Transparency

BIND is the source of truth for live listings • meta.json records observation and delisting history

Transparency snapshot

Back to DNSBL
Active listings
2,644
Live from BIND zone (A + AAAA)
Threat activity (7 days)
57
Unique suspicious public IPs • 4,054 matched events • 10,352 requests evaluated
Repeat offenders
120
Threatmail: 71 • Apache security: 49
Lifecycle
Active
Pending review: 0 • Expiring ≤7d: 31 • Expired last run: 0
Delisted records
4
1 in the last 7 days • unique IPs with a recorded delist
Mail feeds
Active
Threatmail: active
User reports: not enabled • last 2026-06-24 20:00 BST
History coverage
70.0%
1,852 of 2,644 live listings have metadata
Last zone update
2026-06-24 18:50 BST
Authoritative BIND zone last modified
Live status, return code and TXT reason are reconciled directly against the BIND zone. An address is marked DELISTED only when a real delist timestamp, counter or audit event exists; otherwise a non-live historical address is OBSERVED. Repeat-offender totals are grouped by the latest sanitised attack source; complete event history is available only through the per-IP JSON feed and delist information. Apache activity cache updated 2026-06-24 20:00 BST.
BIND records: IPv4 A = 2,644 • IPv6 AAAA = 0 • TXT = 2,644 • SOA serial 2026062432.

Listings history

Live BIND entries plus observation and delisting history. Times use UK local GMT/BST.

Clear

Showing 1,001–1,100 of 2,816 matching records.

IP Status Code Reason Last activity Sources Lists / Delists Details
66.132.172.32 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
66.132.172.202 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
71.6.232.27 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 114 threatmail 1 / 0
192.142.28.77 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
20.83.167.33 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 30 threatmail 1 / 0
64.62.197.146 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
110.38.210.157 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
35.233.118.183 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
176.65.139.183 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
64.62.197.26 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
69.5.169.72 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
198.235.24.165 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
35.247.210.30 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
69.5.169.40 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
135.232.200.20 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
198.235.24.108 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.64.105.237 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 26 threatmail 1 / 0
170.187.165.130 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 226 threatmail 1 / 0
45.33.46.249 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 66 threatmail 1 / 0
64.62.197.17 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
64.62.197.27 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
165.227.147.215 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 223 threatmail 1 / 0
71.6.134.231 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 119 threatmail 5 / 0
20.127.215.182 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / GPL WEB_SERVER .htpasswd access threatmail 1 / 0
64.62.197.194 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
31.77.156.62 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 34 threatmail 2 / 0
20.65.194.112 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 28 threatmail 1 / 0
177.124.88.216 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 238 threatmail 1 / 0
107.150.111.107 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 144 threatmail 1 / 0
161.35.108.63 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 206 threatmail 1 / 0
158.173.67.57 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
66.132.186.207 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
20.55.214.65 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / GPL WEB_SERVER .htpasswd access threatmail 1 / 0
20.63.84.0 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
157.230.19.140 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
20.151.5.99 LISTED 127.0.0.4 Apache security: distinct 4xx path scan apache-security 1 / 0
20.151.201.255 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 3 / 0
20.226.62.44 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 4 / 0
170.64.154.53 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 227 threatmail 1 / 0
34.22.41.211 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
198.235.24.87 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
193.163.125.120 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
147.185.132.112 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
164.92.232.89 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 217 threatmail 1 / 0
20.12.203.132 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 2 / 0
147.185.132.76 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
205.210.31.163 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
134.209.15.209 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 175 threatmail 1 / 0
5.61.209.24 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 4 threatmail 1 / 0
207.241.173.116 LISTED 127.0.0.4 Threat Prevention: Successful Credential Theft Detected / ET WEB_SPECIFIC_APPS Wordpress LiteSpeed Cache Plugin debug.log Access Attempt (CVE-2024-44000) threatmail 1 / 0
207.180.29.33 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 2 / 0
192.109.200.215 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
3.16.147.91 LISTED 127.0.0.4 Threat Prevention: Attempted Information Leak / ET SCAN MS Terminal Server Traffic on Non-standard Port threatmail 1 / 0
66.132.186.246 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
74.249.207.185 LISTED 127.0.0.8 Apache security: distinct 4xx path scan apache-security 4 / 0
135.237.126.12 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 176 threatmail 1 / 0
172.208.49.189 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 234 threatmail 1 / 0
123.58.213.117 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 170 threatmail 1 / 0
23.101.116.84 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
192.3.140.104 DELISTED 127.0.0.4 Apache security: repeated explicit application probes; 2 evidence item(s); 1 attack session(s)/7d, 1/30d admin apache-security Rosko 3 / 3
20.62.193.105 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 28 threatmail 1 / 0
147.185.132.13 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
103.252.90.129 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 141 threatmail 1 / 0
89.37.172.157 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 125 threatmail 1 / 0
135.237.125.122 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 176 threatmail 1 / 0
147.185.132.70 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
216.73.160.115 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
84.21.190.140 LISTED 127.0.0.8 Apache security: repeated explicit application probes apache-security 4 / 0
47.77.182.54 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 87 apache-security 1 / 0
124.29.194.82 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
198.235.24.139 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
162.243.210.18 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 216 threatmail 1 / 0
193.176.29.17 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 265 threatmail 1 / 0
79.124.40.126 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 120 threatmail 2 / 0
193.163.125.170 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
20.168.122.38 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 21 threatmail 1 / 0
176.65.148.24 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
135.237.125.78 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 176 threatmail 1 / 0
20.206.73.62 LISTED 127.0.0.4 Apache security: distinct 4xx path scan apache-security 2 / 0
34.151.146.229 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
35.198.9.177 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
93.123.109.165 LISTED 127.0.0.4 Apache security: path_traversal apache-security 1 / 0
89.205.21.201 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
52.186.174.182 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
20.220.219.90 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
20.197.232.36 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
138.68.86.32 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
134.122.28.88 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
103.70.167.112 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
198.235.24.80 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
176.65.139.231 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
69.5.169.28 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
205.210.31.166 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 3 / 0
24.144.84.83 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 31 threatmail 1 / 0
20.65.194.43 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 29 threatmail 1 / 0
199.45.154.137 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
205.210.31.128 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
52.21.227.35 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 101 threatmail 6 / 0
193.124.20.231 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 270 threatmail 1 / 0
64.62.156.69 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 101 threatmail 1 / 0

Lists / Delists shows list_count and delist_count. OBSERVED means the IP exists in history but is not currently in BIND and has no recorded delist event. Trusted addresses in /etc/scotnet/dnsbl-public-hide.txt are omitted from this public history table.