Transparency snapshot
v6.29.9Active listings
5,860
Exact addresses and active escalated ranges from BIND
Public history
11,081
Sanitised unique-address records
Listed
9,210
Exact and prefix-covered public records
Delisted / expired
SMTP abuse (24h)
1,800
44 IPs • 188 sessions • healthy
1,724
Historical outcomes remain countable
Latest 10 public events
Refreshes automatically every 45 seconds. No pagination, offsets or bulk-download endpoint are provided.
| IP | Status | Code | Scope | Latest activity |
|---|---|---|---|---|
 192.174.81.46 | LISTED | 127.0.0.2 | exact | Operator-reviewed Roundcube spam evidence |
| 192.174.81.47 | LISTED | 127.0.0.2 | exact | Operator-reviewed Roundcube spam evidence |
| 192.174.81.42 | LISTED | 127.0.0.2 | exact | Operator-reviewed Roundcube spam evidence |
| 91.231.89.81 | LISTED | 127.0.0.4 | exact | Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 150 |
| 209.38.248.17 | LISTED | 127.0.0.4 | exact | Threat Prevention: Attempted Administrator Privilege Gain / ET EXPLOIT GraphQL Introspection Query Attempt |
 193.163.125.50 | LISTED | 127.0.0.8 | prefix · 193.163.125.0/24 | Prefix escalation independently qualified by threatmail; threatmail=79 addresses/120 sessions; code 127.0.0.8; blocked via bl.scott.ovh |
| 35.220.188.134 | LISTED | 127.0.0.4 | exact | Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 53 |
| 20.118.211.157 | LISTED | 127.0.0.4 | exact | Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 24 |
 195.182.16.23 | LISTED | 127.0.0.8 | exact | Repeat offender: 3 unique events/7d, 3/30d |
| 134.33.97.1 | LISTED | 127.0.0.4 | exact | Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 179 |
Check a specific address
Enter one complete IPv4 or IPv6 address. Results are rate limited and expose only public-safe status, code, scope, reason and time.
What remains transparent
Aggregate listing, delisting and expiry totals remain public. The latest activity remains visible, and any complete IP address can be checked individually. Listing policy, return-code meanings and delisting guidance remain published. Bulk enumeration is deliberately withheld to reduce harvesting and abuse.