ScotNet DNSBL • Transparency

Transparency snapshot

Back to DNSBL

Active listings

2,645

Live from BIND zone (A + AAAA)

Threat activity (7 days)

Unique suspicious public IPs • 4,776 matched events • 12,456 requests evaluated

Repeat offenders

120

Threatmail: 71 • Apache security: 49

Lifecycle

Active

Pending review: 0 • Expiring ≤7d: 31 • Expired last run: 0

Delisted records

1 in the last 7 days • unique IPs with a recorded delist

Mail feeds

Active

Threatmail: active
User reports: not enabled • last 2026-06-24 23:45 BST

History coverage

70.1%

1,853 of 2,645 live listings have metadata

Last zone update

2026-06-24 22:45 BST

Authoritative BIND zone last modified

Live status, return code and TXT reason are reconciled directly against the BIND zone. An address is marked DELISTED only when a real delist timestamp, counter or audit event exists; otherwise a non-live historical address is OBSERVED. Repeat-offender totals are grouped by the latest sanitised attack source; complete event history is available only through the per-IP JSON feed and delist information. Apache activity cache updated 2026-06-24 23:45 BST.
BIND records: IPv4 A = 2,645 • IPv6 AAAA = 0 • TXT = 2,645 • SOA serial 2026062433.

Listings history

Live BIND entries plus observation and delisting history. Times use UK local GMT/BST.

Search Source Code Rows Clear

Showing 1,301–1,400 of 2,817 matching records.

