Transparency

BIND is the source of truth for live listings • meta.json records observation and delisting history

Transparency snapshot

Back to DNSBL
Active listings
2,639
Live from BIND zone (A + AAAA)
Threat activity (7 days)
48
Unique suspicious public IPs • 2,805 matched events • 6,890 requests evaluated
Repeat offenders
119
Threatmail: 70 • Apache security: 49
Lifecycle
Active
Pending review: 0 • Expiring ≤7d: 31 • Expired last run: 0
Delisted records
4
1 in the last 7 days • unique IPs with a recorded delist
Mail feeds
Active
Threatmail: active
User reports: not enabled • last 2026-06-24 16:30 BST
History coverage
70.0%
1,847 of 2,639 live listings have metadata
Last zone update
2026-06-24 16:05 BST
Authoritative BIND zone last modified
Live status, return code and TXT reason are reconciled directly against the BIND zone. An address is marked DELISTED only when a real delist timestamp, counter or audit event exists; otherwise a non-live historical address is OBSERVED. Repeat-offender totals are grouped by the latest sanitised attack source; complete event history is available only through the per-IP JSON feed and delist information. Apache activity cache updated 2026-06-24 16:30 BST.
BIND records: IPv4 A = 2,639 • IPv6 AAAA = 0 • TXT = 2,639 • SOA serial 2026062424.

Listings history

Live BIND entries plus observation and delisting history. Times use UK local GMT/BST.

Clear

Showing 701–800 of 2,810 matching records.

IP Status Code Reason Last activity Sources Lists / Delists Details
104.128.144.209 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 141 threatmail 1 / 0
45.205.1.61 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
135.237.126.217 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 179 threatmail 1 / 0
45.148.10.120 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
35.78.108.193 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / GPL WEB_SERVER .htpasswd access threatmail 1 / 0
18.201.121.25 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
40.124.175.188 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 50 threatmail 1 / 0
90.84.168.147 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
3.129.187.38 LISTED 127.0.0.4 Threat Prevention: Attempted Information Leak / ET SCAN MS Terminal Server Traffic on Non-standard Port threatmail 1 / 0
54.229.95.22 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
3.255.208.51 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
71.6.199.87 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 119 threatmail 2 / 0
176.65.139.236 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 3 / 0
91.92.42.248 LISTED 127.0.0.8 Apache security: repeated explicit application probes apache-security 2 / 0
198.235.24.38 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
198.235.24.69 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 3 / 0
77.90.185.97 LISTED 127.0.0.8 Apache security: repeated explicit application probes apache-security 3 / 0
146.56.104.33 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 2 / 0
97.107.131.17 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 134 threatmail 1 / 0
198.50.202.93 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt apache-security threatmail 2 / 0
16.52.30.189 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
20.168.13.53 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 21 threatmail 1 / 0
176.65.139.233 LISTED 127.0.0.8 Apache security: secret_probe apache-security threatmail 3 / 0
193.163.125.91 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
147.185.132.61 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
193.163.125.95 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
148.66.142.9 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
193.163.125.137 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
178.128.66.109 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 241 threatmail 1 / 0
62.60.130.228 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 2 / 0
147.185.132.43 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
147.185.132.243 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
45.84.107.17 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
103.146.202.144 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
43.110.38.5 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 52 threatmail 1 / 0
34.186.33.29 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
45.148.10.62 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
66.132.186.206 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
64.62.156.122 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
47.254.142.61 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 76 threatmail 1 / 0
172.173.67.22 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
45.148.10.15 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
47.79.37.117 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 82 threatmail 1 / 0
82.132.216.196 LISTED 127.0.0.8 Apache security: device_api_probe apache-security 10 / 0
65.49.1.114 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 106 threatmail 1 / 0
47.253.116.19 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 92 threatmail 1 / 0
194.187.176.13 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 267 threatmail 1 / 0
216.226.76.10 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 289 threatmail 4 / 0
5.226.140.114 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 3 threatmail 1 / 0
153.117.40.213 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
198.235.24.102 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
198.235.24.241 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
104.199.127.160 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
202.71.141.170 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 281 threatmail 2 / 0
205.210.31.5 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
91.234.7.115 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
69.5.169.167 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
69.5.169.193 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
147.182.200.94 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
198.235.24.141 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
216.180.246.181 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 3 / 0
34.245.86.32 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
185.236.20.195 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
199.45.155.111 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 278 threatmail 1 / 0
147.182.147.51 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 188 threatmail 1 / 0
146.190.164.150 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / GPL WEB_SERVER .htpasswd access threatmail 1 / 0
209.38.203.80 LISTED 127.0.0.4 Threat Prevention: Attempted Information Leak / ET SCAN MS Terminal Server Traffic on Non-standard Port threatmail 1 / 0
85.111.68.99 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
193.163.125.157 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
193.163.125.168 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
175.107.208.203 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
147.185.132.162 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
172.232.108.36 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 15 / 0
85.90.246.159 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 122 threatmail 2 / 0
216.226.76.30 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 289 threatmail 4 / 0
34.38.116.244 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
45.82.76.127 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 61 threatmail 1 / 0
143.110.247.160 LISTED 127.0.0.4 Apache security: path_traversal apache-security 1 / 0
216.180.246.238 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 287 threatmail 1 / 0
142.93.56.216 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
198.235.24.113 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
64.62.197.8 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
203.55.131.4 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 284 threatmail 2 / 0
20.65.193.150 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 27 threatmail 1 / 0
74.249.128.217 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 115 threatmail 1 / 0
47.251.93.227 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 92 threatmail 2 / 0
198.235.24.171 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
205.210.31.75 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
52.200.76.145 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 2 / 0
147.185.132.16 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 191 threatmail 1 / 0
66.132.224.16 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 108 threatmail 1 / 0
217.142.227.18 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
205.210.31.192 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
45.156.128.45 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 59 threatmail 3 / 0
143.198.44.226 LISTED 127.0.0.4 Apache security: path_traversal apache-security 1 / 0
45.156.128.131 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 59 threatmail 3 / 0
64.62.197.118 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
64.62.197.77 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
64.62.197.91 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 105 threatmail 1 / 0
118.26.39.231 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 162 threatmail 1 / 0

Lists / Delists shows list_count and delist_count. OBSERVED means the IP exists in history but is not currently in BIND and has no recorded delist event. Trusted addresses in /etc/scotnet/dnsbl-public-hide.txt are omitted from this public history table.