ScotNet DNSBL • Transparency

Transparency snapshot

Back to DNSBL

Active listings

2,644

Live from BIND zone (A + AAAA)

Threat activity (7 days)

Unique suspicious public IPs • 4,682 matched events • 11,925 requests evaluated

Repeat offenders

120

Threatmail: 71 • Apache security: 49

Lifecycle

Active

Pending review: 0 • Expiring ≤7d: 31 • Expired last run: 0

Delisted records

1 in the last 7 days • unique IPs with a recorded delist

Mail feeds

Active

Threatmail: active
User reports: not enabled • last 2026-06-24 22:30 BST

History coverage

70.0%

1,852 of 2,644 live listings have metadata

Last zone update

2026-06-24 18:50 BST

Authoritative BIND zone last modified

Live status, return code and TXT reason are reconciled directly against the BIND zone. An address is marked DELISTED only when a real delist timestamp, counter or audit event exists; otherwise a non-live historical address is OBSERVED. Repeat-offender totals are grouped by the latest sanitised attack source; complete event history is available only through the per-IP JSON feed and delist information. Apache activity cache updated 2026-06-24 22:30 BST.
BIND records: IPv4 A = 2,644 • IPv6 AAAA = 0 • TXT = 2,644 • SOA serial 2026062432.

Listings history

Live BIND entries plus observation and delisting history. Times use UK local GMT/BST.

Search Source Code Rows Clear

Showing 1,201–1,300 of 2,816 matching records.