IP	Status	Code	Reason	Last activity	Sources	Lists / Delists
173.230.150.73	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 243	12 Jun 03:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 243 First observed 2026-06-12 03:05:04 BST Last observed 2026-06-12 03:05:04 BST First listed 2026-06-12 03:05:04 BST Last listed 2026-06-12 03:05:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 03:05:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.184	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 02:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 02:50:03 BST Last observed 2026-06-12 02:50:03 BST First listed 2026-06-12 02:50:03 BST Last listed 2026-06-12 02:50:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 02:50:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
147.185.132.252	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 02:45 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-03-31 11:13:31 BST Last observed 2026-06-12 02:45:03 BST First listed 2026-06-12 02:45:03 BST Last listed 2026-06-12 02:45:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 02:45:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.142	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 02:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 02:40:04 BST Last observed 2026-06-12 02:40:04 BST First listed 2026-06-12 02:40:04 BST Last listed 2026-06-12 02:40:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 02:40:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
65.49.1.66	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 02:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-09 11:03:08 BST Last observed 2026-06-12 02:40:03 BST First listed 2026-06-12 02:40:03 BST Last listed 2026-06-12 02:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 02:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
65.49.1.75	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 02:35 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 02:35:03 BST Last observed 2026-06-12 02:35:03 BST First listed 2026-06-12 02:35:03 BST Last listed 2026-06-12 02:35:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 02:35:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
47.250.132.207	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 73	12 Jun 02:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 73 First observed 2026-06-12 02:00:07 BST Last observed 2026-06-12 02:00:07 BST First listed 2026-06-12 02:00:07 BST Last listed 2026-06-12 02:00:07 BST Last delisted — Last expired — Evidence expiry 2026-07-12 02:00:07 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
45.156.129.60	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 63	12 Jun 01:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 63 First observed 2026-02-14 08:15:39 GMT Last observed 2026-06-12 01:40:03 BST First listed 2026-06-12 01:40:03 BST Last listed 2026-06-12 01:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-12 01:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
147.185.132.111	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	12 Jun 01:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-12 01:20:04 BST Last observed 2026-06-12 01:20:04 BST First listed 2026-06-12 01:20:04 BST Last listed 2026-06-12 01:20:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 01:20:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.65.193.199	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 32	12 Jun 00:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 32 First observed 2026-04-16 04:16:05 BST Last observed 2026-06-12 00:30:04 BST First listed 2026-06-12 00:30:04 BST Last listed 2026-06-12 00:30:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 00:30:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.124.20.247	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 271	12 Jun 00:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 271 First observed 2026-06-12 00:25:04 BST Last observed 2026-06-12 00:25:04 BST First listed 2026-06-12 00:25:04 BST Last listed 2026-06-12 00:25:04 BST Last delisted — Last expired — Evidence expiry 2026-07-12 00:25:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
152.32.235.4	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 207	11 Jun 23:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 207 First observed 2026-06-11 23:25:03 BST Last observed 2026-06-11 23:25:03 BST First listed 2026-06-11 23:25:03 BST Last listed 2026-06-11 23:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 23:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
34.131.96.66	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 39	11 Jun 23:15 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 39 First observed 2026-06-11 23:15:03 BST Last observed 2026-06-11 23:15:03 BST First listed 2026-06-11 23:15:03 BST Last listed 2026-06-11 23:15:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 23:15:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
165.154.172.179	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 233	11 Jun 23:10 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 233 First observed 2026-06-11 23:10:03 BST Last observed 2026-06-11 23:10:03 BST First listed 2026-06-11 23:10:03 BST Last listed 2026-06-11 23:10:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 23:10:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
45.198.224.22	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 23:00 BST	threatmail	3 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-01 23:23:19 BST Last observed 2026-06-11 23:00:04 BST First listed 2026-06-09 14:45:03 BST Last listed 2026-06-11 23:00:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 23:00:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 3 / 0 Sanitised history JSON feed
198.235.24.97	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 22:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 22:30:03 BST Last observed 2026-06-11 22:30:03 BST First listed 2026-06-11 22:30:03 BST Last listed 2026-06-11 22:30:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 22:30:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.163.125.183	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 22:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 22:25:03 BST Last observed 2026-06-11 22:25:03 BST First listed 2026-06-11 22:25:03 BST Last listed 2026-06-11 22:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 22:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.60	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 22:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-04-09 16:55:36 BST Last observed 2026-06-11 22:00:05 BST First listed 2026-06-11 22:00:05 BST Last listed 2026-06-11 22:00:05 BST Last delisted — Last expired — Evidence expiry 2026-07-11 22:00:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
