Honeypot DNS and amplification attacks

This page is updated daily. Last update: 2017-02-22 23:07:01 UTC

Low bandwidth open resolver server to observe DNS amplification attacks automatically, providing IP addresses target.
Warning: the table contains false positives and legitimate domains (ie. google.com, openresolverproject.org etc.).

Documentation | Target map | Latest attacks | Top 10 target IPs address | Top 10 target countries | Latest distinct FQDN collected | Top 100 FQDN collected

Documentation:

Target countries map



Latest DNS reflection attacks (see all)

Dateins IP ATTACKED ASN ASN org DNS Geo
2017-02-17 21:25:17104.207.131.6420473AS-CHOOPA Choopa, LLC, US104.207.131.64.vultr.comDE
2017-02-12 20:59:1785.159.233.13143350NFORCE , NLn/aNL
2017-02-11 07:57:1538.93.141.7520940AKAMAI-ASN1 , USn/aUS
2017-02-10 04:51:17115.159.122.25345090CNNIC-TENCENT-NET-AP Shen...n/aCN
2017-01-13 14:03:15192.3.148.7336352AS-COLOCROSSING ColoCross...dummy.notgoogle.orgUS
2017-01-09 20:47:16185.62.190.17449349DOTSI , PTsrour-onlineNL
2017-01-07 04:05:15116.62.29.10437963CNNIC-ALIBABA-CN-NET-AP H...n/aUNK
2017-01-03 16:37:1672.247.181.17620940AKAMAI-ASN1 , USa72-247-181-176.deploy.akamaitechnologies.comUS
2016-12-27 15:27:172.97.18.14713285OPALTELECOM-AS TalkTalk C...host-2-97-18-147.as13285.netGB
2016-11-25 12:21:165.57.253.7042707EQUEST-AS , NLmail.omosgh.nlNL

Top 10 target IPs

# IP ATTACKED ASN ASN org DNS Geo
1669.31.20.7835994AKAMAI-AS Akamai Technolo...n/aUS
1269.31.20.7635994AKAMAI-AS Akamai Technolo...n/aUS
724.27.236.1377843TWCABLE-BACKBONE Time War...n/aUS
569.31.20.7535994AKAMAI-AS Akamai Technolo...n/aUS
5185.130.5.228203569SILK-AS Sindicate Group Ltd,LTn/aUNK
4186.2.164.30262254DANCOM LTDddos-guard.netRU
4104.255.67.21146664VOLUMEDRIVE VolumeDrive,USn/aUNK
4109.163.224.343223VOXILITY Voxility S.R.L.,ROwww.voxility.comRO
3104.96.1.5220940AKAMAI-ASN1 Akamai Intern...a104-96-1-52.deploy.static.akamaitechnologies.comUNK
3104.85.165.120940AKAMAI-ASN1 Akamai Intern...a104-85-165-1.deploy.static.akamaitechnologies.comUNK

Top 10 target countries

# Tld Geo
116USUS
38RURU
32NLNL
25UNKUNK
23FRFR
20CNCN
14BZBZ
12DEDE
12CACA
10GBGB

Latest distinct FQDN collected

FQDN Size Dateins
esa.gov (robtex, urlquery, urlvoid, virustotal, wot)23802017-02-21
e4i8.9dd00f57.wc.syssec.rub.de (robtex, urlquery, urlvoid, virustotal, wot)752017-02-18
uvgczsuidrtg.com (robtex, urlquery, urlvoid, virustotal, wot)556242017-02-17
amen.pt (robtex, urlquery, urlvoid, virustotal, wot)2682017-02-16
ikmoe.com (robtex, urlquery, urlvoid, virustotal, wot)3172017-02-15
taobao.com (robtex, urlquery, urlvoid, virustotal, wot)4012017-02-13
www.yahoo.com (robtex, urlquery, urlvoid, virustotal, wot)2192017-02-13
6t1i.eb2eb450.wc.syssec.rub.de (robtex, urlquery, urlvoid, virustotal, wot)752017-02-12
hq31.c3ce114f.wc.syssec.rub.de (robtex, urlquery, urlvoid, virustotal, wot)752017-02-04
level3.com (robtex, urlquery, urlvoid, virustotal, wot)6392017-02-03

FQDN collected and corresponding amplification (Top 100)

