Transparency

BIND is the source of truth for live listings • meta.json records observation and delisting history

Transparency snapshot

Back to DNSBL
Active listings
2,644
Live from BIND zone (A + AAAA)
Threat activity (7 days)
52
Unique suspicious public IPs • 3,750 matched events • 9,610 requests evaluated
Repeat offenders
120
Threatmail: 71 • Apache security: 49
Lifecycle
Active
Pending review: 0 • Expiring ≤7d: 31 • Expired last run: 1
Delisted records
4
1 in the last 7 days • unique IPs with a recorded delist
Mail feeds
Active
Threatmail: active
User reports: not enabled • last 2026-06-24 19:00 BST
History coverage
70.0%
1,852 of 2,644 live listings have metadata
Last zone update
2026-06-24 18:50 BST
Authoritative BIND zone last modified
Live status, return code and TXT reason are reconciled directly against the BIND zone. An address is marked DELISTED only when a real delist timestamp, counter or audit event exists; otherwise a non-live historical address is OBSERVED. Repeat-offender totals are grouped by the latest sanitised attack source; complete event history is available only through the per-IP JSON feed and delist information. Apache activity cache updated 2026-06-24 19:00 BST.
BIND records: IPv4 A = 2,644 • IPv6 AAAA = 0 • TXT = 2,644 • SOA serial 2026062432.

Listings history

Live BIND entries plus observation and delisting history. Times use UK local GMT/BST.

Clear

Showing 901–1,000 of 2,816 matching records.

IP Status Code Reason Last activity Sources Lists / Delists Details
185.38.148.2 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt apache-security threatmail 16 / 0
147.45.50.108 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
45.156.128.43 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
107.150.98.59 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 145 threatmail 1 / 0
205.210.31.254 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
45.82.76.106 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60 threatmail 1 / 0
64.62.197.69 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
102.129.156.48 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
20.168.120.227 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 20 threatmail 1 / 0
135.119.27.130 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 2 / 0
193.163.125.216 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
40.124.186.155 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 50 threatmail 1 / 0
138.124.242.51 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 178 threatmail 1 / 0
64.62.197.122 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
64.62.197.124 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
165.154.206.223 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 221 threatmail 1 / 0
5.175.169.118 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 3 threatmail 1 / 0
147.185.132.54 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
172.182.226.234 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 2 / 0
69.5.20.93 LISTED 127.0.0.8 Apache security: framework_exploit_probe apache-security 8 / 0
74.249.178.151 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 115 threatmail 2 / 0
104.43.135.1 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 2 / 0
191.232.199.0 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 6 / 0
20.64.105.53 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 26 threatmail 1 / 0
147.185.132.159 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
139.162.116.22 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 181 threatmail 5 / 0
20.63.33.52 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 2 / 0
194.62.54.184 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 4 / 0
20.220.147.44 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 2 / 0
69.5.169.12 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
205.210.31.60 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
176.65.139.232 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
166.62.81.175 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
34.125.3.30 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
207.56.229.19 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
198.235.24.10 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
4.154.236.9 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
34.150.64.215 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
109.100.14.222 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET COMPROMISED Known Compromised or Hostile Host Traffic group 1 apache-security threatmail 3 / 0
198.235.24.208 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
109.105.210.88 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
74.235.104.219 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 115 threatmail 1 / 0
198.235.24.107 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
136.109.40.128 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
5.189.174.253 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
74.249.202.141 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
172.96.161.212 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt threatmail 2 / 0
176.65.139.235 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 apache-security threatmail 3 / 0
20.65.193.137 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 27 threatmail 1 / 0
147.185.132.93 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 198 threatmail 1 / 0
20.220.149.193 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
20.127.245.101 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
129.213.142.121 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
20.9.14.5 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 3 / 0
4.228.99.48 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
198.235.24.6 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.65.194.76 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
20.226.106.38 LISTED 127.0.0.4 Apache security: distinct 4xx path scan apache-security 3 / 0
195.140.214.19 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 4 / 0
82.132.217.27 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 5 / 0
154.127.68.71 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 202 apache-security threatmail 2 / 0
193.163.125.180 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 5 / 0
45.205.1.69 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 5 / 0
152.32.225.11 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 201 threatmail 1 / 0
52.173.127.183 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
104.43.242.4 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
35.169.206.177 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 38 threatmail 14 / 0
80.66.72.211 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 122 threatmail 3 / 0
167.89.57.7 LISTED 127.0.0.2 From: Halifax <Business617870@mindbodyonline.com> Spam 1 / 0
66.132.224.18 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 108 threatmail 1 / 0
40.124.173.16 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60 threatmail 1 / 0
38.102.41.32 LISTED 127.0.0.2 Admin Spam Webmail 2 / 0
199.67.87.156 LISTED 127.0.0.2 Admin Webmail 1 / 0
54.240.27.24 LISTED 127.0.0.2 Admin Webmail 1 / 0
34.170.46.200 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
71.6.232.20 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 117 threatmail 1 / 0
208.84.100.50 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
122.96.31.63 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
8.210.123.17 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 8 threatmail 2 / 0
20.226.121.186 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
3.108.60.145 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
193.163.125.30 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
62.210.142.171 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
100.29.192.62 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 135 threatmail 1 / 0
66.132.172.47 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
77.105.168.38 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
82.132.217.219 LISTED 127.0.0.8 Apache security: device_api_probe apache-security 12 / 0
106.13.7.239 LISTED 127.0.0.8 Apache security: repeated explicit application probes apache-security 2 / 0
65.49.1.62 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 107 threatmail 1 / 0
111.228.1.163 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
172.94.9.73 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
147.185.133.208 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 194 threatmail 1 / 0
20.65.194.113 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 37 threatmail 1 / 0
79.124.40.174 LISTED 127.0.0.8 Apache security: framework_exploit_probe apache-security 4 / 0
20.25.151.121 LISTED 127.0.0.4 Apache security: path_traversal apache-security 1 / 0
193.228.139.227 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 271 threatmail 2 / 0
66.132.186.245 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
193.163.125.158 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 4 / 0
91.230.168.130 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
91.92.241.196 LISTED 127.0.0.4 Apache security: secret_probe apache-security 1 / 0

Lists / Delists shows list_count and delist_count. OBSERVED means the IP exists in history but is not currently in BIND and has no recorded delist event. Trusted addresses in /etc/scotnet/dnsbl-public-hide.txt are omitted from this public history table.