IP	Status	Code	Reason	Last activity	Sources	Lists / Delists
64.62.197.168	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 110	13 Jun 07:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 110 First observed 2026-03-25 09:45:56 GMT Last observed 2026-06-13 07:40:05 BST First listed 2026-06-13 07:40:05 BST Last listed 2026-06-13 07:40:05 BST Last delisted — Last expired — Evidence expiry 2026-07-13 07:40:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.98.153.37	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 36	13 Jun 07:10 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 36 First observed 2026-06-13 07:10:03 BST Last observed 2026-06-13 07:10:03 BST First listed 2026-06-13 07:10:03 BST Last listed 2026-06-13 07:10:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 07:10:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.125	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 06:35 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-13 06:35:02 BST Last observed 2026-06-13 06:35:02 BST First listed 2026-06-13 06:35:02 BST Last listed 2026-06-13 06:35:02 BST Last delisted — Last expired — Evidence expiry 2026-07-13 06:35:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.172.222	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 06:27 BST	web:post	14 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-03-20 23:45:47 GMT Last observed 2026-06-13 06:27:46 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-13 06:27:46 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 14 / 0 Sanitised history JSON feed
198.235.24.24	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 06:25 BST	threatmail	3 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-03-03 03:31:24 GMT Last observed 2026-06-13 06:25:06 BST First listed 2026-06-05 13:28:38 BST Last listed 2026-06-13 06:25:06 BST Last delisted — Last expired — Evidence expiry 2026-07-13 06:25:06 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 3 / 0 Sanitised history JSON feed
160.30.172.107	LISTED	127.0.0.4	Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt	13 Jun 06:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt First observed 2026-06-13 06:20:03 BST Last observed 2026-06-13 06:20:03 BST First listed 2026-06-13 06:20:03 BST Last listed 2026-06-13 06:20:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 06:20:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
174.138.87.36	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 243	13 Jun 06:15 BST	threatmail	4 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 243 First observed 2026-06-05 16:15:05 BST Last observed 2026-06-13 06:15:03 BST First listed 2026-06-05 16:15:05 BST Last listed 2026-06-13 06:15:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 06:15:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 4 / 0 Sanitised history JSON feed
216.180.246.177	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 289	13 Jun 05:45 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 289 First observed 2026-06-13 05:45:03 BST Last observed 2026-06-13 05:45:03 BST First listed 2026-06-13 05:45:03 BST Last listed 2026-06-13 05:45:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 05:45:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
65.49.1.207	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 05:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-13 05:40:03 BST Last observed 2026-06-13 05:40:03 BST First listed 2026-06-13 05:40:03 BST Last listed 2026-06-13 05:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 05:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
45.156.129.193	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60	13 Jun 05:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60 First observed 2026-03-28 16:18:54 GMT Last observed 2026-06-13 05:25:05 BST First listed 2026-06-13 05:25:05 BST Last listed 2026-06-13 05:25:05 BST Last delisted — Last expired — Evidence expiry 2026-07-13 05:25:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
45.156.129.194	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60	13 Jun 05:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60 First observed 2026-03-19 21:04:31 GMT Last observed 2026-06-13 05:25:03 BST First listed 2026-06-13 05:25:03 BST Last listed 2026-06-13 05:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 05:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
172.202.118.38	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 242	13 Jun 05:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 242 First observed 2026-06-13 05:05:03 BST Last observed 2026-06-13 05:05:03 BST First listed 2026-06-13 05:05:03 BST Last listed 2026-06-13 05:05:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 05:05:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
135.119.104.245	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 179	13 Jun 05:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 179 First observed 2026-03-27 21:08:52 GMT Last observed 2026-06-13 05:00:03 BST First listed 2026-06-13 05:00:03 BST Last listed 2026-06-13 05:00:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 05:00:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.99	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 04:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-13 04:55:02 BST Last observed 2026-06-13 04:55:02 BST First listed 2026-06-13 04:55:02 BST Last listed 2026-06-13 04:55:02 BST Last delisted — Last expired — Evidence expiry 2026-07-13 04:55:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
199.45.154.186	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 04:50 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-05 16:41:27 BST Last observed 2026-06-13 04:50:05 BST First listed 2026-06-05 16:41:27 BST Last listed 2026-06-13 04:50:05 BST Last delisted — Last expired — Evidence expiry 2026-07-13 04:50:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
193.163.125.154	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 04:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-13 04:50:03 BST Last observed 2026-06-13 04:50:03 BST First listed 2026-06-13 04:50:03 BST Last listed 2026-06-13 04:50:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 04:50:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
