DNS Poisoning IP addresses
Falsifying a resolver's cache (cache poisoning).
In the last 30 days, 49,359 IP addresses were reported for DNS Poisoning, in 247,183 reports altogether. 496 of them (1%) have a confidence score of 75 or more and are on the default blocklist. Most of them are in United States.
49,359addresses reported, 30 days
496on the default blocklist (75+)
247,183reports against them
1 hsince the latest report
Most reported addresses
| Address | Score | Last seen |
|---|---|---|
| 🇨🇳8.138.154.105 | 85 | 5 h |
| 🇮🇩103.46.186.148 | 85 | 5 h |
| 🇨🇳8.138.155.88 | 83 | 5 h |
| 🇨🇳8.134.159.4 | 83 | 5 h |
| 🇧🇬80.94.95.109 | 83 | 5 h |
| 🇳🇱45.156.128.63 | 83 | 5 h |
| 🇬🇧193.163.125.74 | 83 | 5 h |
| 🇨🇱190.171.189.85 | 83 | 5 h |
| 🇺🇸165.154.172.200 | 83 | 5 h |
| 🇨🇳101.200.243.197 | 83 | 5 h |
| 🇸🇬58.182.58.128 | 82 | 5 h |
| 🇮🇩163.7.1.156 | 82 | 5 h |
| 🇭🇰152.32.225.117 | 82 | 5 h |
| 🇨🇳101.201.38.226 | 82 | 5 h |
| 🇨🇳8.152.209.0 | 81 | 5 h |
| 🇨🇳8.137.159.210 | 81 | 5 h |
| 🇧🇬79.124.56.214 | 81 | 5 h |
| 🇨🇳59.63.163.2 | 81 | 5 h |
| 🇨🇳47.109.134.2 | 81 | 5 h |
| 🇨🇳47.103.157.194 | 81 | 5 h |
Where they are
Networks they belong to
Block them
The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:
curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.
Figures cover the last 30 days and are refreshed hourly; last updated 56 minutes ago.