ScotNet DNSBL • Transparency

Transparency snapshot

Back to DNSBL

Active listings

2,644

Live from BIND zone (A + AAAA)

Threat activity (7 days)

Unique suspicious public IPs • 4,682 matched events • 11,925 requests evaluated

Repeat offenders

120

Threatmail: 71 • Apache security: 49

Lifecycle

Active

Pending review: 0 • Expiring ≤7d: 31 • Expired last run: 0

Delisted records

1 in the last 7 days • unique IPs with a recorded delist

Mail feeds

Active

Threatmail: active
User reports: not enabled • last 2026-06-24 22:30 BST

History coverage

70.0%

1,852 of 2,644 live listings have metadata

Last zone update

2026-06-24 18:50 BST

Authoritative BIND zone last modified

Live status, return code and TXT reason are reconciled directly against the BIND zone. An address is marked DELISTED only when a real delist timestamp, counter or audit event exists; otherwise a non-live historical address is OBSERVED. Repeat-offender totals are grouped by the latest sanitised attack source; complete event history is available only through the per-IP JSON feed and delist information. Apache activity cache updated 2026-06-24 22:30 BST.
BIND records: IPv4 A = 2,644 • IPv6 AAAA = 0 • TXT = 2,644 • SOA serial 2026062432.

Listings history

Live BIND entries plus observation and delisting history. Times use UK local GMT/BST.

Search Source Code Rows Clear

Showing 1,101–1,200 of 2,644 matching records.

