "GET",
                "severity": "high",
                "source": "apache-security",
                "status": 302,
                "summary": "Framework exploit probe • GET • HTTP 302",
                "target": "/_ignition/health-check",
                "time": 1781567490,
                "time_iso": "2026-06-15T23:51:30Z"
            },
            {
                "category": "secret_probe",
                "kind": "attack",
                "method": "GET",
                "severity": "medium",
                "source": "apache-security",
                "status": 302,
                "summary": "Secret/configuration probe • GET • HTTP 302",
                "target": "/.ssh/id_rsa",
                "time": 1781567485,
                "time_iso": "2026-06-15T23:51:25Z"
            }
        ],
        "events_returned": 10,
        "expires_at": 1784159517,
        "first_event_at": 1781567390,
        "ip": "172.182.226.234",
        "last_delisted_at": null,
        "last_event_at": 1781567708,
        "last_expired_at": null,
        "listed": true,
        "primary_source": "apache_security",
        "reason": "Apache security: repeated explicit application probes; 7 evidence item(s); 1 attack session(s)/7d, 1/30d",
        "repeat_offender": false,
        "sources": [
            "apache-security"
        ],
        "status": "listed",
        "suppression_until": null
    }
}