18.222.198.216	LISTED	127.0.0.4	Threat Prevention: Attempted Information Leak / ET SCAN MS Terminal Server Traffic on Non-standard Port	11 Jun 22:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Attempted Information Leak / ET SCAN MS Terminal Server Traffic on Non-standard Port First observed 2026-06-11 22:00:04 BST Last observed 2026-06-11 22:00:04 BST First listed 2026-06-11 22:00:04 BST Last listed 2026-06-11 22:00:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 22:00:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.150.192.63	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 20	11 Jun 21:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 20 First observed 2026-03-17 14:04:30 GMT Last observed 2026-06-11 21:30:03 BST First listed 2026-06-11 21:30:03 BST Last listed 2026-06-11 21:30:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 21:30:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
69.5.169.183	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 21:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-09 12:32:10 BST Last observed 2026-06-11 21:00:04 BST First listed 2026-06-11 21:00:04 BST Last listed 2026-06-11 21:00:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 21:00:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.172.135	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 20:55 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-04-08 14:46:25 BST Last observed 2026-06-11 20:55:02 BST First listed 2026-06-05 16:45:15 BST Last listed 2026-06-11 20:55:02 BST Last delisted — Last expired — Evidence expiry 2026-07-11 20:55:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
205.210.31.82	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 20:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 20:20:03 BST Last observed 2026-06-11 20:20:03 BST First listed 2026-06-11 20:20:03 BST Last listed 2026-06-11 20:20:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 20:20:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
167.94.146.52	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 231	11 Jun 19:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 231 First observed 2026-02-07 23:52:02 GMT Last observed 2026-06-11 19:25:03 BST First listed 2026-06-11 19:25:03 BST Last listed 2026-06-11 19:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 19:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.195.93	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 19:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-05-08 23:41:19 BST Last observed 2026-06-11 19:20:04 BST First listed 2026-06-11 19:20:04 BST Last listed 2026-06-11 19:20:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 19:20:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
147.185.132.58	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 197	11 Jun 19:05 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 197 First observed 2026-06-05 16:36:46 BST Last observed 2026-06-11 19:05:03 BST First listed 2026-06-05 16:36:46 BST Last listed 2026-06-11 19:05:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 19:05:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
69.5.169.234	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 18:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 18:55:05 BST Last observed 2026-06-11 18:55:05 BST First listed 2026-06-11 18:55:05 BST Last listed 2026-06-11 18:55:05 BST Last delisted — Last expired — Evidence expiry 2026-07-11 18:55:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
194.187.176.124	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 271	11 Jun 18:51 BST	web:post	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 271 First observed 2026-06-11 18:51:14 BST Last observed 2026-06-11 18:51:14 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-11 18:51:14 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
194.88.98.114	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 18:45 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 18:45:04 BST Last observed 2026-06-11 18:45:04 BST First listed 2026-06-11 18:45:04 BST Last listed 2026-06-11 18:45:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 18:45:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.29.49.93	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 28	11 Jun 18:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 28 First observed 2026-04-15 00:30:43 BST Last observed 2026-06-11 18:30:03 BST First listed 2026-06-11 18:30:03 BST Last listed 2026-06-11 18:30:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 18:30:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
69.5.169.131	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 17:35 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 17:35:03 BST Last observed 2026-06-11 17:35:03 BST First listed 2026-06-11 17:35:03 BST Last listed 2026-06-11 17:35:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 17:35:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.172.215	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 16:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 16:50:04 BST Last observed 2026-06-11 16:50:04 BST First listed 2026-06-11 16:50:04 BST Last listed 2026-06-11 16:50:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 16:50:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.163.125.220	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 15:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 15:30:03 BST Last observed 2026-06-11 15:30:03 BST First listed 2026-06-11 15:30:03 BST Last listed 2026-06-11 15:30:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 15:30:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
194.187.176.227	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 272	11 Jun 15:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 272 First observed 2026-02-14 08:49:19 GMT Last observed 2026-06-11 15:25:03 BST First listed 2026-06-11 15:25:03 BST Last listed 2026-06-11 15:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 18:51:17 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.14.73.238	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 19	11 Jun 14:25 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 19 First observed 2026-03-05 12:25:19 GMT Last observed 2026-06-11 14:25:03 BST First listed 2026-06-05 16:46:33 BST Last listed 2026-06-11 14:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 14:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
