Transparency

BIND is the source of truth for live listings • meta.json records observation and delisting history

Transparency snapshot

Back to DNSBL
Active listings
2,642
Live from BIND zone (A + AAAA)
Threat activity (7 days)
52
Unique suspicious public IPs • 3,514 matched events • 8,679 requests evaluated
Repeat offenders
120
Threatmail: 71 • Apache security: 49
Lifecycle
Active
Pending review: 0 • Expiring ≤7d: 32 • Expired last run: 0
Delisted records
4
1 in the last 7 days • unique IPs with a recorded delist
Mail feeds
Active
Threatmail: active
User reports: not enabled • last 2026-06-24 17:45 BST
History coverage
70.0%
1,850 of 2,642 live listings have metadata
Last zone update
2026-06-24 17:20 BST
Authoritative BIND zone last modified
Live status, return code and TXT reason are reconciled directly against the BIND zone. An address is marked DELISTED only when a real delist timestamp, counter or audit event exists; otherwise a non-live historical address is OBSERVED. Repeat-offender totals are grouped by the latest sanitised attack source; complete event history is available only through the per-IP JSON feed and delist information. Apache activity cache updated 2026-06-24 17:45 BST.
BIND records: IPv4 A = 2,642 • IPv6 AAAA = 0 • TXT = 2,642 • SOA serial 2026062428.

Listings history

Live BIND entries plus observation and delisting history. Times use UK local GMT/BST.

Clear

Showing 801–900 of 2,813 matching records.

IP Status Code Reason Last activity Sources Lists / Delists Details
64.62.197.77 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
64.62.197.91 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 105 threatmail 1 / 0
118.26.39.231 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 162 threatmail 1 / 0
146.190.166.168 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 187 threatmail 1 / 0
20.197.235.71 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 5 / 0
20.104.205.212 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 3 / 0
125.20.210.182 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 173 threatmail 1 / 0
212.127.90.201 LISTED 127.0.0.4 Apache security: path_traversal apache-security threatmail 2 / 0
45.156.128.126 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 61 threatmail 1 / 0
45.156.128.47 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 62 threatmail 1 / 0
195.230.103.243 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 278 threatmail 1 / 0
66.240.205.34 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 10 / 0
192.253.248.169 LISTED 127.0.0.8 Apache security: repeated explicit application probes apache-security 3 / 0
199.45.154.187 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
74.235.188.96 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 115 threatmail 1 / 0
172.212.158.185 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
71.6.134.230 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 117 threatmail 6 / 0
185.242.226.19 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
45.156.129.189 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
45.156.129.190 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
20.29.23.176 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 28 threatmail 1 / 0
66.132.172.195 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
195.140.214.23 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 271 threatmail 1 / 0
195.178.110.2 LISTED 127.0.0.8 Apache security: repeated explicit application probes apache-security 7 / 0
195.184.76.10 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 272 threatmail 1 / 0
164.68.108.70 LISTED 127.0.0.4 Apache security: path_traversal apache-security 1 / 0
45.82.76.124 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 61 threatmail 1 / 0
40.85.218.222 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
20.226.80.139 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 2 / 0
172.212.187.180 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
95.214.55.226 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 2 / 0
16.58.56.214 LISTED 127.0.0.4 Threat Prevention: Attempted Information Leak / ET SCAN MS Terminal Server Traffic on Non-standard Port threatmail 1 / 0
204.136.11.161 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt threatmail 1 / 0
193.163.125.37 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
100.29.192.113 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 134 threatmail 1 / 0
20.118.32.59 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 17 threatmail 1 / 0
198.235.24.185 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
195.178.110.246 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
178.18.244.24 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
162.144.121.110 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
176.65.139.220 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
198.235.24.114 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
34.182.202.79 LISTED 127.0.0.4 Apache security: secret_probe apache-security 1 / 0
45.156.129.139 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
45.156.129.138 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 1 / 0
69.5.169.9 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
151.243.150.23 LISTED 127.0.0.8 Repeat offender: 3 unique events/7d, 3/30d threatmail 10 / 0
205.210.31.231 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
147.185.132.204 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
205.210.31.67 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 3 / 0
91.199.236.33 LISTED 127.0.0.4 Apache security: framework_exploit_probe apache-security 2 / 0
195.184.76.67 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 279 threatmail 1 / 0
20.116.17.49 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
195.184.76.1 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 275 threatmail 7 / 0
40.70.87.213 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
68.155.145.124 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
52.238.213.109 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 2 / 0
20.106.79.115 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
207.241.173.113 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security threatmail 2 / 0
20.65.193.225 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 28 threatmail 1 / 0
198.235.24.12 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
176.65.139.238 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
66.132.172.218 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.220.14.54 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 1 / 0
82.132.217.23 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 5 / 0
66.132.186.252 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
195.230.103.246 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 278 threatmail 1 / 0
147.185.132.195 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
198.235.24.98 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
20.168.122.53 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 21 threatmail 1 / 0
182.126.95.192 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 1 / 0
71.6.232.24 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 117 threatmail 1 / 0
198.235.24.200 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
65.49.1.154 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
82.132.216.62 LISTED 127.0.0.4 Apache security: device_api_probe apache-security 2 / 0
20.65.195.63 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 29 threatmail 1 / 0
64.62.197.173 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
132.196.99.64 LISTED 127.0.0.8 Apache security: shell_backdoor_probe apache-security 4 / 0
45.79.67.140 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 60 threatmail 1 / 0
20.102.91.36 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 17 threatmail 1 / 0
217.154.9.224 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 2 / 0
65.49.1.143 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 106 threatmail 1 / 0
65.49.1.142 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
13.89.124.217 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 14 threatmail 1 / 0
35.216.140.3 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 44 threatmail 1 / 0
20.163.2.151 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 20 threatmail 1 / 0
20.104.198.19 LISTED 127.0.0.4 Apache security: shell_backdoor_probe apache-security 3 / 0
216.25.89.122 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 288 threatmail 2 / 0
205.210.31.74 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
217.179.7.200 LISTED 127.0.0.4 Apache security: path_traversal apache-security 1 / 0
64.62.197.231 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
20.81.47.184 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 30 threatmail 1 / 0
81.226.129.67 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt threatmail 2 / 0
193.163.125.178 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 2 / 0
142.248.80.196 LISTED 127.0.0.4 Apache security: repeated explicit application probes apache-security 1 / 0
172.104.19.160 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 229 threatmail 1 / 0
185.38.148.2 LISTED 127.0.0.4 Threat Prevention: Web Application Attack / ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt apache-security threatmail 16 / 0
147.45.50.108 LISTED 127.0.0.4 Apache security: command_injection_probe apache-security 1 / 0
45.156.128.43 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET DROP Dshield Block Listed Source group 1 threatmail 1 / 0
107.150.98.59 LISTED 127.0.0.4 Threat Prevention: Misc Attack / ET CINS Active Threat Intelligence Poor Reputation IP group 145 threatmail 1 / 0

Lists / Delists shows list_count and delist_count. OBSERVED means the IP exists in history but is not currently in BIND and has no recorded delist event. Trusted addresses in /etc/scotnet/dnsbl-public-hide.txt are omitted from this public history table.