Honeypot DNS and amplification attacks

This page is updated daily. Last update: 2018-09-17 22:07:02 UTC

Low bandwidth open resolver server to observe DNS amplification attacks automatically, providing IP addresses target.
Warning: the table contains false positives and legitimate domains (ie. google.com, openresolverproject.org etc.).

Latest attacks | Top 10 target IPs address | Top 10 target countries | Latest distinct FQDN collected | Top 100 FQDN collected
Monthly DNS amplification attacks

Latest DNS reflection attacks - See all

Dateins IP ATTACKED ASN ASN org DNS Geo
2018-08-26 14:28:1661.174.49.824134CHINANET-BACKBONE No.31,J...82.49.174.61.dial.wz.zj.dynamic.163data.com.cnCN
2018-08-24 18:38:31191.101.35.4743350NFORCE, NLfox.host1plus.comLT
2018-07-16 19:58:3067.21.36.225UCB University of Califor...researchscanner02.eecs.berkeley.eduUS
2018-06-10 17:53:22191.96.249.4864484ASDMZHOST, NLsmtp20.digitalsearchengine.inCL
2018-06-02 19:28:2647.94.212.22237963CNNIC-ALIBABA-CN-NET-AP H...n/aUNK
2018-05-30 05:23:10183.136.204.243136188CHINATELECOM-YUNNAN-DIQIN...n/aCN
2018-05-30 01:48:17183.136.204.243136188CHINATELECOM-YUNNAN-DIQIN...n/aCN
2018-05-03 22:33:16108.175.9.1238560ONEANDONE-AS Brauerstrass...s414679773.onlinehome.usUS
2018-04-20 16:23:29149.91.80.11962000NETRIX-AS Netrix, FR119.80.91.149.ipv4.netrix.frFR
2018-04-10 04:18:1382.32.230.185089NTL, GBcpc96586-uddi27-2-0-cust529.20-3.cable.virginm.netGB

Top 10 target IPs - All time

# IP ATTACKED ASN ASN org DNS Geo
1669.31.20.7835994AKAMAI-AS Akamai Technolo...n/aUS
1269.31.20.7635994AKAMAI-AS Akamai Technolo...n/aUS
724.27.236.1377843TWCABLE-BACKBONE Time War...n/aUS
569.31.20.7535994AKAMAI-AS Akamai Technolo...n/aUS
5185.130.5.228203569SILK-AS Sindicate Group Ltd,LTn/aUNK
4186.2.164.30262254DANCOM LTDddos-guard.netRU
4104.255.67.21146664VOLUMEDRIVE VolumeDrive,USn/aUNK
4109.163.224.343223VOXILITY Voxility S.R.L.,ROwww.voxility.comRO
3104.96.1.5220940AKAMAI-ASN1 Akamai Intern...a104-96-1-52.deploy.static.akamaitechnologies.comUNK
3104.85.165.120940AKAMAI-ASN1 Akamai Intern...a104-85-165-1.deploy.static.akamaitechnologies.comUNK

Top 10 target countries - All time

# Tld Geo
124USUS
38RURU
32NLNL
29CNCN
27UNKUNK
26FRFR
14BZBZ
13DEDE
12CACA
11GBGB

Latest distinct FQDN collected

FQDN Size Dateins
n3zy.1c2e0e57.wc.syssec.rub.de (robtex, urlquery, urlvoid, virustotal, wot)2412018-09-02
ro20.ru (robtex, urlquery, urlvoid, virustotal, wot)39962018-08-24
usadf.gov (robtex, urlquery, urlvoid, virustotal, wot)382018-08-24
mon.moe (robtex, urlquery, urlvoid, virustotal, wot)9572018-08-21
ddpx.e057184f.wc.syssec.rub.de (robtex, urlquery, urlvoid, virustotal, wot)2412018-08-17
0x4f1857e0.yumi.ipl.eecs.case.edu (robtex, urlquery, urlvoid, virustotal, wot)622018-08-12
qjtt.e057184f.wc.syssec.rub.de (robtex, urlquery, urlvoid, virustotal, wot)2412018-08-10
a1326995424p63585i28337.d201808081800015803.t84464.dnsresearch.cymru.com (robtex, urlquery, urlvoid, virustotal, wot)2992018-08-08
ddns.net (robtex, urlquery, urlvoid, virustotal, wot)1342018-08-08
c2sy.96822c4f.wc.syssec.rub.de (robtex, urlquery, urlvoid, virustotal, wot)2412018-08-04