+/- recursion, S signed, E EDNS0, D DNSSEC, CD/C checking
FQDN Size # Address Class Type Flags Dateins
uvgczsuidrtg.com (robtex, urlquery, urlvoid, virustotal, wot)556241INANY+E2017-02-17
lolwhatabeautifuldomain.btnpl.net (robtex, urlquery, urlvoid, virustotal, wot)3777613INANY+E2014-07-08
web3.ikrizzy.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)266840INANY+E2014-07-16
downboot.xyz (robtex, urlquery, urlvoid, virustotal, wot)217451345INANY+E2016-05-31
thebestdomainintheworld.cloudns.eu (robtex, urlquery, urlvoid, virustotal, wot)217391344INANY+E2013-11-15
samfunnsovervakning.no (robtex, urlquery, urlvoid, virustotal, wot)205151INANY+E2016-09-14
inboot.eu (robtex, urlquery, urlvoid, virustotal, wot)2026530INA+E2014-05-28
d5l.ru (robtex, urlquery, urlvoid, virustotal, wot)144631INANY+2016-09-09
leth.cc (robtex, urlquery, urlvoid, virustotal, wot)124221INANY+E2016-09-14
hoffmeister.be (robtex, urlquery, urlvoid, virustotal, wot)110791INANY+E2016-09-14
defcongroups.org (robtex, urlquery, urlvoid, virustotal, wot)100191INANY+E2016-09-29
amp.crack-zone.ru (robtex, urlquery, urlvoid, virustotal, wot)92790INANY+E2013-12-22
remix-developement.com (robtex, urlquery, urlvoid, virustotal, wot)87111INANY+E2014-07-09
magas.bslrpg.com (robtex, urlquery, urlvoid, virustotal, wot)8263510INANY+E2014-05-15
ahuyehue.info (robtex, urlquery, urlvoid, virustotal, wot)8067490INANY+E2014-03-09
activum.nu (robtex, urlquery, urlvoid, virustotal, wot)77141INANY+E2016-09-14
svist21.cz (robtex, urlquery, urlvoid, virustotal, wot)70681INANY+E2014-07-14
commerce.gov (robtex, urlquery, urlvoid, virustotal, wot)69741INANY+E2015-02-21
globe.gov (robtex, urlquery, urlvoid, virustotal, wot)69712INANY+E2014-12-15
067.cz (robtex, urlquery, urlvoid, virustotal, wot)67541INANY+E2014-07-10
gransy.com (robtex, urlquery, urlvoid, virustotal, wot)62701INANY+E2014-11-27
1x1.cz (robtex, urlquery, urlvoid, virustotal, wot)61711INANY+E2013-09-27
census.gov (robtex, urlquery, urlvoid, virustotal, wot)59371INANY+E2014-05-16
doc.gov (robtex, urlquery, urlvoid, virustotal, wot)59201INANY+E2013-10-12
amp2.hornyhf.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)58120INANY+E2014-07-13
test.zong.co.ua (robtex, urlquery, urlvoid, virustotal, wot)57700INANY+E2014-06-04
zzxz.com.ru (robtex, urlquery, urlvoid, virustotal, wot)54251INANY+E2014-08-25
psg.com (robtex, urlquery, urlvoid, virustotal, wot)49451INANY+E2015-04-05
httrack.com (robtex, urlquery, urlvoid, virustotal, wot)48651INANY+E2015-03-09
sema.cz (robtex, urlquery, urlvoid, virustotal, wot)48551INANY+E2013-12-30
lalka.com.ru (robtex, urlquery, urlvoid, virustotal, wot)48511INANY+E2014-07-07
energystar.gov (robtex, urlquery, urlvoid, virustotal, wot)48111INANY+E2014-08-18
hrsa.gov (robtex, urlquery, urlvoid, virustotal, wot)47581INANY+E2016-10-12
sandia.gov (robtex, urlquery, urlvoid, virustotal, wot)45461INANY+E2013-11-06
ietf.org (robtex, urlquery, urlvoid, virustotal, wot)45161INANY+E2013-10-11
infoblox.com (robtex, urlquery, urlvoid, virustotal, wot)44981INANY+E2014-05-22
ic3.gov (robtex, urlquery, urlvoid, virustotal, wot)44891INANY+E2015-06-05
bang.zong.co.ua (robtex, urlquery, urlvoid, virustotal, wot)4475270INANY+E2014-06-13
nccih.nih.gov (robtex, urlquery, urlvoid, virustotal, wot)44701INANY+E2017-01-26
inboot.co (robtex, urlquery, urlvoid, virustotal, wot)44611INANY+E2015-02-20
cpsc.gov (robtex, urlquery, urlvoid, virustotal, wot)44541INANY+E2015-07-12
hajjamservices.us (robtex, urlquery, urlvoid, virustotal, wot)4432242INANY+E2016-06-18
socrata.com (robtex, urlquery, urlvoid, virustotal, wot)44311INANY+E2015-03-11
eda.gov (robtex, urlquery, urlvoid, virustotal, wot)44071INANY+E2015-04-09
vlch.net (robtex, urlquery, urlvoid, virustotal, wot)435116INTXT+E2014-12-09
hotpujcka.cz (robtex, urlquery, urlvoid, virustotal, wot)43451INANY+E2015-06-04
siska1.com (robtex, urlquery, urlvoid, virustotal, wot)4336257INANY+E2013-11-10
wapa.gov (robtex, urlquery, urlvoid, virustotal, wot)43171ANYANY+E2016-06-18
access-board.gov (robtex, urlquery, urlvoid, virustotal, wot)42891INANY+2015-10-09
36088.info (robtex, urlquery, urlvoid, virustotal, wot)4239256INANY+E2013-10-13
