Transparency snapshot
v6.29.9Active listings
3,593
Exact addresses and active escalated ranges from BIND
Public history
8,101
Sanitised unique-address records
Listed
6,212
Exact and prefix-covered public records
Delisted / expired
SMTP abuse (24h)
2,421
34 IPs • 234 sessions • healthy
1,800
Historical outcomes remain countable
Latest 10 public events
Refreshes automatically every 45 seconds. No pagination, offsets or bulk-download endpoint are provided.
| IP | Status | Code | Scope | Latest activity |
|---|---|---|---|---|
| 13.70.4.78 | LISTED | 127.0.0.8 | exact | Apache security: shell_backdoor_probe |
 66.132.224.237 | LISTED | 127.0.0.8 | prefix · 66.132.224.0/24 | Prefix escalation independently qualified by threatmail; threatmail=12 addresses/15 sessions; code 127.0.0.8; blocked via bl.scott.ovh |
| 147.185.132.84 | LISTED | 127.0.0.8 | prefix · 147.185.132.0/24 | Prefix escalation independently qualified by threatmail; threatmail=53 addresses/71 sessions; code 127.0.0.8; blocked via bl.scott.ovh |
 77.90.185.78 | LISTED | 127.0.0.8 | exact | Repeat offender: 3 unique events/7d, 3/30d |
| 18.217.208.51 | LISTED | 127.0.0.8 | exact | Repeat offender: 3 unique events/7d, 3/30d |
| 45.135.193.159 | LISTED | 127.0.0.8 | exact | Repeat offender: 3 unique events/7d, 3/30d |
| 20.214.191.94 | LISTED | 127.0.0.4 | exact | Apache security: shell_backdoor_probe |
| 195.230.103.248 | LISTED | 127.0.0.4 | exact | Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 |
 195.182.16.23 | LISTED | 127.0.0.8 | exact | Repeat offender: 3 unique events/7d, 3/30d |
| 64.62.197.208 | LISTED | 127.0.0.8 | prefix · 64.62.197.0/24 | Prefix escalation independently qualified by threatmail; threatmail=60 addresses/70 sessions; code 127.0.0.8; blocked via bl.scott.ovh |
Check a specific address
Enter one complete IPv4 or IPv6 address. Results are rate limited and expose only public-safe status, code, scope, reason and time.
What remains transparent
Aggregate listing, delisting and expiry totals remain public. The latest activity remains visible, and any complete IP address can be checked individually. Listing policy, return-code meanings and delisting guidance remain published. Bulk enumeration is deliberately withheld to reduce harvesting and abuse.