165.154.12.9	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 224	11 Jun 14:15 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 224 First observed 2026-06-11 14:15:04 BST Last observed 2026-06-11 14:15:04 BST First listed 2026-06-11 14:15:04 BST Last listed 2026-06-11 14:15:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 14:15:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.65.193.35	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 32	11 Jun 12:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 32 First observed 2026-06-11 12:50:03 BST Last observed 2026-06-11 12:50:03 BST First listed 2026-06-11 12:50:03 BST Last listed 2026-06-11 12:50:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 12:50:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
216.25.89.97	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 292	11 Jun 12:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 292 First observed 2026-06-11 12:40:04 BST Last observed 2026-06-11 12:40:04 BST First listed 2026-06-11 12:40:04 BST Last listed 2026-06-11 12:40:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 12:40:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
135.237.126.198	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 181	11 Jun 12:15 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 181 First observed 2026-06-11 12:15:04 BST Last observed 2026-06-11 12:15:04 BST First listed 2026-06-11 12:15:04 BST Last listed 2026-06-11 12:15:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 12:15:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
35.203.210.191	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 42	11 Jun 12:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 42 First observed 2026-06-11 12:00:05 BST Last observed 2026-06-11 12:00:05 BST First listed 2026-06-11 12:00:05 BST Last listed 2026-06-11 12:00:05 BST Last delisted — Last expired — Evidence expiry 2026-07-11 12:00:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
185.226.93.120	LISTED	127.0.0.4	Threat Prevention: access to a potentially vulnerable web application / GPL WEB_SERVER printenv access	11 Jun 12:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: access to a potentially vulnerable web application / GPL WEB_SERVER printenv access First observed 2026-06-11 12:00:03 BST Last observed 2026-06-11 12:00:03 BST First listed 2026-06-11 12:00:03 BST Last listed 2026-06-11 12:00:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 12:00:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
65.49.1.212	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 11:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-01 08:39:26 GMT Last observed 2026-06-11 11:55:05 BST First listed 2026-06-11 11:55:05 BST Last listed 2026-06-11 11:55:05 BST Last delisted — Last expired — Evidence expiry 2026-07-11 11:55:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
8.208.10.94	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 5	11 Jun 11:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 5 First observed 2026-06-11 11:55:03 BST Last observed 2026-06-11 11:55:03 BST First listed 2026-06-11 11:55:03 BST Last listed 2026-06-11 11:55:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 11:55:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
3.115.9.60	LISTED	127.0.0.4	Threat Prevention: Web Application Attack / ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)	11 Jun 11:35 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Web Application Attack / ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) First observed 2026-06-11 11:35:02 BST Last observed 2026-06-11 11:35:04 BST First listed 2026-06-11 11:35:02 BST Last listed 2026-06-11 11:35:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 11:35:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
40.76.116.231	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 54	11 Jun 11:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 54 First observed 2026-03-10 02:24:51 GMT Last observed 2026-06-11 11:20:02 BST First listed 2026-06-11 11:20:02 BST Last listed 2026-06-11 11:20:02 BST Last delisted — Last expired — Evidence expiry 2026-07-11 11:20:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
45.82.76.129	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 69	11 Jun 11:10 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 69 First observed 2026-06-11 11:10:02 BST Last observed 2026-06-11 11:10:02 BST First listed 2026-06-11 11:10:02 BST Last listed 2026-06-11 11:10:02 BST Last delisted — Last expired — Evidence expiry 2026-07-11 11:10:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.80	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 09:40 BST	threatmail	3 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-04-09 08:25:24 BST Last observed 2026-06-11 09:40:03 BST First listed 2026-06-05 17:06:51 BST Last listed 2026-06-11 09:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 09:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 3 / 0 Sanitised history JSON feed
64.62.156.87	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 09:35 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 09:35:04 BST Last observed 2026-06-11 09:35:04 BST First listed 2026-06-11 09:35:04 BST Last listed 2026-06-11 09:35:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 09:35:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.89	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 09:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-05-13 01:19:59 BST Last observed 2026-06-11 09:20:03 BST First listed 2026-06-11 09:20:03 BST Last listed 2026-06-11 09:20:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 09:20:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
162.250.126.206	LISTED	127.0.0.4	Threat Prevention: Web Application Attack / ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)	11 Jun 09:05 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Web Application Attack / ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) First observed 2026-06-11 09:05:04 BST Last observed 2026-06-11 09:05:05 BST First listed 2026-06-11 09:05:04 BST Last listed 2026-06-11 09:05:05 BST Last delisted — Last expired — Evidence expiry 2026-07-11 09:05:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