173.255.223.49	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 249	13 Jun 04:45 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 249 First observed 2026-06-13 04:45:03 BST Last observed 2026-06-13 04:45:03 BST First listed 2026-06-13 04:45:03 BST Last listed 2026-06-13 04:45:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 04:45:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
45.33.42.25	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 63	13 Jun 04:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 63 First observed 2026-06-13 04:40:03 BST Last observed 2026-06-13 04:40:03 BST First listed 2026-06-13 04:40:03 BST Last listed 2026-06-13 04:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 04:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.163.33.22	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 26	13 Jun 04:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 26 First observed 2026-06-13 04:30:02 BST Last observed 2026-06-13 04:30:02 BST First listed 2026-06-13 04:30:02 BST Last listed 2026-06-13 04:30:02 BST Last delisted — Last expired — Evidence expiry 2026-07-13 04:30:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
170.9.16.186	LISTED	127.0.0.4	Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt	13 Jun 04:15 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt First observed 2026-06-12 01:22:05 BST Last observed 2026-06-13 04:15:03 BST First listed 2026-06-13 04:15:03 BST Last listed 2026-06-13 04:15:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 04:15:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
205.210.31.8	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 04:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-04-24 01:58:17 BST Last observed 2026-06-13 04:05:03 BST First listed 2026-06-13 04:05:03 BST Last listed 2026-06-13 04:05:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 04:05:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.195.152	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 03:15 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-09 01:05:03 BST Last observed 2026-06-13 03:15:03 BST First listed 2026-06-09 01:05:03 BST Last listed 2026-06-13 03:15:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 03:15:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
20.65.194.42	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 33	13 Jun 03:10 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 33 First observed 2026-06-13 03:10:04 BST Last observed 2026-06-13 03:10:04 BST First listed 2026-06-13 03:10:04 BST Last listed 2026-06-13 03:10:04 BST Last delisted — Last expired — Evidence expiry 2026-07-13 03:10:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.197.31	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 111	13 Jun 02:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 111 First observed 2026-06-13 02:55:03 BST Last observed 2026-06-13 02:55:03 BST First listed 2026-06-13 02:55:03 BST Last listed 2026-06-13 02:55:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 02:55:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.195.78	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 02:35 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-05-24 12:58:59 BST Last observed 2026-06-13 02:35:03 BST First listed 2026-06-13 02:35:03 BST Last listed 2026-06-13 02:35:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 02:35:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
176.65.139.28	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 02:25 BST	threatmail	7 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-05 13:28:16 BST Last observed 2026-06-13 02:25:03 BST First listed 2026-06-05 13:28:16 BST Last listed 2026-06-13 02:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 02:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 7 / 0 Sanitised history JSON feed
143.42.1.44	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 186	13 Jun 01:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 186 First observed 2026-06-13 01:55:02 BST Last observed 2026-06-13 01:55:02 BST First listed 2026-06-13 01:55:02 BST Last listed 2026-06-13 01:55:02 BST Last delisted — Last expired — Evidence expiry 2026-07-13 01:55:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
147.185.132.237	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 01:35 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-05 17:00:05 BST Last observed 2026-06-13 01:35:03 BST First listed 2026-06-05 17:00:05 BST Last listed 2026-06-13 01:35:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 01:35:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
64.62.156.14	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 01:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-13 01:05:04 BST Last observed 2026-06-13 01:05:04 BST First listed 2026-06-13 01:05:04 BST Last listed 2026-06-13 01:05:04 BST Last delisted — Last expired — Evidence expiry 2026-07-13 01:05:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
147.185.132.75	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 01:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-13 01:00:04 BST Last observed 2026-06-13 01:00:04 BST First listed 2026-06-13 01:00:04 BST Last listed 2026-06-13 01:00:04 BST Last delisted — Last expired — Evidence expiry 2026-07-13 01:00:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.8	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 00:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-17 09:06:06 GMT Last observed 2026-06-13 00:55:03 BST First listed 2026-06-13 00:55:03 BST Last listed 2026-06-13 00:55:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 00:55:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.172.40	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	13 Jun 00:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-04 11:50:29 BST Last observed 2026-06-13 00:40:04 BST First listed 2026-06-13 00:40:04 BST Last listed 2026-06-13 00:40:04 BST Last delisted — Last expired — Evidence expiry 2026-07-13 00:40:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
5.188.206.46	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 3	13 Jun 00:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 3 First observed 2026-06-13 00:40:03 BST Last observed 2026-06-13 00:40:03 BST First listed 2026-06-13 00:40:03 BST Last listed 2026-06-13 00:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 00:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
