ScotNet DNSBL • Transparency

Transparency snapshot

Back to DNSBL

Active listings

2,657

Live from BIND zone (A + AAAA)

Threat activity (7 days)

Unique suspicious public IPs • 6,363 matched events • 12,639 requests evaluated

Repeat offenders

120

Threatmail: 71 • Apache security: 49

Lifecycle

Active

Pending review: 0 • Expiring ≤7d: 35 • Expired last run: 0

Delisted records

1 in the last 7 days • unique IPs with a recorded delist

Mail feeds

Active

Threatmail: active, 1 new
User reports: not enabled • last 2026-06-25 20:00 BST

History coverage

70.3%

1,867 of 2,657 live listings have metadata

Last zone update

2026-06-25 20:00 BST

Authoritative BIND zone last modified

Live status, return code and TXT reason are reconciled directly against the BIND zone. An address is marked DELISTED only when a real delist timestamp, counter or audit event exists; otherwise a non-live historical address is OBSERVED. Repeat-offender totals are grouped by the latest sanitised attack source; complete event history is available only through the per-IP JSON feed and delist information. Apache activity cache updated 2026-06-25 20:00 BST.
BIND records: IPv4 A = 2,657 • IPv6 AAAA = 0 • TXT = 2,657 • SOA serial 2026062518.

Listings history

Live BIND entries plus observation and delisting history. Times use UK local GMT/BST.

Search Source Code Rows Clear

Showing 2,801–2,830 of 2,830 matching records.

IP	Status	Code	Reason	Last activity	Sources	Lists / Delists
8.211.162.45	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 7	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 7 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
8.211.29.198	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 9	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 9 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
8.211.46.23	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 10	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 10 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
8.216.0.71	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 8	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 8 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
8.216.11.0	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 9	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 9 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
8.216.13.201	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 11	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 11 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
8.216.7.66	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 12	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 12 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
8.216.8.251	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 15	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 15 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
81.19.219.199	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 122	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 122 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
83.244.54.86	LISTED	127.0.0.4	Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound	—	—	0 / 0
Full evidence / reason Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
84.242.53.126	LISTED	127.0.0.4	Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound	—	—	0 / 0
Full evidence / reason Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
84.242.53.196	LISTED	127.0.0.4	Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound	—	—	0 / 0
Full evidence / reason Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
84.242.53.23	LISTED	127.0.0.4	Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound	—	—	0 / 0
Full evidence / reason Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
84.242.53.36	LISTED	127.0.0.4	Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound	—	—	0 / 0
Full evidence / reason Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
84.242.53.5	LISTED	127.0.0.4	Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound	—	—	0 / 0
Full evidence / reason Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
84.242.53.87	LISTED	127.0.0.4	Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound	—	—	0 / 0
Full evidence / reason Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
89.37.172.133	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 128	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 128 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
89.37.172.156	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 129	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 129 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
9.234.10.190	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 14	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 14 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
91.230.168.186	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 133	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 133 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
91.230.168.199	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 132	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 132 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
91.230.168.36	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
91.230.168.5	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 133	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 133 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
91.230.168.78	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 134	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 134 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
94.156.152.50	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 138	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 138 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
95.173.161.147	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 139	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 139 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
96.35.105.68	LISTED	127.0.0.4	Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound	—	—	0 / 0
Full evidence / reason Threat Prevention: Potentially Bad Traffic / ET DOS DNS Amplification Attack Inbound First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
98.81.156.78	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 153	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 153 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
98.93.245.202	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 140	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 140 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed
98.93.67.8	LISTED	127.0.0.4	Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 153	—	—	0 / 0
Full evidence / reason Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 153 First observed — Last observed — First listed — Last listed — Last delisted — Last expired — Evidence expiry — Confidence — Sources — Return code 127.0.0.4 Lists / Delists 0 / 0 Sanitised history JSON feed

Lists / Delists shows list_count and delist_count. OBSERVED means the IP exists in history but is not currently in BIND and has no recorded delist event. Trusted addresses in /etc/scotnet/dnsbl-public-hide.txt are omitted from this public history table.