65.49.1.149	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 08:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-25 06:59:39 GMT Last observed 2026-06-11 08:50:04 BST First listed 2026-06-11 08:50:04 BST Last listed 2026-06-11 08:50:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 08:50:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.195.126	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 08:35 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 08:35:03 BST Last observed 2026-06-11 08:35:03 BST First listed 2026-06-11 08:35:03 BST Last listed 2026-06-11 08:35:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 12:06:00 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.197.23	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 07:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 07:55:03 BST Last observed 2026-06-11 07:55:03 BST First listed 2026-06-11 07:55:03 BST Last listed 2026-06-11 07:55:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 07:55:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.172.186	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 07:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-05-04 14:53:03 BST Last observed 2026-06-11 07:20:04 BST First listed 2026-06-11 07:20:04 BST Last listed 2026-06-11 07:20:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 07:20:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.197.153	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 07:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-04-21 08:32:45 BST Last observed 2026-06-11 07:00:04 BST First listed 2026-06-11 07:00:04 BST Last listed 2026-06-11 07:00:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 07:00:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
205.210.31.133	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 06:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 06:50:03 BST Last observed 2026-06-11 06:50:03 BST First listed 2026-06-11 06:50:03 BST Last listed 2026-06-11 06:50:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 06:50:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
20.55.87.180	LISTED	127.0.0.4	Threat Prevention: Web Application Attack / GPL WEB_SERVER .htpasswd access	11 Jun 06:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Web Application Attack / GPL WEB_SERVER .htpasswd access First observed 2026-06-11 06:20:03 BST Last observed 2026-06-11 06:20:03 BST First listed 2026-06-11 06:20:03 BST Last listed 2026-06-11 06:20:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 06:20:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
45.156.129.132	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 06:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-04 04:11:24 GMT Last observed 2026-06-11 06:00:05 BST First listed 2026-06-11 06:00:05 BST Last listed 2026-06-11 06:00:05 BST Last delisted — Last expired — Evidence expiry 2026-07-11 06:00:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
205.210.31.20	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 05:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-04-19 14:14:02 BST Last observed 2026-06-11 05:55:02 BST First listed 2026-06-11 05:55:02 BST Last listed 2026-06-11 05:55:02 BST Last delisted — Last expired — Evidence expiry 2026-07-11 05:55:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.197.97	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 05:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 05:50:04 BST Last observed 2026-06-11 05:50:04 BST First listed 2026-06-11 05:50:04 BST Last listed 2026-06-11 05:50:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 05:50:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
65.49.1.80	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 05:40 BST	threatmail	4 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-20 02:21:45 GMT Last observed 2026-06-11 05:40:04 BST First listed 2026-06-05 17:06:06 BST Last listed 2026-06-11 05:40:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 05:40:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 4 / 0 Sanitised history JSON feed
65.49.1.91	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 05:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 05:40:02 BST Last observed 2026-06-11 05:40:02 BST First listed 2026-06-11 05:40:02 BST Last listed 2026-06-11 05:40:02 BST Last delisted — Last expired — Evidence expiry 2026-07-11 05:40:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
157.230.81.1	LISTED	127.0.0.4	Threat Prevention: access to a potentially vulnerable web application / ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body	11 Jun 05:00 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: access to a potentially vulnerable web application / ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body First observed 2026-06-11 05:00:04 BST Last observed 2026-06-11 05:00:06 BST First listed 2026-06-11 05:00:04 BST Last listed 2026-06-11 05:00:06 BST Last delisted — Last expired — Evidence expiry 2026-07-11 05:00:06 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
198.235.24.204	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 04:30 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-08 17:35:03 BST Last observed 2026-06-11 04:30:03 BST First listed 2026-06-08 17:35:03 BST Last listed 2026-06-11 04:30:03 BST Last delisted — Last expired — Evidence expiry 2026-07-11 04:30:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
40.124.174.207	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60	11 Jun 03:21 BST	web:post	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60 First observed 2026-06-11 03:21:59 BST Last observed 2026-06-11 03:21:59 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-11 03:21:59 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
31.14.254.124	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 43	11 Jun 02:23 BST	web:post	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 43 First observed 2026-06-03 08:47:17 BST Last observed 2026-06-11 02:23:59 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-11 02:23:59 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