IP	Status	Code	Reason	Last activity	Sources	Lists / Delists
31.70.71.228	LISTED	127.0.0.4	Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt	12 Jun 10:30 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt First observed 2026-06-12 10:30:04 BST Last observed 2026-06-12 10:30:05 BST First listed 2026-06-12 10:30:04 BST Last listed 2026-06-12 10:30:05 BST Last delisted — Last expired — Evidence expiry 2026-07-12 10:30:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
176.65.139.99	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 10:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 10:25:03 BST Last observed 2026-06-12 10:25:03 BST First listed 2026-06-12 10:25:03 BST Last listed 2026-06-12 10:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 10:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
83.229.8.197	LISTED	127.0.0.4	Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt	12 Jun 10:25 BST	threatmail	6 / 0
Full evidence / reason Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt First observed 2026-05-28 02:11:04 BST Last observed 2026-06-12 10:25:02 BST First listed 2026-06-04 15:50:12 BST Last listed 2026-06-12 10:25:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 10:25:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 6 / 0 Sanitised history JSON feed
185.226.197.9	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 260	12 Jun 10:15 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 260 First observed 2026-05-13 11:34:59 BST Last observed 2026-06-12 10:15:02 BST First listed 2026-06-12 10:15:02 BST Last listed 2026-06-12 10:15:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 10:15:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.195.156	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 10:10 BST	threatmail	3 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-09 11:40:02 BST Last observed 2026-06-12 10:10:02 BST First listed 2026-06-09 11:40:02 BST Last listed 2026-06-12 10:10:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 10:10:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 3 / 0 Sanitised history JSON feed
147.185.132.207	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 10:00 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-13 03:30:41 GMT Last observed 2026-06-12 10:00:02 BST First listed 2026-06-06 12:55:03 BST Last listed 2026-06-12 10:00:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 10:00:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
209.37.38.210	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 287	12 Jun 09:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 287 First observed 2026-06-12 09:40:03 BST Last observed 2026-06-12 09:40:03 BST First listed 2026-06-12 09:40:03 BST Last listed 2026-06-12 09:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 09:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.186.239	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 09:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 09:20:02 BST Last observed 2026-06-12 09:20:02 BST First listed 2026-06-12 09:20:02 BST Last listed 2026-06-12 09:20:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 09:20:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.32.209.230	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 270	12 Jun 07:50 BST	web:post	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 270 First observed 2026-06-12 07:50:06 BST Last observed 2026-06-12 07:50:06 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-12 07:50:06 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.197.192	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 110	12 Jun 07:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 110 First observed 2026-06-12 07:40:05 BST Last observed 2026-06-12 07:40:05 BST First listed 2026-06-12 07:40:05 BST Last listed 2026-06-12 07:40:05 BST Last delisted — Last expired — Evidence expiry 2026-07-12 07:40:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
45.156.129.90	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60	12 Jun 07:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60 First observed 2026-03-17 11:07:45 GMT Last observed 2026-06-12 07:30:04 BST First listed 2026-06-12 07:30:04 BST Last listed 2026-06-12 07:30:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 07:30:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.169.104.255	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 25	12 Jun 07:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 25 First observed 2026-06-12 07:25:04 BST Last observed 2026-06-12 07:25:04 BST First listed 2026-06-12 07:25:04 BST Last listed 2026-06-12 07:25:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 07:25:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
151.243.11.248	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 202	12 Jun 07:20 BST	threatmail	16 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 202 First observed 2026-05-07 15:06:11 BST Last observed 2026-06-12 07:20:05 BST First listed 2026-06-05 13:21:49 BST Last listed 2026-06-12 07:20:05 BST Last delisted — Last expired — Evidence expiry 2026-07-12 18:17:11 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 16 / 0 Sanitised history JSON feed
66.132.172.219	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 07:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 07:20:04 BST Last observed 2026-06-12 07:20:04 BST First listed 2026-06-12 07:20:04 BST Last listed 2026-06-12 07:20:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 07:20:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.167	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 07:15 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-05-04 11:00:47 BST Last observed 2026-06-12 07:15:02 BST First listed 2026-06-12 07:15:02 BST Last listed 2026-06-12 07:15:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 07:15:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.163.125.176	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 07:05 BST	threatmail	3 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-05 16:56:06 BST Last observed 2026-06-12 07:05:02 BST First listed 2026-06-05 16:56:06 BST Last listed 2026-06-12 07:05:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 07:05:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 3 / 0 Sanitised history JSON feed