FQDN collected and corresponding amplification - Top 100

+/- recursion, S signed, E EDNS0, D DNSSEC, CD/C checking
FQDN Size # Address Class Type Flags Dateins
uvgczsuidrtg.com (robtex, urlquery, urlvoid, virustotal, wot)556241INANY+E2017-02-17
lolwhatabeautifuldomain.btnpl.net (robtex, urlquery, urlvoid, virustotal, wot)3777613INANY+E2014-07-08
web3.ikrizzy.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)266840INANY+E2014-07-16
downboot.xyz (robtex, urlquery, urlvoid, virustotal, wot)217451345INANY+E2016-05-31
thebestdomainintheworld.cloudns.eu (robtex, urlquery, urlvoid, virustotal, wot)217391344INANY+E2013-11-15
samfunnsovervakning.no (robtex, urlquery, urlvoid, virustotal, wot)205151INANY+E2016-09-14
inboot.eu (robtex, urlquery, urlvoid, virustotal, wot)2026530INA+E2014-05-28
d5l.ru (robtex, urlquery, urlvoid, virustotal, wot)144631INANY+2016-09-09
leth.cc (robtex, urlquery, urlvoid, virustotal, wot)124221INANY+E2016-09-14
hoffmeister.be (robtex, urlquery, urlvoid, virustotal, wot)110791INANY+E2016-09-14
defcongroups.org (robtex, urlquery, urlvoid, virustotal, wot)100191INANY+E2016-09-29
amp.crack-zone.ru (robtex, urlquery, urlvoid, virustotal, wot)92790INANY+E2013-12-22
remix-developement.com (robtex, urlquery, urlvoid, virustotal, wot)87111INANY+E2014-07-09
magas.bslrpg.com (robtex, urlquery, urlvoid, virustotal, wot)8263510INANY+E2014-05-15
ahuyehue.info (robtex, urlquery, urlvoid, virustotal, wot)8067490INANY+E2014-03-09
activum.nu (robtex, urlquery, urlvoid, virustotal, wot)77141INANY+E2016-09-14
diasp.org (robtex, urlquery, urlvoid, virustotal, wot)75031INANY+E2018-01-01
svist21.cz (robtex, urlquery, urlvoid, virustotal, wot)70681INANY+E2014-07-14
commerce.gov (robtex, urlquery, urlvoid, virustotal, wot)69741INANY+E2015-02-21
globe.gov (robtex, urlquery, urlvoid, virustotal, wot)69712INANY+E2014-12-15
wzb.eu (robtex, urlquery, urlvoid, virustotal, wot)68201INANY+2017-12-23
067.cz (robtex, urlquery, urlvoid, virustotal, wot)67541INANY+E2014-07-10
szif.cz (robtex, urlquery, urlvoid, virustotal, wot)65791INANY+2018-07-15
gransy.com (robtex, urlquery, urlvoid, virustotal, wot)62701INANY+E2014-11-27
1x1.cz (robtex, urlquery, urlvoid, virustotal, wot)61711INANY+E2013-09-27
census.gov (robtex, urlquery, urlvoid, virustotal, wot)59371INANY+E2014-05-16
doc.gov (robtex, urlquery, urlvoid, virustotal, wot)59201INANY+E2013-10-12
amp2.hornyhf.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)58120INANY+E2014-07-13
test.zong.co.ua (robtex, urlquery, urlvoid, virustotal, wot)57700INANY+E2014-06-04
zzxz.com.ru (robtex, urlquery, urlvoid, virustotal, wot)54251INANY+E2014-08-25
pigedit.com (robtex, urlquery, urlvoid, virustotal, wot)51351INTXT+E2018-02-08
pbgc.gov (robtex, urlquery, urlvoid, virustotal, wot)50391INANY+E2017-05-25
psg.com (robtex, urlquery, urlvoid, virustotal, wot)49451INANY+E2015-04-05
httrack.com (robtex, urlquery, urlvoid, virustotal, wot)48651INANY+E2015-03-09
sema.cz (robtex, urlquery, urlvoid, virustotal, wot)48551INANY+E2013-12-30
lalka.com.ru (robtex, urlquery, urlvoid, virustotal, wot)48511INANY+E2014-07-07
energystar.gov (robtex, urlquery, urlvoid, virustotal, wot)48111INANY+E2014-08-18
hrsa.gov (robtex, urlquery, urlvoid, virustotal, wot)47581INANY+E2016-10-12
sandia.gov (robtex, urlquery, urlvoid, virustotal, wot)45461INANY+E2013-11-06
ietf.org (robtex, urlquery, urlvoid, virustotal, wot)45161INANY+E2013-10-11
infoblox.com (robtex, urlquery, urlvoid, virustotal, wot)44981INANY+E2014-05-22
ic3.gov (robtex, urlquery, urlvoid, virustotal, wot)44891INANY+E2015-06-05
bang.zong.co.ua (robtex, urlquery, urlvoid, virustotal, wot)4475270INANY+E2014-06-13
nccih.nih.gov (robtex, urlquery, urlvoid, virustotal, wot)44701INANY+E2017-01-26
inboot.co (robtex, urlquery, urlvoid, virustotal, wot)44611INANY+E2015-02-20
cpsc.gov (robtex, urlquery, urlvoid, virustotal, wot)44541INANY+E2015-07-12
hajjamservices.us (robtex, urlquery, urlvoid, virustotal, wot)4432242INANY+E2016-06-18
socrata.com (robtex, urlquery, urlvoid, virustotal, wot)44311INANY+E2015-03-11
eda.gov (robtex, urlquery, urlvoid, virustotal, wot)44071INANY+E2015-04-09