71.6.146.185	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 120	13 Jun 00:05 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 120 First observed 2026-06-12 21:50:03 BST Last observed 2026-06-13 00:05:03 BST First listed 2026-06-12 21:50:03 BST Last listed 2026-06-13 00:05:03 BST Last delisted — Last expired — Evidence expiry 2026-07-13 00:05:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
165.154.162.81	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 225	12 Jun 23:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 225 First observed 2026-06-12 23:55:03 BST Last observed 2026-06-12 23:55:03 BST First listed 2026-06-12 23:55:03 BST Last listed 2026-06-12 23:55:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 23:55:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
150.107.38.60	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 203	12 Jun 23:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 203 First observed 2026-06-12 23:40:02 BST Last observed 2026-06-12 23:40:02 BST First listed 2026-06-12 23:40:02 BST Last listed 2026-06-12 23:40:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 23:40:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
172.202.117.196	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 247	12 Jun 23:05 BST	web:post	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 247 First observed 2026-06-12 23:05:26 BST Last observed 2026-06-12 23:05:26 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-12 23:05:26 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.64.106.29	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 31	12 Jun 22:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 31 First observed 2026-06-12 22:55:03 BST Last observed 2026-06-12 22:55:03 BST First listed 2026-06-12 22:55:03 BST Last listed 2026-06-12 22:55:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 22:55:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
147.185.132.110	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 22:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 22:50:03 BST Last observed 2026-06-12 22:50:03 BST First listed 2026-06-12 22:50:03 BST Last listed 2026-06-12 22:50:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 22:50:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.121	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 22:05 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-03-30 18:52:36 BST Last observed 2026-06-12 22:05:03 BST First listed 2026-06-05 16:56:32 BST Last listed 2026-06-12 22:05:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 22:05:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
20.65.194.47	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 33	12 Jun 21:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 33 First observed 2026-06-12 21:55:03 BST Last observed 2026-06-12 21:55:03 BST First listed 2026-06-12 21:55:03 BST Last listed 2026-06-12 21:55:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 21:55:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
103.54.101.203	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 149	12 Jun 20:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 149 First observed 2026-06-12 20:05:03 BST Last observed 2026-06-12 20:05:03 BST First listed 2026-06-12 20:05:03 BST Last listed 2026-06-12 20:05:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 20:05:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.195.104	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 19:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-03-30 00:53:47 BST Last observed 2026-06-12 19:55:03 BST First listed 2026-06-12 19:55:03 BST Last listed 2026-06-12 19:55:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 19:55:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
3.19.63.57	LISTED	127.0.0.4	Threat Prevention: Attempted Information Leak / ET SCAN MS Terminal Server Traffic on Non-standard Port	12 Jun 19:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Attempted Information Leak / ET SCAN MS Terminal Server Traffic on Non-standard Port First observed 2026-06-12 19:25:03 BST Last observed 2026-06-12 19:25:03 BST First listed 2026-06-12 19:25:03 BST Last listed 2026-06-12 19:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 19:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.163.125.25	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 18:40 BST	threatmail	3 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-05 13:27:48 BST Last observed 2026-06-12 18:40:04 BST First listed 2026-06-05 13:27:48 BST Last listed 2026-06-12 18:40:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 18:40:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 3 / 0 Sanitised history JSON feed
172.202.117.124	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 240	12 Jun 18:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 240 First observed 2026-06-12 18:40:03 BST Last observed 2026-06-12 18:40:03 BST First listed 2026-06-12 18:40:03 BST Last listed 2026-06-12 18:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 18:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.163.125.161	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 18:30 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-09 16:40:03 BST Last observed 2026-06-12 18:30:03 BST First listed 2026-06-09 16:40:03 BST Last listed 2026-06-12 18:30:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 18:30:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
5.61.209.96	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 18:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-03-03 16:01:11 GMT Last observed 2026-06-12 18:05:04 BST First listed 2026-06-12 18:05:04 BST Last listed 2026-06-12 18:05:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 18:05:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
45.198.224.21	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 17:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 17:50:04 BST Last observed 2026-06-12 17:50:04 BST First listed 2026-06-12 17:50:04 BST Last listed 2026-06-12 17:50:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 17:50:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.49	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 17:45 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 17:45:03 BST Last observed 2026-06-12 17:45:03 BST First listed 2026-06-12 17:45:03 BST Last listed 2026-06-12 17:45:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 17:45:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