64.62.197.139	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 01:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 01:30:04 BST Last observed 2026-06-11 01:30:04 BST First listed 2026-06-11 01:30:04 BST Last listed 2026-06-11 01:30:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 01:30:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.85	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 01:24 BST	web:post	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 01:24:21 BST Last observed 2026-06-11 01:24:21 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-11 01:24:21 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.182	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 01:05 BST	threatmail	3 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-18 00:02:20 GMT Last observed 2026-06-11 01:05:07 BST First listed 2026-06-10 04:25:03 BST Last listed 2026-06-11 01:05:07 BST Last delisted — Last expired — Evidence expiry 2026-07-11 13:54:56 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 3 / 0 Sanitised history JSON feed
64.62.156.185	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 01:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-18 00:12:24 GMT Last observed 2026-06-11 01:05:06 BST First listed 2026-06-11 01:05:06 BST Last listed 2026-06-11 01:05:06 BST Last delisted — Last expired — Evidence expiry 2026-07-11 01:05:06 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
66.132.172.231	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	11 Jun 00:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-11 00:40:04 BST Last observed 2026-06-11 00:40:04 BST First listed 2026-06-11 00:40:04 BST Last listed 2026-06-11 00:40:04 BST Last delisted — Last expired — Evidence expiry 2026-07-11 00:40:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.207	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 23:10 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-09 03:30:03 BST Last observed 2026-06-10 23:10:03 BST First listed 2026-06-09 03:30:03 BST Last listed 2026-06-10 23:10:03 BST Last delisted — Last expired — Evidence expiry 2026-07-10 23:10:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
198.235.24.74	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 23:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 23:05:03 BST Last observed 2026-06-10 23:05:03 BST First listed 2026-06-10 23:05:03 BST Last listed 2026-06-10 23:05:03 BST Last delisted — Last expired — Evidence expiry 2026-07-10 23:05:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.84	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 23:00 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-03-07 14:08:36 GMT Last observed 2026-06-10 23:00:04 BST First listed 2026-06-05 17:10:23 BST Last listed 2026-06-10 23:00:04 BST Last delisted — Last expired — Evidence expiry 2026-07-10 23:00:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
45.156.129.191	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 21:45 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-03-12 04:44:36 GMT Last observed 2026-06-10 21:45:04 BST First listed 2026-06-10 21:45:04 BST Last listed 2026-06-10 21:45:04 BST Last delisted — Last expired — Evidence expiry 2026-07-10 21:45:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
205.210.31.87	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 21:45 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 21:45:02 BST Last observed 2026-06-10 21:45:02 BST First listed 2026-06-10 21:45:02 BST Last listed 2026-06-10 21:45:02 BST Last delisted — Last expired — Evidence expiry 2026-07-10 21:45:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.176	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 21:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-04-10 12:16:52 BST Last observed 2026-06-10 21:30:04 BST First listed 2026-06-10 21:30:04 BST Last listed 2026-06-10 21:30:04 BST Last delisted — Last expired — Evidence expiry 2026-07-10 21:30:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
205.210.31.194	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 20:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 20:25:03 BST Last observed 2026-06-10 20:25:03 BST First listed 2026-06-10 20:25:03 BST Last listed 2026-06-10 20:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-10 20:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.163.125.66	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 20:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 20:20:03 BST Last observed 2026-06-10 20:20:03 BST First listed 2026-06-10 20:20:03 BST Last listed 2026-06-10 20:20:03 BST Last delisted — Last expired — Evidence expiry 2026-07-10 20:20:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.248	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 19:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-05-08 00:49:22 BST Last observed 2026-06-10 19:25:03 BST First listed 2026-06-10 19:25:03 BST Last listed 2026-06-10 19:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-10 19:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.51	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 18:15 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-05-10 13:42:29 BST Last observed 2026-06-10 18:15:03 BST First listed 2026-06-08 09:30:02 BST Last listed 2026-06-10 18:15:03 BST Last delisted — Last expired — Evidence expiry 2026-07-10 18:15:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
66.132.186.166	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 16:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-05-02 14:21:05 BST Last observed 2026-06-10 16:40:03 BST First listed 2026-06-10 16:40:03 BST Last listed 2026-06-10 16:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-10 16:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
205.210.31.32	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 16:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-24 09:05:43 GMT Last observed 2026-06-10 16:05:04 BST First listed 2026-06-10 16:05:04 BST Last listed 2026-06-10 16:05:04 BST Last delisted — Last expired — Evidence expiry 2026-07-10 16:05:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
208.84.100.148	LISTED	127.0.0.4	Threat Prevention: Successful Credential Theft Detected / ET WEB_SPECIFIC_APPS Wordpress LiteSpeed Cache Plugin debug.log Access Attempt (CVE-2024-44000)	10 Jun 15:00 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Successful Credential Theft Detected / ET WEB_SPECIFIC_APPS Wordpress LiteSpeed Cache Plugin debug.log Access Attempt (CVE-2024-44000) First observed 2026-06-09 10:29:43 BST Last observed 2026-06-10 15:00:05 BST First listed 2026-06-10 15:00:05 BST Last listed 2026-06-10 15:00:05 BST Last delisted — Last expired — Evidence expiry 2026-07-10 15:00:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.197.21	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 14:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 14:25:03 BST Last observed 2026-06-10 14:25:03 BST First listed 2026-06-10 14:25:03 BST Last listed 2026-06-10 14:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-10 14:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