147.185.132.115	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 06:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 06:55:03 BST Last observed 2026-06-12 06:55:03 BST First listed 2026-06-12 06:55:03 BST Last listed 2026-06-12 06:55:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 06:55:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.197.218	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 06:45 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 06:45:03 BST Last observed 2026-06-12 06:45:03 BST First listed 2026-06-12 06:45:03 BST Last listed 2026-06-12 06:45:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 06:45:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.32.209.234	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 269	12 Jun 06:38 BST	web:post	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 269 First observed 2026-06-02 03:21:18 BST Last observed 2026-06-12 06:38:58 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-12 06:38:58 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
185.216.145.186	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 256	12 Jun 06:32 BST	web:post	6 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 256 First observed 2026-05-19 18:16:29 BST Last observed 2026-06-12 06:32:07 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-12 06:32:07 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 6 / 0 Sanitised history JSON feed
23.140.244.248	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 36	12 Jun 06:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 36 First observed 2026-06-12 06:05:04 BST Last observed 2026-06-12 06:05:04 BST First listed 2026-06-12 06:05:04 BST Last listed 2026-06-12 06:05:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 06:05:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
167.94.145.25	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 05:40 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 05:10:03 BST Last observed 2026-06-12 05:40:03 BST First listed 2026-06-10 05:10:03 BST Last listed 2026-06-12 05:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 05:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
198.235.24.65	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 04:20 BST	threatmail	4 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-05 13:28:14 BST Last observed 2026-06-12 04:20:06 BST First listed 2026-06-05 13:28:14 BST Last listed 2026-06-12 04:20:06 BST Last delisted — Last expired — Evidence expiry 2026-07-12 04:20:06 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 4 / 0 Sanitised history JSON feed
185.180.141.47	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 258	12 Jun 04:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 258 First observed 2026-03-14 00:05:36 GMT Last observed 2026-06-12 04:20:05 BST First listed 2026-06-12 04:20:05 BST Last listed 2026-06-12 04:20:05 BST Last delisted — Last expired — Evidence expiry 2026-07-12 04:20:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.110	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 04:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 04:20:03 BST Last observed 2026-06-12 04:20:03 BST First listed 2026-06-12 04:20:03 BST Last listed 2026-06-12 04:20:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 04:20:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
8.211.47.19	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 8	12 Jun 04:12 BST	web:post	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 8 First observed 2026-06-12 04:12:33 BST Last observed 2026-06-12 04:12:33 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-12 04:12:33 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.109	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 04:10 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-03-24 07:33:20 GMT Last observed 2026-06-12 04:10:05 BST First listed 2026-06-12 04:10:05 BST Last listed 2026-06-12 04:10:05 BST Last delisted — Last expired — Evidence expiry 2026-07-12 04:10:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.197.47	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 112	12 Jun 03:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 112 First observed 2026-02-09 04:26:41 GMT Last observed 2026-06-12 03:25:03 BST First listed 2026-06-12 03:25:03 BST Last listed 2026-06-12 03:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 03:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.163.125.112	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 03:20 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-05 17:25:44 BST Last observed 2026-06-12 03:20:03 BST First listed 2026-06-05 17:25:44 BST Last listed 2026-06-12 03:20:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 03:20:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
173.230.150.73	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 243	12 Jun 03:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 243 First observed 2026-06-12 03:05:04 BST Last observed 2026-06-12 03:05:04 BST First listed 2026-06-12 03:05:04 BST Last listed 2026-06-12 03:05:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 03:05:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.184	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 02:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 02:50:03 BST Last observed 2026-06-12 02:50:03 BST First listed 2026-06-12 02:50:03 BST Last listed 2026-06-12 02:50:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 02:50:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
147.185.132.252	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 02:45 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-03-31 11:13:31 BST Last observed 2026-06-12 02:45:03 BST First listed 2026-06-12 02:45:03 BST Last listed 2026-06-12 02:45:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 02:45:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.142	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 02:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 02:40:04 BST Last observed 2026-06-12 02:40:04 BST First listed 2026-06-12 02:40:04 BST Last listed 2026-06-12 02:40:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 02:40:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
65.49.1.66	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 02:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-09 11:03:08 BST Last observed 2026-06-12 02:40:03 BST First listed 2026-06-12 02:40:03 BST Last listed 2026-06-12 02:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 02:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