45.156.128.14	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 59	12 Jun 17:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 59 First observed 2026-03-18 09:02:24 GMT Last observed 2026-06-12 17:25:03 BST First listed 2026-06-12 17:25:03 BST Last listed 2026-06-12 17:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 23:53:54 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.168.109.236	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 27	12 Jun 17:13 BST	web:post	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 27 First observed 2026-06-12 17:13:37 BST Last observed 2026-06-12 17:13:37 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-12 17:13:37 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.163.14.130	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 21	12 Jun 16:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 21 First observed 2026-06-12 16:25:03 BST Last observed 2026-06-12 16:25:03 BST First listed 2026-06-12 16:25:03 BST Last listed 2026-06-12 16:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 16:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
135.232.211.214	LISTED	127.0.0.4	Threat Prevention: Web Application Attack / GPL WEB_SERVER .htpasswd access	12 Jun 16:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Web Application Attack / GPL WEB_SERVER .htpasswd access First observed 2026-06-12 16:00:03 BST Last observed 2026-06-12 16:00:03 BST First listed 2026-06-12 16:00:03 BST Last listed 2026-06-12 16:00:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 16:00:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
205.210.31.130	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 15:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-05-19 10:12:34 BST Last observed 2026-06-12 15:40:02 BST First listed 2026-06-12 15:40:02 BST Last listed 2026-06-12 15:40:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 15:40:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
176.65.139.145	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 15:35 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 15:35:03 BST Last observed 2026-06-12 15:35:03 BST First listed 2026-06-12 15:35:03 BST Last listed 2026-06-12 15:35:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 15:35:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.171.8.87	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 27	12 Jun 15:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 27 First observed 2026-06-12 15:30:02 BST Last observed 2026-06-12 15:30:02 BST First listed 2026-06-12 15:30:02 BST Last listed 2026-06-12 15:30:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 15:30:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
167.94.146.57	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 231	12 Jun 15:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 231 First observed 2026-04-03 01:15:35 BST Last observed 2026-06-12 15:20:02 BST First listed 2026-06-12 15:20:02 BST Last listed 2026-06-12 15:20:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 15:20:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.64.105.124	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 30	12 Jun 15:15 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 30 First observed 2026-06-12 15:15:03 BST Last observed 2026-06-12 15:15:03 BST First listed 2026-06-12 15:15:03 BST Last listed 2026-06-12 15:15:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 15:15:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.3.53.11	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 269	12 Jun 15:10 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 269 First observed 2026-06-12 15:10:02 BST Last observed 2026-06-12 15:10:02 BST First listed 2026-06-12 15:10:02 BST Last listed 2026-06-12 15:10:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 15:10:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.20	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 13:55 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-03-15 22:13:38 GMT Last observed 2026-06-12 13:55:03 BST First listed 2026-06-09 11:20:06 BST Last listed 2026-06-12 13:55:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 13:55:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
185.226.197.42	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 257	12 Jun 13:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 257 First observed 2026-06-12 13:20:03 BST Last observed 2026-06-12 13:20:03 BST First listed 2026-06-12 13:20:03 BST Last listed 2026-06-12 13:20:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 13:20:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
185.226.197.43	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 259	12 Jun 13:15 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 259 First observed 2026-06-12 13:15:03 BST Last observed 2026-06-12 13:15:03 BST First listed 2026-06-12 13:15:03 BST Last listed 2026-06-12 13:15:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 13:15:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
86.54.31.38	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 128	12 Jun 13:05 BST	web:post	18 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 128 First observed 2026-05-20 03:11:10 BST Last observed 2026-06-12 13:05:30 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-12 13:05:30 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 18 / 0 Sanitised history JSON feed
66.132.172.140	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 13:04 BST	web:post	10 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-03-28 12:53:17 GMT Last observed 2026-06-12 13:04:06 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-12 13:04:06 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 10 / 0 Sanitised history JSON feed
193.3.53.8	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 272	12 Jun 12:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 272 First observed 2026-06-12 12:20:02 BST Last observed 2026-06-12 12:20:02 BST First listed 2026-06-12 12:20:02 BST Last listed 2026-06-12 12:20:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 12:20:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
