Transparency

BIND is the source of truth for live listings • meta.json records observation and delisting history

Transparency snapshot

Back to DNSBL
Active listings
2,637
Live from BIND zone (A + AAAA)
Threat activity (7 days)
44
Unique suspicious public IPs • 2,280 matched events • 5,567 requests evaluated
Repeat offenders
119
Threatmail: 70 • Apache security: 49
Lifecycle
Active
Pending review: 0 • Expiring ≤7d: 31 • Expired last run: 0
Delisted records
4
1 in the last 7 days • unique IPs with a recorded delist
Mail feeds
Active
Threatmail: active
User reports: not enabled • last 2026-06-24 14:20 BST
History coverage
70.0%
1,845 of 2,637 live listings have metadata
Last zone update
2026-06-24 13:55 BST
Authoritative BIND zone last modified
Live status, return code and TXT reason are reconciled directly against the BIND zone. An address is marked DELISTED only when a real delist timestamp, counter or audit event exists; otherwise a non-live historical address is OBSERVED. Repeat-offender totals are grouped by the latest sanitised attack source; complete event history is available only through the per-IP JSON feed and delist information. Apache activity cache updated 2026-06-24 14:20 BST.
BIND records: IPv4 A = 2,637 • IPv6 AAAA = 0 • TXT = 2,637 • SOA serial 2026062422.

Listings history

Live BIND entries plus observation and delisting history. Times use UK local GMT/BST.

Clear

Showing 501–600 of 2,808 matching records.

IP Status Code Reason Last activity Sources Lists / Delists Details
20.12.213.50 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 5 / 0
100.29.192.13 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 135 threatmail 1 / 0
52.20.198.190 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 22 / 0
45.159.230.92 LISTED 127.0.0.8 Apache security: repeated explicit application probes apache-security 3 / 0
198.235.24.221 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
193.24.211.247 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 8 / 0
198.235.24.90 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.65.217.91 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 29 threatmail 1 / 0
81.0.219.249 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 2 / 0
101.36.104.242 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt apache-security threatmail 5 / 0
31.132.90.3 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt threatmail 1 / 0
69.5.169.177 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
198.235.24.118 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.127.224.63 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 18 threatmail 1 / 0
8.216.8.151 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 12 threatmail 1 / 0
103.147.237.208 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security threatmail 2 / 0
79.124.49.70 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 131 threatmail 2 / 0
185.177.72.30 LISTED 127.0.0.4 Apache security: secret_probe apache-security 1 / 0
205.210.31.211 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
23.92.25.114 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
147.185.132.240 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 196 threatmail 3 / 0
198.235.24.245 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
69.5.169.254 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
66.132.172.228 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
143.198.31.2 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 181 threatmail 1 / 0
205.210.31.143 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
193.163.125.188 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
142.248.151.237 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 180 threatmail 1 / 0
20.65.195.59 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 29 threatmail 1 / 0
124.29.194.182 LISTED 127.0.0.4 Threat Prevention: Attempted Information Leak / ET EXPLOIT Netgear DGN Remote Command Execution threatmail 1 / 0
165.227.47.218 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 228 threatmail 3 / 0
130.131.162.184 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 174 threatmail 3 / 0
143.244.57.90 LISTED 127.0.0.8 Apache security: repeated explicit application probes apache-security 3 / 0
198.235.24.53 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.80.83.115 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 30 threatmail 1 / 0
110.37.76.196 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
147.185.132.138 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
18.222.187.149 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / GPL WEB_SERVER .htpasswd access threatmail 1 / 0
198.235.24.217 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
172.185.40.47 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 241 apache-security 2 / 0
13.89.124.220 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 14 threatmail 1 / 0
20.226.32.175 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 5 / 0
195.230.103.250 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 278 threatmail 4 / 0
199.45.154.190 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
77.83.39.94 LISTED 127.0.0.8 Apache security: repeated explicit application probes apache-security 2 / 0
47.88.8.116 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 88 threatmail 1 / 0
20.186.232.154 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 24 threatmail 1 / 0
147.185.132.46 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
119.157.76.131 LISTED 127.0.0.4 Threat Prevention: Attempted Information Leak / ET EXPLOIT Netgear DGN Remote Command Execution threatmail 1 / 0
185.236.20.134 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 2 / 0
69.5.169.140 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
198.235.24.106 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
194.164.107.6 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 273 threatmail 4 / 0
102.220.160.153 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 2 / 0
203.55.131.5 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 283 threatmail 2 / 0
205.210.31.204 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
66.132.172.185 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
79.76.58.113 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt apache-security threatmail 4 / 0
198.235.24.101 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
193.163.125.38 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
64.62.156.205 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 100 threatmail 1 / 0
64.89.163.9 LISTED 127.0.0.4 Bruit Force Attk postfix 3 / 0
102.220.160.154 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 2 / 0
64.62.197.197 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
64.62.197.199 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
82.132.216.161 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
45.156.128.15 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
8.136.189.162 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
45.148.10.119 LISTED 127.0.0.4 Apache security: path_traversal apache-security 1 / 0
205.210.31.70 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 3 / 0
193.163.125.94 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.151.2.122 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 7 / 0
64.62.197.131 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
150.107.38.38 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 198 threatmail 1 / 0
20.168.14.25 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 21 threatmail 1 / 0
165.154.206.180 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 221 threatmail 1 / 0
20.226.116.19 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 6 / 0
64.62.197.109 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
45.156.129.46 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.9.25.20 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 13 / 0
205.210.31.173 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
20.168.120.210 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 20 threatmail 1 / 0
66.132.186.220 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.9.17.155 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 2 / 0
198.235.24.77 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
143.42.1.123 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 181 threatmail 1 / 0
40.124.175.234 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 50 threatmail 1 / 0
66.132.172.142 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
167.172.38.216 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
64.62.156.39 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 101 threatmail 1 / 0
20.65.137.167 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 27 threatmail 1 / 0
64.62.197.28 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
74.249.177.110 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 115 threatmail 1 / 0
199.45.154.140 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.226.2.115 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 10 / 0
45.156.128.41 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 62 threatmail 3 / 0
31.14.254.94 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 33 threatmail 1 / 0
172.234.192.12 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 235 threatmail 1 / 0
20.12.202.181 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 4 / 0
4.201.225.141 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0

Lists / Delists shows list_count and delist_count. OBSERVED means the IP exists in history but is not currently in BIND and has no recorded delist event. Trusted addresses in /etc/scotnet/dnsbl-public-hide.txt are omitted from this public history table.