65.49.1.75	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 02:35 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 02:35:03 BST Last observed 2026-06-12 02:35:03 BST First listed 2026-06-12 02:35:03 BST Last listed 2026-06-12 02:35:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 02:35:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
47.250.132.207	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 73	12 Jun 02:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 73 First observed 2026-06-12 02:00:07 BST Last observed 2026-06-12 02:00:07 BST First listed 2026-06-12 02:00:07 BST Last listed 2026-06-12 02:00:07 BST Last delisted — Last expired — Evidence expiry 2026-07-12 02:00:07 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
45.156.129.60	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 63	12 Jun 01:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 63 First observed 2026-02-14 08:15:39 GMT Last observed 2026-06-12 01:40:03 BST First listed 2026-06-12 01:40:03 BST Last listed 2026-06-12 01:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 01:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
147.185.132.111	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 01:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 01:20:04 BST Last observed 2026-06-12 01:20:04 BST First listed 2026-06-12 01:20:04 BST Last listed 2026-06-12 01:20:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 01:20:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.65.193.199	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 32	12 Jun 00:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 32 First observed 2026-04-16 04:16:05 BST Last observed 2026-06-12 00:30:04 BST First listed 2026-06-12 00:30:04 BST Last listed 2026-06-12 00:30:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 00:30:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.124.20.247	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 271	12 Jun 00:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 271 First observed 2026-06-12 00:25:04 BST Last observed 2026-06-12 00:25:04 BST First listed 2026-06-12 00:25:04 BST Last listed 2026-06-12 00:25:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 00:25:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
152.32.235.4	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 207	11 Jun 23:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 207 First observed 2026-06-11 23:25:03 BST Last observed 2026-06-11 23:25:03 BST First listed 2026-06-11 23:25:03 BST Last listed 2026-06-11 23:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 23:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
34.131.96.66	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 39	11 Jun 23:15 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 39 First observed 2026-06-11 23:15:03 BST Last observed 2026-06-11 23:15:03 BST First listed 2026-06-11 23:15:03 BST Last listed 2026-06-11 23:15:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 23:15:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
165.154.172.179	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 233	11 Jun 23:10 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 233 First observed 2026-06-11 23:10:03 BST Last observed 2026-06-11 23:10:03 BST First listed 2026-06-11 23:10:03 BST Last listed 2026-06-11 23:10:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 23:10:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
45.198.224.22	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 23:00 BST	threatmail	3 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-01 23:23:19 BST Last observed 2026-06-11 23:00:04 BST First listed 2026-06-09 14:45:03 BST Last listed 2026-06-11 23:00:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 23:00:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 3 / 0 Sanitised history JSON feed
198.235.24.97	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 22:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 22:30:03 BST Last observed 2026-06-11 22:30:03 BST First listed 2026-06-11 22:30:03 BST Last listed 2026-06-11 22:30:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 22:30:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.163.125.183	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 22:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 22:25:03 BST Last observed 2026-06-11 22:25:03 BST First listed 2026-06-11 22:25:03 BST Last listed 2026-06-11 22:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 22:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.60	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 22:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-04-09 16:55:36 BST Last observed 2026-06-11 22:00:05 BST First listed 2026-06-11 22:00:05 BST Last listed 2026-06-11 22:00:05 BST Last delisted — Last expired — Evidence expiry 2026-07-11 22:00:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
18.222.198.216	LISTED	127.0.0.4	Threat Prevention: Attempted Information Leak / ET SCAN MS Terminal Server Traffic on Non-standard Port	11 Jun 22:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Attempted Information Leak / ET SCAN MS Terminal Server Traffic on Non-standard Port First observed 2026-06-11 22:00:04 BST Last observed 2026-06-11 22:00:04 BST First listed 2026-06-11 22:00:04 BST Last listed 2026-06-11 22:00:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 22:00:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.150.192.63	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 20	11 Jun 21:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 20 First observed 2026-03-17 14:04:30 GMT Last observed 2026-06-11 21:30:03 BST First listed 2026-06-11 21:30:03 BST Last listed 2026-06-11 21:30:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 21:30:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
69.5.169.183	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 21:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-09 12:32:10 BST Last observed 2026-06-11 21:00:04 BST First listed 2026-06-11 21:00:04 BST Last listed 2026-06-11 21:00:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 21:00:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.172.135	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 20:55 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-04-08 14:46:25 BST Last observed 2026-06-11 20:55:02 BST First listed 2026-06-05 16:45:15 BST Last listed 2026-06-11 20:55:02 BST Last delisted — Last expired — Evidence expiry 2026-07-11 20:55:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