205.210.31.38	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 12:15 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 12:15:02 BST Last observed 2026-06-12 12:15:02 BST First listed 2026-06-12 12:15:02 BST Last listed 2026-06-12 12:15:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 12:15:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.172.223	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 11:03 BST	web:post	8 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-07 00:49:22 BST Last observed 2026-06-12 11:03:10 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-12 11:03:10 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 8 / 0 Sanitised history JSON feed
20.64.105.167	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 30	12 Jun 11:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 30 First observed 2026-06-12 11:00:03 BST Last observed 2026-06-12 11:00:03 BST First listed 2026-06-12 11:00:03 BST Last listed 2026-06-12 11:00:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 11:00:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.83.150.53	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 35	12 Jun 10:35 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 35 First observed 2026-06-12 10:35:02 BST Last observed 2026-06-12 10:35:02 BST First listed 2026-06-12 10:35:02 BST Last listed 2026-06-12 10:35:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 10:35:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
31.70.71.228	LISTED	127.0.0.4	Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt	12 Jun 10:30 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt First observed 2026-06-12 10:30:04 BST Last observed 2026-06-12 10:30:05 BST First listed 2026-06-12 10:30:04 BST Last listed 2026-06-12 10:30:05 BST Last delisted — Last expired — Evidence expiry 2026-07-12 10:30:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
176.65.139.99	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 10:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 10:25:03 BST Last observed 2026-06-12 10:25:03 BST First listed 2026-06-12 10:25:03 BST Last listed 2026-06-12 10:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 10:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
83.229.8.197	LISTED	127.0.0.4	Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt	12 Jun 10:25 BST	threatmail	6 / 0
Full evidence / reason Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt First observed 2026-05-28 02:11:04 BST Last observed 2026-06-12 10:25:02 BST First listed 2026-06-04 15:50:12 BST Last listed 2026-06-12 10:25:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 10:25:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 6 / 0 Sanitised history JSON feed
185.226.197.9	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 260	12 Jun 10:15 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 260 First observed 2026-05-13 11:34:59 BST Last observed 2026-06-12 10:15:02 BST First listed 2026-06-12 10:15:02 BST Last listed 2026-06-12 10:15:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 10:15:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.195.156	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 10:10 BST	threatmail	3 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-09 11:40:02 BST Last observed 2026-06-12 10:10:02 BST First listed 2026-06-09 11:40:02 BST Last listed 2026-06-12 10:10:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 10:10:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 3 / 0 Sanitised history JSON feed
147.185.132.207	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 10:00 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-13 03:30:41 GMT Last observed 2026-06-12 10:00:02 BST First listed 2026-06-06 12:55:03 BST Last listed 2026-06-12 10:00:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 10:00:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
209.37.38.210	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 287	12 Jun 09:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 287 First observed 2026-06-12 09:40:03 BST Last observed 2026-06-12 09:40:03 BST First listed 2026-06-12 09:40:03 BST Last listed 2026-06-12 09:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 09:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.186.239	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 09:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 09:20:02 BST Last observed 2026-06-12 09:20:02 BST First listed 2026-06-12 09:20:02 BST Last listed 2026-06-12 09:20:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 09:20:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.32.209.230	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 270	12 Jun 07:50 BST	web:post	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 270 First observed 2026-06-12 07:50:06 BST Last observed 2026-06-12 07:50:06 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-12 07:50:06 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.197.192	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 110	12 Jun 07:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 110 First observed 2026-06-12 07:40:05 BST Last observed 2026-06-12 07:40:05 BST First listed 2026-06-12 07:40:05 BST Last listed 2026-06-12 07:40:05 BST Last delisted — Last expired — Evidence expiry 2026-07-12 07:40:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
45.156.129.90	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60	12 Jun 07:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60 First observed 2026-03-17 11:07:45 GMT Last observed 2026-06-12 07:30:04 BST First listed 2026-06-12 07:30:04 BST Last listed 2026-06-12 07:30:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 07:30:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.169.104.255	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 25	12 Jun 07:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 25 First observed 2026-06-12 07:25:04 BST Last observed 2026-06-12 07:25:04 BST First listed 2026-06-12 07:25:04 BST Last listed 2026-06-12 07:25:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 07:25:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
151.243.11.248	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 202	12 Jun 07:20 BST	threatmail	16 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 202 First observed 2026-05-07 15:06:11 BST Last observed 2026-06-12 07:20:05 BST First listed 2026-06-05 13:21:49 BST Last listed 2026-06-12 07:20:05 BST Last delisted — Last expired — Evidence expiry 2026-07-12 18:17:11 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 16 / 0 Sanitised history JSON feed
