Transparency

BIND is the source of truth for live listings • meta.json records observation and delisting history

Transparency snapshot

Back to DNSBL
Active listings
2,626
Live from BIND zone (A + AAAA)
Threat activity (7 days)
26
Unique suspicious public IPs • 1,199 matched events • 2,641 requests evaluated
Repeat offenders
118
Threatmail: 69 • Apache security: 49
Lifecycle
Active
Pending review: 0 • Expiring ≤7d: 31 • Expired last run: 0
Delisted records
4
1 in the last 7 days • unique IPs with a recorded delist
Mail feeds
Active
Threatmail: active
User reports: not enabled • last 2026-06-24 07:55 BST
History coverage
69.8%
1,833 of 2,626 live listings have metadata
Last zone update
2026-06-24 05:55 BST
Authoritative BIND zone last modified
Live status, return code and TXT reason are reconciled directly against the BIND zone. An address is marked DELISTED only when a real delist timestamp, counter or audit event exists; otherwise a non-live historical address is OBSERVED. Repeat-offender totals are grouped by the latest sanitised attack source; complete event history is available only through the per-IP JSON feed and delist information. Apache activity cache updated 2026-06-24 07:55 BST.
BIND records: IPv4 A = 2,626 • IPv6 AAAA = 0 • TXT = 2,626 • SOA serial 2026062410.

Listings history

Live BIND entries plus observation and delisting history. Times use UK local GMT/BST.

Clear

Showing 1–100 of 2,797 matching records.