205.210.31.82	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 20:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 20:20:03 BST Last observed 2026-06-11 20:20:03 BST First listed 2026-06-11 20:20:03 BST Last listed 2026-06-11 20:20:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 20:20:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
167.94.146.52	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 231	11 Jun 19:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 231 First observed 2026-02-07 23:52:02 GMT Last observed 2026-06-11 19:25:03 BST First listed 2026-06-11 19:25:03 BST Last listed 2026-06-11 19:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 19:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.195.93	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 19:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-05-08 23:41:19 BST Last observed 2026-06-11 19:20:04 BST First listed 2026-06-11 19:20:04 BST Last listed 2026-06-11 19:20:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 19:20:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
147.185.132.58	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 197	11 Jun 19:05 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 197 First observed 2026-06-05 16:36:46 BST Last observed 2026-06-11 19:05:03 BST First listed 2026-06-05 16:36:46 BST Last listed 2026-06-11 19:05:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 19:05:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
69.5.169.234	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 18:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 18:55:05 BST Last observed 2026-06-11 18:55:05 BST First listed 2026-06-11 18:55:05 BST Last listed 2026-06-11 18:55:05 BST Last delisted — Last expired — Evidence expiry 2026-07-11 18:55:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
194.187.176.124	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 271	11 Jun 18:51 BST	web:post	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 271 First observed 2026-06-11 18:51:14 BST Last observed 2026-06-11 18:51:14 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-11 18:51:14 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
194.88.98.114	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 18:45 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 18:45:04 BST Last observed 2026-06-11 18:45:04 BST First listed 2026-06-11 18:45:04 BST Last listed 2026-06-11 18:45:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 18:45:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.29.49.93	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 28	11 Jun 18:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 28 First observed 2026-04-15 00:30:43 BST Last observed 2026-06-11 18:30:03 BST First listed 2026-06-11 18:30:03 BST Last listed 2026-06-11 18:30:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 18:30:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
69.5.169.131	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 17:35 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 17:35:03 BST Last observed 2026-06-11 17:35:03 BST First listed 2026-06-11 17:35:03 BST Last listed 2026-06-11 17:35:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 17:35:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.172.215	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 16:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 16:50:04 BST Last observed 2026-06-11 16:50:04 BST First listed 2026-06-11 16:50:04 BST Last listed 2026-06-11 16:50:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 16:50:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.163.125.220	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 15:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 15:30:03 BST Last observed 2026-06-11 15:30:03 BST First listed 2026-06-11 15:30:03 BST Last listed 2026-06-11 15:30:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 15:30:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
194.187.176.227	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 272	11 Jun 15:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 272 First observed 2026-02-14 08:49:19 GMT Last observed 2026-06-11 15:25:03 BST First listed 2026-06-11 15:25:03 BST Last listed 2026-06-11 15:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 18:51:17 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.14.73.238	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 19	11 Jun 14:25 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 19 First observed 2026-03-05 12:25:19 GMT Last observed 2026-06-11 14:25:03 BST First listed 2026-06-05 16:46:33 BST Last listed 2026-06-11 14:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 14:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
165.154.12.9	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 224	11 Jun 14:15 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 224 First observed 2026-06-11 14:15:04 BST Last observed 2026-06-11 14:15:04 BST First listed 2026-06-11 14:15:04 BST Last listed 2026-06-11 14:15:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 14:15:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.65.193.35	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 32	11 Jun 12:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 32 First observed 2026-06-11 12:50:03 BST Last observed 2026-06-11 12:50:03 BST First listed 2026-06-11 12:50:03 BST Last listed 2026-06-11 12:50:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 12:50:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
216.25.89.97	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 292	11 Jun 12:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 292 First observed 2026-06-11 12:40:04 BST Last observed 2026-06-11 12:40:04 BST First listed 2026-06-11 12:40:04 BST Last listed 2026-06-11 12:40:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 12:40:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
135.237.126.198	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 181	11 Jun 12:15 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 181 First observed 2026-06-11 12:15:04 BST Last observed 2026-06-11 12:15:04 BST First listed 2026-06-11 12:15:04 BST Last listed 2026-06-11 12:15:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 12:15:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