66.132.172.219	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 07:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 07:20:04 BST Last observed 2026-06-12 07:20:04 BST First listed 2026-06-12 07:20:04 BST Last listed 2026-06-12 07:20:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 07:20:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.167	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 07:15 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-05-04 11:00:47 BST Last observed 2026-06-12 07:15:02 BST First listed 2026-06-12 07:15:02 BST Last listed 2026-06-12 07:15:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 07:15:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.163.125.176	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 07:05 BST	threatmail	3 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-05 16:56:06 BST Last observed 2026-06-12 07:05:02 BST First listed 2026-06-05 16:56:06 BST Last listed 2026-06-12 07:05:02 BST Last delisted — Last expired — Evidence expiry 2026-07-12 07:05:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 3 / 0 Sanitised history JSON feed
147.185.132.115	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 06:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 06:55:03 BST Last observed 2026-06-12 06:55:03 BST First listed 2026-06-12 06:55:03 BST Last listed 2026-06-12 06:55:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 06:55:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.197.218	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 06:45 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 06:45:03 BST Last observed 2026-06-12 06:45:03 BST First listed 2026-06-12 06:45:03 BST Last listed 2026-06-12 06:45:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 06:45:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.32.209.234	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 269	12 Jun 06:38 BST	web:post	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 269 First observed 2026-06-02 03:21:18 BST Last observed 2026-06-12 06:38:58 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-12 06:38:58 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
185.216.145.186	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 256	12 Jun 06:32 BST	web:post	6 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 256 First observed 2026-05-19 18:16:29 BST Last observed 2026-06-12 06:32:07 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-12 06:32:07 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 6 / 0 Sanitised history JSON feed
23.140.244.248	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 36	12 Jun 06:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 36 First observed 2026-06-12 06:05:04 BST Last observed 2026-06-12 06:05:04 BST First listed 2026-06-12 06:05:04 BST Last listed 2026-06-12 06:05:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 06:05:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
167.94.145.25	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 05:40 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 05:10:03 BST Last observed 2026-06-12 05:40:03 BST First listed 2026-06-10 05:10:03 BST Last listed 2026-06-12 05:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 05:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
198.235.24.65	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 04:20 BST	threatmail	4 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-05 13:28:14 BST Last observed 2026-06-12 04:20:06 BST First listed 2026-06-05 13:28:14 BST Last listed 2026-06-12 04:20:06 BST Last delisted — Last expired — Evidence expiry 2026-07-12 04:20:06 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 4 / 0 Sanitised history JSON feed
185.180.141.47	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 258	12 Jun 04:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 258 First observed 2026-03-14 00:05:36 GMT Last observed 2026-06-12 04:20:05 BST First listed 2026-06-12 04:20:05 BST Last listed 2026-06-12 04:20:05 BST Last delisted — Last expired — Evidence expiry 2026-07-12 04:20:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.110	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 04:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 04:20:03 BST Last observed 2026-06-12 04:20:03 BST First listed 2026-06-12 04:20:03 BST Last listed 2026-06-12 04:20:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 04:20:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
8.211.47.19	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 8	12 Jun 04:12 BST	web:post	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 8 First observed 2026-06-12 04:12:33 BST Last observed 2026-06-12 04:12:33 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-12 04:12:33 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.109	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 04:10 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-03-24 07:33:20 GMT Last observed 2026-06-12 04:10:05 BST First listed 2026-06-12 04:10:05 BST Last listed 2026-06-12 04:10:05 BST Last delisted — Last expired — Evidence expiry 2026-07-12 04:10:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.197.47	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 112	12 Jun 03:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 112 First observed 2026-02-09 04:26:41 GMT Last observed 2026-06-12 03:25:03 BST First listed 2026-06-12 03:25:03 BST Last listed 2026-06-12 03:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 03:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.163.125.112	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 03:20 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-05 17:25:44 BST Last observed 2026-06-12 03:20:03 BST First listed 2026-06-05 17:25:44 BST Last listed 2026-06-12 03:20:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 03:20:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
173.230.150.73	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 243	12 Jun 03:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 243 First observed 2026-06-12 03:05:04 BST Last observed 2026-06-12 03:05:04 BST First listed 2026-06-12 03:05:04 BST Last listed 2026-06-12 03:05:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 03:05:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed

Lists / Delists shows list_count and delist_count. OBSERVED means the IP exists in history but is not currently in BIND and has no recorded delist event. Trusted addresses in /etc/scotnet/dnsbl-public-hide.txt are omitted from this public history table.