IP Status Code Reason Last activity Sources Lists / Delists Details
165.154.36.218 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 226 threatmail 4 / 0
141.98.83.48 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 56 / 0
18.119.209.50 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 16 / 0
91.230.168.193 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 133 threatmail 1 / 0
40.124.175.131 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 54 threatmail 1 / 0
18.217.208.51 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 13 / 0
31.59.160.12 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 5/30d threatmail 32 / 0
151.242.30.224 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 32 / 0
66.240.236.116 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 112 threatmail 5 / 0
144.202.92.17 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 3 / 0
185.180.141.44 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 253 threatmail 1 / 0
3.130.168.2 LISTED 127.0.0.4 Threat Prevention: Attempted Information Leak / ET SCAN MS Terminal Server Traffic on Non-standard Port threatmail 2 / 0
194.165.16.11 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 3 / 0
104.243.35.45 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 11 / 0
20.29.23.198 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 27 threatmail 1 / 0
138.197.97.40 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 183 threatmail 1 / 0
172.105.197.151 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 10 / 0
185.226.197.35 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 256 threatmail 1 / 0
165.154.173.211 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 224 threatmail 1 / 0
3.143.162.210 LISTED 127.0.0.4 Threat Prevention: Attempted Information Leak / ET SCAN MS Terminal Server Traffic on Non-standard Port threatmail 1 / 0
3.131.220.121 LISTED 127.0.0.4 Threat Prevention: Attempted Information Leak / ET SCAN MS Terminal Server Traffic on Non-standard Port threatmail 1 / 0
20.83.27.140 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 30 threatmail 2 / 0
91.230.168.125 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 129 threatmail 1 / 0
195.184.76.25 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 277 threatmail 3 / 0
83.168.106.26 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 3 / 0
18.189.74.1 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 16 / 0
71.6.232.28 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 128 threatmail 2 / 0
45.156.128.130 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 59 threatmail 1 / 0
151.243.11.37 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 34 / 0
34.197.70.90 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 13 / 0
66.132.172.191 EXPIRED — Automatic expiry: no fresh qualifying evidence within the retention window automatic-expiry 7 / 0
18.221.179.104 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 16 / 0
52.180.137.14 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 96 threatmail 1 / 0
20.55.24.39 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 28 threatmail 1 / 0
198.235.24.56 EXPIRED — Automatic expiry: no fresh qualifying evidence within the retention window automatic-expiry 2 / 0
3.83.245.221 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 11 / 0
187.17.224.139 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 4 / 0
20.65.194.160 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 32 threatmail 1 / 0
151.243.11.245 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 18 / 0
20.65.194.117 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 32 threatmail 1 / 0
20.65.195.38 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 29 threatmail 2 / 0
20.169.105.48 EXPIRED — Automatic expiry: no fresh qualifying evidence within the retention window automatic-expiry 2 / 0
165.227.16.142 EXPIRED — Automatic expiry: no fresh qualifying evidence within the retention window automatic-expiry 1 / 0
52.73.169.169 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 100 threatmail 2 / 0
14.137.237.192 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 3 / 0
40.124.186.157 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 55 threatmail 1 / 0
20.80.83.86 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 34 threatmail 1 / 0
185.242.226.18 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 258 threatmail 2 / 0
194.164.107.4 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 267 threatmail 1 / 0
71.6.232.30 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 119 threatmail 4 / 0
13.89.124.223 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 15 threatmail 1 / 0
100.50.17.159 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 16 / 0
167.94.145.23 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
194.164.107.5 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 14 / 0
40.76.124.118 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 55 threatmail 1 / 0
20.163.61.13 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 23 threatmail 1 / 0
65.49.20.75 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 106 threatmail 1 / 0
172.179.142.153 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt threatmail 1 / 0
20.14.72.151 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 20 threatmail 1 / 0
195.230.103.248 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 275 threatmail 2 / 0
20.168.6.14 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 24 threatmail 1 / 0
178.105.200.202 LISTED 127.0.0.4 Apache security: path_traversal apache-security threatmail 3 / 0
172.202.113.3 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 237 threatmail 1 / 0
45.205.1.70 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 15 / 0
71.6.232.23 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 128 threatmail 2 / 0
205.210.31.36 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
45.205.1.80 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 47 / 0
45.205.1.247 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 20 / 0
45.194.67.146 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 6 / 0
193.163.125.15 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
147.185.132.246 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 196 threatmail 3 / 0
20.14.93.239 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 21 threatmail 1 / 0
20.98.166.120 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 38 threatmail 1 / 0
100.28.153.226 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 140 threatmail 10 / 0
103.118.28.17 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 143 threatmail 6 / 0
65.49.20.80 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 106 threatmail 1 / 0
176.65.139.66 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 75 / 0
20.64.106.18 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 30 threatmail 1 / 0
45.205.1.240 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 24 / 0
176.65.139.224 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 38 / 0
118.193.44.169 EXPIRED — Automatic expiry: no fresh qualifying evidence within the retention window automatic-expiry 25 / 0
176.65.139.125 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
138.68.148.91 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 184 threatmail 1 / 0
66.132.172.141 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
103.234.62.2 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 144 threatmail 1 / 0
150.107.38.194 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 201 threatmail 1 / 0
109.105.210.65 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 149 threatmail 1 / 0
66.132.172.101 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
66.132.172.16 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 53 / 0
49.12.132.25 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 93 threatmail 1 / 0
176.32.193.16 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 246 threatmail 6 / 0
188.240.59.43 EXPIRED — Automatic expiry: no fresh qualifying evidence within the retention window automatic-expiry 1 / 0
152.32.128.85 EXPIRED — Automatic expiry: no fresh qualifying evidence within the retention window automatic-expiry 2 / 0
65.49.1.152 EXPIRED — Automatic expiry: no fresh qualifying evidence within the retention window automatic-expiry 6 / 0
45.205.1.242 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 15 / 0
45.205.1.246 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 15 / 0
69.5.169.229 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
205.210.31.68 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
66.132.186.168 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
66.132.172.103 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0

Lists / Delists shows list_count and delist_count. OBSERVED means the IP exists in history but is not currently in BIND and has no recorded delist event. Trusted addresses in /etc/scotnet/dnsbl-public-hide.txt are omitted from this public history table.