Transparency

BIND is the source of truth for live listings • meta.json records observation and delisting history

Transparency snapshot

Back to DNSBL
Active listings
2,644
Live from BIND zone (A + AAAA)
Threat activity (7 days)
59
Unique suspicious public IPs • 4,458 matched events • 11,369 requests evaluated
Repeat offenders
120
Threatmail: 71 • Apache security: 49
Lifecycle
Active
Pending review: 0 • Expiring ≤7d: 31 • Expired last run: 0
Delisted records
4
1 in the last 7 days • unique IPs with a recorded delist
Mail feeds
Active
Threatmail: active
User reports: not enabled • last 2026-06-24 21:15 BST
History coverage
70.0%
1,852 of 2,644 live listings have metadata
Last zone update
2026-06-24 18:50 BST
Authoritative BIND zone last modified
Live status, return code and TXT reason are reconciled directly against the BIND zone. An address is marked DELISTED only when a real delist timestamp, counter or audit event exists; otherwise a non-live historical address is OBSERVED. Repeat-offender totals are grouped by the latest sanitised attack source; complete event history is available only through the per-IP JSON feed and delist information. Apache activity cache updated 2026-06-24 21:15 BST.
BIND records: IPv4 A = 2,644 • IPv6 AAAA = 0 • TXT = 2,644 • SOA serial 2026062432.

Listings history

Live BIND entries plus observation and delisting history. Times use UK local GMT/BST.

Clear

Showing 1,101–1,200 of 2,816 matching records.

IP Status Code Reason Last activity Sources Lists / Delists Details
64.62.197.140 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
198.235.24.22 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
82.102.18.182 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
43.130.246.117 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 52 threatmail 1 / 0
20.65.193.191 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 28 threatmail 1 / 0
36.250.202.123 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
217.146.80.98 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 291 threatmail 1 / 0
205.210.31.47 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
145.132.99.130 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / GPL WEB_SERVER .htpasswd access threatmail 1 / 0
208.84.101.72 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
69.5.169.61 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
64.62.197.48 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
64.62.197.52 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
165.22.113.99 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 222 threatmail 1 / 0
45.43.37.254 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 59 threatmail 1 / 0
35.241.117.218 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
146.88.241.57 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 188 threatmail 1 / 0
40.124.175.76 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 50 threatmail 1 / 0
64.62.197.101 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
45.82.76.107 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60 threatmail 1 / 0
205.210.31.184 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
14.1.107.59 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
167.233.91.12 LISTED 127.0.0.4 Apache security: path_traversal apache-security 1 / 0
45.156.128.150 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
45.156.128.149 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
198.235.24.192 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
205.210.31.246 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
69.5.169.33 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
66.132.186.210 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
64.62.197.57 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
143.42.173.101 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 182 threatmail 1 / 0
14.187.1.162 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 15 threatmail 1 / 0
138.197.39.208 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
69.5.169.95 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
198.235.24.170 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
198.235.24.227 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 4 / 0
66.240.236.109 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 113 threatmail 1 / 0
205.210.31.17 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
194.163.153.247 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
20.9.67.71 LISTED 127.0.0.4 Apache security: distinct 4xx path scan apache-security 2 / 0
20.151.217.54 LISTED 127.0.0.4 Apache security: distinct 4xx path scan apache-security 1 / 0
34.131.166.71 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
172.202.104.154 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 233 threatmail 1 / 0
91.199.163.52 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 129 threatmail 4 / 0
81.161.239.13 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
86.54.31.40 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 126 threatmail 1 / 0
107.155.48.46 LISTED 127.0.0.4 Apache security: path_traversal apache-security 1 / 0
85.239.249.222 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt threatmail 2 / 0
191.233.234.186 LISTED 127.0.0.4 Apache security: distinct 4xx path scan apache-security 2 / 0
198.235.24.82 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
52.138.14.226 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 2 / 0
198.235.24.70 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
172.173.98.90 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 3 / 0
129.213.92.202 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 174 threatmail 1 / 0
193.163.125.24 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
176.65.139.135 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
3.21.35.57 LISTED 127.0.0.4 Threat Prevention: Attempted Information Leak / ET SCAN MS Terminal Server Traffic on Non-standard Port threatmail 1 / 0
109.236.50.3 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
193.163.125.36 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 3 / 0
198.235.24.96 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
8.229.220.172 LISTED 127.0.0.4 Apache security: distinct 4xx path scan apache-security 1 / 0
40.124.175.5 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 54 threatmail 1 / 0
176.65.139.234 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 apache-security threatmail 3 / 0
71.6.134.204 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 120 threatmail 1 / 0
205.210.31.131 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 5 / 0
45.156.129.155 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
45.156.129.152 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
20.43.0.47 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 2 / 0
103.76.88.37 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 150 threatmail 2 / 0
198.235.24.220 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
50.116.72.209 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
221.15.20.5 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
20.226.60.146 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
191.235.101.61 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 3 / 0
193.163.125.140 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
65.49.1.132 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
65.49.1.137 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.83.27.149 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 35 threatmail 1 / 0
20.29.56.247 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 28 threatmail 1 / 0
64.62.156.23 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
208.84.102.213 LISTED 127.0.0.4 Threat Prevention: Successful Credential Theft Detected / ET WEB_SPECIFIC_APPS Wordpress LiteSpeed Cache Plugin debug.log Access Attempt (CVE-2024-44000) threatmail 1 / 0
64.62.156.10 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
64.62.156.18 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
205.210.31.155 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
8.216.11.80 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 8 threatmail 1 / 0
45.86.202.206 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
208.84.100.241 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
190.2.135.111 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
20.64.105.215 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 30 threatmail 1 / 0
147.185.132.28 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 196 threatmail 2 / 0
205.210.31.59 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
188.240.59.21 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 265 threatmail 1 / 0
31.76.27.231 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt threatmail 1 / 0
205.210.31.226 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
66.132.195.148 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
198.235.24.219 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
187.17.228.218 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 259 threatmail 4 / 0
198.235.24.254 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
147.185.132.72 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
193.163.125.40 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0

Lists / Delists shows list_count and delist_count. OBSERVED means the IP exists in history but is not currently in BIND and has no recorded delist event. Trusted addresses in /etc/scotnet/dnsbl-public-hide.txt are omitted from this public history table.