Transparency

BIND is the source of truth for live listings • meta.json records observation and delisting history

Transparency snapshot

Back to DNSBL
Active listings
2,638
Live from BIND zone (A + AAAA)
Threat activity (7 days)
45
Unique suspicious public IPs • 2,347 matched events • 5,879 requests evaluated
Repeat offenders
119
Threatmail: 70 • Apache security: 49
Lifecycle
Active
Pending review: 0 • Expiring ≤7d: 31 • Expired last run: 0
Delisted records
4
1 in the last 7 days • unique IPs with a recorded delist
Mail feeds
Active
Threatmail: active, 1 new
User reports: not enabled • last 2026-06-24 15:30 BST
History coverage
69.9%
1,845 of 2,638 live listings have metadata
Last zone update
2026-06-24 15:30 BST
Authoritative BIND zone last modified
Live status, return code and TXT reason are reconciled directly against the BIND zone. An address is marked DELISTED only when a real delist timestamp, counter or audit event exists; otherwise a non-live historical address is OBSERVED. Repeat-offender totals are grouped by the latest sanitised attack source; complete event history is available only through the per-IP JSON feed and delist information. Apache activity cache updated 2026-06-24 15:30 BST.
BIND records: IPv4 A = 2,638 • IPv6 AAAA = 0 • TXT = 2,638 • SOA serial 2026062423.

Listings history

Live BIND entries plus observation and delisting history. Times use UK local GMT/BST.

Clear

Showing 601–700 of 2,808 matching records.

IP Status Code Reason Last activity Sources Lists / Delists Details
20.118.217.181 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
20.15.164.68 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 19 threatmail 1 / 0
130.131.163.217 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 176 apache-security 1 / 0
147.185.132.82 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
46.116.229.185 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
41.157.105.92 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
172.202.104.157 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
20.168.113.228 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 27 apache-security 1 / 0
185.93.89.167 LISTED 127.0.0.8 Apache security: repeated explicit application probes apache-security 2 / 0
66.132.172.138 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 3 / 0
20.197.232.12 LISTED 127.0.0.4 Apache security: distinct 4xx path scan apache-security 3 / 0
40.85.241.15 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 3 / 0
205.210.31.240 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
94.255.129.245 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
45.156.129.54 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
205.210.31.195 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.169.107.229 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 23 threatmail 1 / 0
193.163.125.61 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
193.163.125.234 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
208.84.102.181 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
178.20.210.137 LISTED 127.0.0.4 Threat Prevention: Attempted Information Leak / ET SCAN MS Terminal Server Traffic on Non-standard Port threatmail 2 / 0
172.245.16.13 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 244 threatmail 2 / 0
135.237.125.213 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 176 threatmail 1 / 0
176.65.139.55 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
101.47.8.187 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
172.203.251.111 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 234 threatmail 1 / 0
205.210.31.144 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
167.94.145.24 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
45.156.128.129 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
198.235.24.35 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
91.230.168.218 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
20.250.14.139 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 2 / 0
103.163.118.148 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 4 / 0
176.193.141.80 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
20.104.248.142 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 5 / 0
175.107.2.161 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
69.5.169.73 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
69.5.169.69 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.9.34.144 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 3 / 0
68.69.177.102 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 109 threatmail 1 / 0
66.132.172.227 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
199.45.154.32 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 5 / 0
20.65.202.2 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 29 threatmail 1 / 0
65.49.20.73 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 107 threatmail 1 / 0
66.132.186.172 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.98.136.63 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 31 threatmail 1 / 0
66.132.172.179 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
8.209.236.13 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
20.65.193.234 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 28 threatmail 1 / 0
64.62.197.222 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
64.62.197.226 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
18.225.223.18 LISTED 127.0.0.4 Apache security: path_traversal apache-security 1 / 0
64.62.197.214 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.104.75.74 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 4 / 0
162.216.149.37 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 210 threatmail 1 / 0
66.240.236.119 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 109 threatmail 2 / 0
193.163.125.253 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
208.84.100.201 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
217.154.61.249 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt apache-security threatmail 3 / 0
185.242.226.70 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
158.158.104.28 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 3 / 0
4.204.204.10 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
47.89.231.26 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 88 threatmail 1 / 0
110.36.77.17 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
66.132.186.199 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
66.175.212.77 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 108 threatmail 1 / 0
170.80.48.16 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 228 threatmail 1 / 0
64.62.156.66 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
64.62.156.70 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 101 threatmail 1 / 0
64.62.197.176 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
64.62.197.183 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
205.210.31.212 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
101.53.225.63 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
147.185.132.222 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
216.25.89.134 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 290 threatmail 3 / 0
135.237.126.244 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 177 threatmail 1 / 0
150.107.38.195 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 198 threatmail 1 / 0
207.241.173.38 LISTED 127.0.0.4 Apache security: secret_probe apache-security 2 / 0
64.62.197.40 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
54.171.140.28 LISTED 127.0.0.4 Apache security: path_traversal apache-security 1 / 0
46.101.229.179 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
185.211.94.76 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt apache-security threatmail 2 / 0
66.132.186.218 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
146.190.145.217 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
64.62.197.182 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
64.62.197.195 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
147.185.132.81 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
66.132.172.176 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
147.93.158.72 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
208.84.100.18 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
66.132.186.205 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
66.240.223.240 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 112 threatmail 2 / 0
216.226.76.20 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 289 threatmail 5 / 0
69.5.169.233 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 126 threatmail 2 / 0
199.45.154.189 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
199.45.154.180 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 3 / 0
198.235.24.109 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 4 / 0
185.242.226.33 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
104.128.144.209 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 141 threatmail 1 / 0
45.205.1.61 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0

Lists / Delists shows list_count and delist_count. OBSERVED means the IP exists in history but is not currently in BIND and has no recorded delist event. Trusted addresses in /etc/scotnet/dnsbl-public-hide.txt are omitted from this public history table.