35.203.210.191	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 42	11 Jun 12:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 42 First observed 2026-06-11 12:00:05 BST Last observed 2026-06-11 12:00:05 BST First listed 2026-06-11 12:00:05 BST Last listed 2026-06-11 12:00:05 BST Last delisted — Last expired — Evidence expiry 2026-07-11 12:00:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
185.226.93.120	LISTED	127.0.0.4	Threat Prevention: access to a potentially vulnerable web application / GPL WEB_SERVER printenv access	11 Jun 12:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: access to a potentially vulnerable web application / GPL WEB_SERVER printenv access First observed 2026-06-11 12:00:03 BST Last observed 2026-06-11 12:00:03 BST First listed 2026-06-11 12:00:03 BST Last listed 2026-06-11 12:00:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 12:00:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
65.49.1.212	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 11:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-01 08:39:26 GMT Last observed 2026-06-11 11:55:05 BST First listed 2026-06-11 11:55:05 BST Last listed 2026-06-11 11:55:05 BST Last delisted — Last expired — Evidence expiry 2026-07-11 11:55:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
8.208.10.94	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 5	11 Jun 11:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 5 First observed 2026-06-11 11:55:03 BST Last observed 2026-06-11 11:55:03 BST First listed 2026-06-11 11:55:03 BST Last listed 2026-06-11 11:55:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 11:55:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
3.115.9.60	LISTED	127.0.0.4	Threat Prevention: Web Application Attack / ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)	11 Jun 11:35 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Web Application Attack / ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) First observed 2026-06-11 11:35:02 BST Last observed 2026-06-11 11:35:04 BST First listed 2026-06-11 11:35:02 BST Last listed 2026-06-11 11:35:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 11:35:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
40.76.116.231	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 54	11 Jun 11:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 54 First observed 2026-03-10 02:24:51 GMT Last observed 2026-06-11 11:20:02 BST First listed 2026-06-11 11:20:02 BST Last listed 2026-06-11 11:20:02 BST Last delisted — Last expired — Evidence expiry 2026-07-11 11:20:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
45.82.76.129	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 69	11 Jun 11:10 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 69 First observed 2026-06-11 11:10:02 BST Last observed 2026-06-11 11:10:02 BST First listed 2026-06-11 11:10:02 BST Last listed 2026-06-11 11:10:02 BST Last delisted — Last expired — Evidence expiry 2026-07-11 11:10:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.80	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 09:40 BST	threatmail	3 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-04-09 08:25:24 BST Last observed 2026-06-11 09:40:03 BST First listed 2026-06-05 17:06:51 BST Last listed 2026-06-11 09:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 09:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 3 / 0 Sanitised history JSON feed
64.62.156.87	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 09:35 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 09:35:04 BST Last observed 2026-06-11 09:35:04 BST First listed 2026-06-11 09:35:04 BST Last listed 2026-06-11 09:35:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 09:35:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.89	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 09:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-05-13 01:19:59 BST Last observed 2026-06-11 09:20:03 BST First listed 2026-06-11 09:20:03 BST Last listed 2026-06-11 09:20:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 09:20:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
162.250.126.206	LISTED	127.0.0.4	Threat Prevention: Web Application Attack / ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)	11 Jun 09:05 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Web Application Attack / ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) First observed 2026-06-11 09:05:04 BST Last observed 2026-06-11 09:05:05 BST First listed 2026-06-11 09:05:04 BST Last listed 2026-06-11 09:05:05 BST Last delisted — Last expired — Evidence expiry 2026-07-11 09:05:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
65.49.1.149	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 08:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-25 06:59:39 GMT Last observed 2026-06-11 08:50:04 BST First listed 2026-06-11 08:50:04 BST Last listed 2026-06-11 08:50:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 08:50:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.195.126	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 08:35 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 08:35:03 BST Last observed 2026-06-11 08:35:03 BST First listed 2026-06-11 08:35:03 BST Last listed 2026-06-11 08:35:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 12:06:00 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.197.23	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 07:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 07:55:03 BST Last observed 2026-06-11 07:55:03 BST First listed 2026-06-11 07:55:03 BST Last listed 2026-06-11 07:55:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 07:55:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.172.186	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 07:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-05-04 14:53:03 BST Last observed 2026-06-11 07:20:04 BST First listed 2026-06-11 07:20:04 BST Last listed 2026-06-11 07:20:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 07:20:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.197.153	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 07:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-04-21 08:32:45 BST Last observed 2026-06-11 07:00:04 BST First listed 2026-06-11 07:00:04 BST Last listed 2026-06-11 07:00:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 07:00:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