216.180.246.80	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 14:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 14:05:04 BST Last observed 2026-06-10 14:05:04 BST First listed 2026-06-10 14:05:04 BST Last listed 2026-06-10 14:05:04 BST Last delisted — Last expired — Evidence expiry 2026-07-10 14:05:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
216.180.246.10	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 13:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 13:50:03 BST Last observed 2026-06-10 13:50:03 BST First listed 2026-06-10 13:50:03 BST Last listed 2026-06-10 13:50:03 BST Last delisted — Last expired — Evidence expiry 2026-07-10 13:50:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
205.210.31.202	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 13:05 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-03-04 19:16:12 GMT Last observed 2026-06-10 13:05:51 BST First listed 2026-06-10 13:05:51 BST Last listed 2026-06-10 13:05:51 BST Last delisted — Last expired — Evidence expiry 2026-07-10 13:05:51 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
216.180.246.29	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 12:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 12:30:03 BST Last observed 2026-06-10 12:30:03 BST First listed 2026-06-10 12:30:03 BST Last listed 2026-06-10 12:30:03 BST Last delisted — Last expired — Evidence expiry 2026-07-10 12:30:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
216.180.246.76	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 12:20 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 10:30:04 BST Last observed 2026-06-10 12:20:04 BST First listed 2026-06-10 10:30:04 BST Last listed 2026-06-10 12:20:04 BST Last delisted — Last expired — Evidence expiry 2026-07-10 12:20:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
52.238.26.244	LISTED	127.0.0.4	Threat Prevention: Web Application Attack / GPL WEB_SERVER .htpasswd access	10 Jun 11:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Web Application Attack / GPL WEB_SERVER .htpasswd access First observed 2026-06-10 11:30:03 BST Last observed 2026-06-10 11:30:03 BST First listed 2026-06-10 11:30:03 BST Last listed 2026-06-10 11:30:03 BST Last delisted — Last expired — Evidence expiry 2026-07-10 11:30:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
216.180.246.118	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 11:20 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 11:20:03 BST Last observed 2026-06-10 11:20:03 BST First listed 2026-06-10 11:20:03 BST Last listed 2026-06-10 11:20:03 BST Last delisted — Last expired — Evidence expiry 2026-07-10 11:20:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
216.180.246.49	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 10:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 10:40:04 BST Last observed 2026-06-10 10:40:04 BST First listed 2026-06-10 10:40:04 BST Last listed 2026-06-10 10:40:04 BST Last delisted — Last expired — Evidence expiry 2026-07-10 10:40:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
208.84.100.11	LISTED	127.0.0.4	Threat Prevention: Successful Credential Theft Detected / ET WEB_SPECIFIC_APPS Wordpress LiteSpeed Cache Plugin debug.log Access Attempt (CVE-2024-44000)	10 Jun 10:40 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Successful Credential Theft Detected / ET WEB_SPECIFIC_APPS Wordpress LiteSpeed Cache Plugin debug.log Access Attempt (CVE-2024-44000) First observed 2026-05-21 07:57:32 BST Last observed 2026-06-10 10:40:03 BST First listed 2026-06-10 10:40:03 BST Last listed 2026-06-10 10:40:03 BST Last delisted — Last expired — Evidence expiry 2026-07-10 10:40:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
193.202.11.112	LISTED	127.0.0.4	Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt	10 Jun 10:30 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt First observed 2026-06-10 10:30:05 BST Last observed 2026-06-10 10:30:05 BST First listed 2026-06-10 10:30:05 BST Last listed 2026-06-10 10:30:05 BST Last delisted — Last expired — Evidence expiry 2026-07-10 10:30:05 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
198.235.24.105	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 10:25 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 10:25:03 BST Last observed 2026-06-10 10:25:03 BST First listed 2026-06-10 10:25:03 BST Last listed 2026-06-10 10:25:03 BST Last delisted — Last expired — Evidence expiry 2026-07-10 10:25:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.231	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 08:55 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-03-13 02:40:29 GMT Last observed 2026-06-10 08:55:02 BST First listed 2026-06-10 08:55:02 BST Last listed 2026-06-10 08:55:02 BST Last delisted — Last expired — Evidence expiry 2026-07-10 08:55:02 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
64.62.156.222	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 08:50 BST	threatmail	2 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-02-24 00:03:03 GMT Last observed 2026-06-10 08:50:04 BST First listed 2026-06-09 15:40:05 BST Last listed 2026-06-10 08:50:04 BST Last delisted — Last expired — Evidence expiry 2026-07-10 08:50:04 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 2 / 0 Sanitised history JSON feed
64.62.156.230	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 08:50 BST	threatmail	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 08:50:03 BST Last observed 2026-06-10 08:50:03 BST First listed 2026-06-10 08:50:03 BST Last listed 2026-06-10 08:50:03 BST Last delisted — Last expired — Evidence expiry 2026-07-10 08:50:03 BST Confidence 85/100 high Sources threatmail Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed
65.49.1.223	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	10 Jun 08:44 BST	web:post	1 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed 2026-06-10 08:44:33 BST Last observed 2026-06-10 08:44:33 BST First listed — Last listed — Last delisted — Last expired — Evidence expiry 2026-07-10 08:44:33 BST Confidence 85/100 high Sources web:post Return code 127.0.0.4 Lists / Delists 1 / 0 Sanitised history JSON feed

Lists / Delists shows list_count and delist_count. OBSERVED means the IP exists in history but is not currently in BIND and has no recorded delist event. Trusted addresses in /etc/scotnet/dnsbl-public-hide.txt are omitted from this public history table.