{
    "ok": true,
    "source": "scotnet-dnsbl-public-history",
    "generated_at": 1782289685,
    "generated_at_iso": "2026-06-24T08:28:05Z",
    "requested_limit": 10,
    "history": {
        "code": "127.0.0.8",
        "confidence_band": "very-high",
        "confidence_score": 95,
        "event_count": 12,
        "events": [
            {
                "category": "observed",
                "code": "127.0.0.8",
                "confidence_band": "high",
                "confidence_score": 75,
                "kind": "observed",
                "severity": "medium",
                "source": "threatmail",
                "summary": "Repeat offender: 3 unique events/7d, 4/30d; Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 258",
                "time": 1782210604,
                "time_iso": "2026-06-23T10:30:04Z"
            },
            {
                "category": "Misc Attack",
                "kind": "attack",
                "severity": "medium",
                "source": "threatmail",
                "summary": "ET CINS Active Threat Intelligence Poor Reputation IP group 258",
                "time": 1782210456,
                "time_iso": "2026-06-23T10:27:36Z"
            },
            {
                "category": "generic_4xx",
                "kind": "attack",
                "method": "GET",
                "severity": "medium",
                "source": "apache-security",
                "status": 400,
                "summary": "Repeated suspicious 4xx target • GET • HTTP 400",
                "target": "/",
                "time": 1781934025,
                "time_iso": "2026-06-20T05:40:25Z"
            },
            {
                "category": "generic_4xx",
                "kind": "attack",
                "method": "GET",
                "severity": "medium",
                "source": "apache-security",
                "status": 400,
                "summary": "Repeated suspicious 4xx target • GET • HTTP 400",
                "target": "/",
                "time": 1781933100,
                "time_iso": "2026-06-20T05:25:00Z"
            },
            {
                "category": "Misc Attack",
                "kind": "attack",
                "severity": "medium",
                "source": "threatmail",
                "summary": "ET CINS Active Threat Intelligence Poor Reputation IP group 257",
                "time": 1781928051,
                "time_iso": "2026-06-20T04:00:51Z"
            },
            {
                "category": "promoted",
                "code": "127.0.0.8",
                "kind": "promoted",
                "previous_code": "127.0.0.4",
                "severity": "medium",
                "source": "threatmail",
                "summary": "Repeat offender: 3 unique events/7d, 3/30d; Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 257",
                "time": 1781924706,
                "time_iso": "2026-06-20T03:05:06Z"
            },
            {
                "category": "Misc Attack",
                "kind": "attack",
                "severity": "medium",
                "source": "threatmail",
                "summary": "ET CINS Active Threat Intelligence Poor Reputation IP group 257",
                "time": 1781640432,
                "time_iso": "2026-06-16T20:07:12Z"
            },
            {
                "category": "observed",
                "code": "127.0.0.4",
                "kind": "observed",
                "severity": "medium",
                "source": "threatmail",
                "summary": "Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 257",
                "time": 1781637004,
                "time_iso": "2026-06-16T19:10:04Z"
            },
            {
                "category": "generic_4xx",
                "kind": "attack",
                "method": "GET",
                "severity": "medium",
                "source": "apache-security",
                "status": 400,
                "summary": "Repeated suspicious 4xx target • GET • HTTP 400",
                "target": "/",
                "time": 1781365516,
                "time_iso": "2026-06-13T15:45:16Z"
            },
            {
                "category": "generic_4xx",
                "kind": "attack",
                "method": "GET",
                "severity": "medium",
                "source": "apache-security",
                "status": 400,
                "summary": "Repeated suspicious 4xx target • GET • HTTP 400",
                "target": "/",
                "time": 1781364573,
                "time_iso": "2026-06-13T15:29:33Z"
            }
        ],
        "events_returned": 10,
        "expires_at": 1789986456,
        "first_event_at": 1781355907,
        "ip": "187.17.224.139",
        "last_delisted_at": null,
        "last_event_at": 1782210604,
        "last_expired_at": null,
        "listed": true,
        "primary_source": "threatmail",
        "reason": "Repeat offender: 3 unique events/7d, 3/30d; Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 257",
        "repeat_offender": true,
        "sources": [
            "apache-security",
            "threatmail"
        ],
        "status": "listed",
        "suppression_until": null
    }
}