205.210.31.133	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 06:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 06:50:03 BST Last observed 2026-06-11 06:50:03 BST First listed 2026-06-11 06:50:03 BST Last listed 2026-06-11 06:50:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 06:50:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.55.87.180	LISTED	127.0.0.4	Threat Prevention: Web Application Attack / GPL WEB_SERVER .htpasswd access	11 Jun 06:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Web Application Attack / GPL WEB_SERVER .htpasswd access First observed 2026-06-11 06:20:03 BST Last observed 2026-06-11 06:20:03 BST First listed 2026-06-11 06:20:03 BST Last listed 2026-06-11 06:20:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 06:20:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
45.156.129.132	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 06:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-04 04:11:24 GMT Last observed 2026-06-11 06:00:05 BST First listed 2026-06-11 06:00:05 BST Last listed 2026-06-11 06:00:05 BST Last delisted — Last expired — Evidence expiry 2026-07-11 06:00:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
205.210.31.20	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 05:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-04-19 14:14:02 BST Last observed 2026-06-11 05:55:02 BST First listed 2026-06-11 05:55:02 BST Last listed 2026-06-11 05:55:02 BST Last delisted — Last expired — Evidence expiry 2026-07-11 05:55:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.197.97	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 05:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 05:50:04 BST Last observed 2026-06-11 05:50:04 BST First listed 2026-06-11 05:50:04 BST Last listed 2026-06-11 05:50:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 05:50:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
65.49.1.80	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 05:40 BST	threatmail	4 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-20 02:21:45 GMT Last observed 2026-06-11 05:40:04 BST First listed 2026-06-05 17:06:06 BST Last listed 2026-06-11 05:40:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 05:40:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 4 / 0 Sanitised history JSON feed
65.49.1.91	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 05:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 05:40:02 BST Last observed 2026-06-11 05:40:02 BST First listed 2026-06-11 05:40:02 BST Last listed 2026-06-11 05:40:02 BST Last delisted — Last expired — Evidence expiry 2026-07-11 05:40:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
157.230.81.1	LISTED	127.0.0.4	Threat Prevention: access to a potentially vulnerable web application / ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body	11 Jun 05:00 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: access to a potentially vulnerable web application / ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body First observed 2026-06-11 05:00:04 BST Last observed 2026-06-11 05:00:06 BST First listed 2026-06-11 05:00:04 BST Last listed 2026-06-11 05:00:06 BST Last delisted — Last expired — Evidence expiry 2026-07-11 05:00:06 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
198.235.24.204	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 04:30 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-08 17:35:03 BST Last observed 2026-06-11 04:30:03 BST First listed 2026-06-08 17:35:03 BST Last listed 2026-06-11 04:30:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 04:30:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
40.124.174.207	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60	11 Jun 03:21 BST	web:post	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60 First observed 2026-06-11 03:21:59 BST Last observed 2026-06-11 03:21:59 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-11 03:21:59 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
31.14.254.124	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 43	11 Jun 02:23 BST	web:post	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 43 First observed 2026-06-03 08:47:17 BST Last observed 2026-06-11 02:23:59 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-11 02:23:59 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
64.62.197.139	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 01:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 01:30:04 BST Last observed 2026-06-11 01:30:04 BST First listed 2026-06-11 01:30:04 BST Last listed 2026-06-11 01:30:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 01:30:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.85	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 01:24 BST	web:post	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 01:24:21 BST Last observed 2026-06-11 01:24:21 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-11 01:24:21 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.182	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 01:05 BST	threatmail	3 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-18 00:02:20 GMT Last observed 2026-06-11 01:05:07 BST First listed 2026-06-10 04:25:03 BST Last listed 2026-06-11 01:05:07 BST Last delisted — Last expired — Evidence expiry 2026-07-11 13:54:56 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 3 / 0 Sanitised history JSON feed
64.62.156.185	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 01:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-18 00:12:24 GMT Last observed 2026-06-11 01:05:06 BST First listed 2026-06-11 01:05:06 BST Last listed 2026-06-11 01:05:06 BST Last delisted — Last expired — Evidence expiry 2026-07-11 01:05:06 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.172.231	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 00:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 00:40:04 BST Last observed 2026-06-11 00:40:04 BST First listed 2026-06-11 00:40:04 BST Last listed 2026-06-11 00:40:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 00:40:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed

Lists / Delists shows list_count and delist_count. OBSERVED means the IP exists in history but is not currently in BIND and has no recorded delist event. Trusted addresses in /etc/scotnet/dnsbl-public-hide.txt are omitted from this public history table.