37349.info (robtex, urlquery, urlvoid, virustotal, wot)4239256INANY+E2013-10-16
io (robtex, urlquery, urlvoid, virustotal, wot)42181ANYANY+E2015-06-09
aa3247.com (robtex, urlquery, urlvoid, virustotal, wot)4167256INA+E2013-09-27
30259.info (robtex, urlquery, urlvoid, virustotal, wot)4166256INA+E2013-10-09
www.jrdga.info (robtex, urlquery, urlvoid, virustotal, wot)4154255INA+E2014-02-27
web.ikrizzy.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-07-15
umad.nothink.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-08-28
try.ikrizzy.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-07-31
hek.heckbro.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-10-10
bmw.digmehl.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41490INANY+E2014-10-28
bangtest.zong.co.ua (robtex, urlquery, urlvoid, virustotal, wot)4136250INANY+E2014-06-05
web.asdasd.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41300INANY+E2014-07-17
hold.mybig.mobi (robtex, urlquery, urlvoid, virustotal, wot)4126252INANY+E2014-07-10
fema.gov (robtex, urlquery, urlvoid, virustotal, wot)41091INANY+E2014-05-01
sukapadla.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41081INANY+E2014-11-27
pizdaizda.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41081INANY+E2014-12-08
fkfkfkfc.biz (robtex, urlquery, urlvoid, virustotal, wot)4107236INANY+E2014-03-08
rukojop.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41061INANY+E2014-12-14
basjuk.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41051INANY+E2014-12-03
pidarastik.ru (robtex, urlquery, urlvoid, virustotal, wot)41041INANY+E2015-01-13
a.packetdevil.com (robtex, urlquery, urlvoid, virustotal, wot)41030INANY+E2013-11-25
uzuzuu.ru (robtex, urlquery, urlvoid, virustotal, wot)41001INANY+E2015-01-14
martinimedianetwork.com (robtex, urlquery, urlvoid, virustotal, wot)40971INANY+E2015-06-04
ttrs.spb.ru (robtex, urlquery, urlvoid, virustotal, wot)40921INANY+E2014-11-20
htyper.xyz (robtex, urlquery, urlvoid, virustotal, wot)4091244INANY+E2016-09-12
lizing.pw (robtex, urlquery, urlvoid, virustotal, wot)4090244INANY+E2016-10-10
usmas.pw (robtex, urlquery, urlvoid, virustotal, wot)4089244INANY+E2016-10-10
asac.pw (robtex, urlquery, urlvoid, virustotal, wot)4088244INANY+E2016-09-12
lrc-pipec.com (robtex, urlquery, urlvoid, virustotal, wot)4083241INANY+E2013-11-16
sunrisecx.com (robtex, urlquery, urlvoid, virustotal, wot)4082250INA+E2015-05-05
reanimator.in (robtex, urlquery, urlvoid, virustotal, wot)4082240INA+E2013-11-01
ms08067.com (robtex, urlquery, urlvoid, virustotal, wot)4081250INA+E2015-05-16
sswew.co.uk (robtex, urlquery, urlvoid, virustotal, wot)4081242INANY+E2014-05-15
q1w.in (robtex, urlquery, urlvoid, virustotal, wot)4078250INA+E2015-07-08
amp.hornyhf.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)40760INANY+E2014-07-13
somethingstrange.netfirms.com (robtex, urlquery, urlvoid, virustotal, wot)4073248INANY+E2014-07-07
admin.wilyee.com (robtex, urlquery, urlvoid, virustotal, wot)40731INTXT+E2014-04-15
eschenemnogo.com (robtex, urlquery, urlvoid, virustotal, wot)4070245INANY+E2013-11-21
dk (robtex, urlquery, urlvoid, virustotal, wot)40701INANY+E2015-10-29
cdnmyhost.com (robtex, urlquery, urlvoid, virustotal, wot)40591INANY+E2015-02-18
www.djcgrafix.netfirms.com (robtex, urlquery, urlvoid, virustotal, wot)4048248INA+E2014-08-16
jerusalem.netfirms.com (robtex, urlquery, urlvoid, virustotal, wot)4044248INA+E2014-08-05
pipcvsemnaher.com (robtex, urlquery, urlvoid, virustotal, wot)4039239INANY+E2013-10-18
defcon.org (robtex, urlquery, urlvoid, virustotal, wot)40391INANY+E2015-02-01
webpanel.sk (robtex, urlquery, urlvoid, virustotal, wot)40381INANY+E2014-07-31
gerdar3.ru (robtex, urlquery, urlvoid, virustotal, wot)40341INANY+E2014-02-19
onlyforyoumydear.btnpl.net (robtex, urlquery, urlvoid, virustotal, wot)40320INANY+E2014-07-14
zing.zong.co.ua (robtex, urlquery, urlvoid, virustotal, wot)4027242INANY+E2014-02-27
4khdtv.btnpl.net (robtex, urlquery, urlvoid, virustotal, wot)40220INANY+E2014-07-10
viareality.cz (robtex, urlquery, urlvoid, virustotal, wot)40191INANY+E2015-03-09