vlch.net (robtex, urlquery, urlvoid, virustotal, wot)435116INTXT+E2014-12-09
hotpujcka.cz (robtex, urlquery, urlvoid, virustotal, wot)43451INANY+E2015-06-04
siska1.com (robtex, urlquery, urlvoid, virustotal, wot)4336257INANY+E2013-11-10
wapa.gov (robtex, urlquery, urlvoid, virustotal, wot)43171ANYANY+E2016-06-18
access-board.gov (robtex, urlquery, urlvoid, virustotal, wot)42891INANY+2015-10-09
36088.info (robtex, urlquery, urlvoid, virustotal, wot)4239256INANY+E2013-10-13
37349.info (robtex, urlquery, urlvoid, virustotal, wot)4239256INANY+E2013-10-16
io (robtex, urlquery, urlvoid, virustotal, wot)42181ANYANY+E2015-06-09
aa3247.com (robtex, urlquery, urlvoid, virustotal, wot)4167256INA+E2013-09-27
30259.info (robtex, urlquery, urlvoid, virustotal, wot)4166256INA+E2013-10-09
www.jrdga.info (robtex, urlquery, urlvoid, virustotal, wot)4154255INA+E2014-02-27
web.ikrizzy.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-07-15
umad.nothink.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-08-28
try.ikrizzy.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-07-31
hek.heckbro.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-10-10
bmw.digmehl.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41490INANY+E2014-10-28
bangtest.zong.co.ua (robtex, urlquery, urlvoid, virustotal, wot)4136250INANY+E2014-06-05
web.asdasd.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41300INANY+E2014-07-17
hold.mybig.mobi (robtex, urlquery, urlvoid, virustotal, wot)4126252INANY+E2014-07-10
fema.gov (robtex, urlquery, urlvoid, virustotal, wot)41091INANY+E2014-05-01
sukapadla.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41081INANY+E2014-11-27
pizdaizda.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41081INANY+E2014-12-08
fkfkfkfc.biz (robtex, urlquery, urlvoid, virustotal, wot)4107236INANY+E2014-03-08
rukojop.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41061INANY+E2014-12-14
basjuk.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41051INANY+E2014-12-03
pidarastik.ru (robtex, urlquery, urlvoid, virustotal, wot)41041INANY+E2015-01-13
a.packetdevil.com (robtex, urlquery, urlvoid, virustotal, wot)41030INANY+E2013-11-25
uzuzuu.ru (robtex, urlquery, urlvoid, virustotal, wot)41001INANY+E2015-01-14
martinimedianetwork.com (robtex, urlquery, urlvoid, virustotal, wot)40971INANY+E2015-06-04
ttrs.spb.ru (robtex, urlquery, urlvoid, virustotal, wot)40921INANY+E2014-11-20
htyper.xyz (robtex, urlquery, urlvoid, virustotal, wot)4091244INANY+E2016-09-12
learnengs.com (robtex, urlquery, urlvoid, virustotal, wot)40901INANY+E2017-03-23
lizing.pw (robtex, urlquery, urlvoid, virustotal, wot)4090244INANY+E2016-10-10
usmas.pw (robtex, urlquery, urlvoid, virustotal, wot)4089244INANY+E2016-10-10
asac.pw (robtex, urlquery, urlvoid, virustotal, wot)4088244INANY+E2016-09-12
lrc-pipec.com (robtex, urlquery, urlvoid, virustotal, wot)4083241INANY+E2013-11-16
sunrisecx.com (robtex, urlquery, urlvoid, virustotal, wot)4082250INA+E2015-05-05
reanimator.in (robtex, urlquery, urlvoid, virustotal, wot)4082240INA+E2013-11-01
ms08067.com (robtex, urlquery, urlvoid, virustotal, wot)4081250INA+E2015-05-16
sswew.co.uk (robtex, urlquery, urlvoid, virustotal, wot)4081242INANY+E2014-05-15
zooexit.com (robtex, urlquery, urlvoid, virustotal, wot)40791INTXT+E2018-01-22
q1w.in (robtex, urlquery, urlvoid, virustotal, wot)4078250INA+E2015-07-08
amp.hornyhf.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)40760INANY+E2014-07-13
somethingstrange.netfirms.com (robtex, urlquery, urlvoid, virustotal, wot)4073248INANY+E2014-07-07
admin.wilyee.com (robtex, urlquery, urlvoid, virustotal, wot)40731INTXT+E2014-04-15
eschenemnogo.com (robtex, urlquery, urlvoid, virustotal, wot)4070245INANY+E2013-11-21
dk (robtex, urlquery, urlvoid, virustotal, wot)40701INANY+E2015-10-29
mz.gov.pl (robtex, urlquery, urlvoid, virustotal, wot)40641INANY+E2017-12-27
cdnmyhost.com (robtex, urlquery, urlvoid, virustotal, wot)40591INANY+E2015-02-18
www.djcgrafix.netfirms.com (robtex, urlquery, urlvoid, virustotal, wot)4048248INA+E2014-08-16
jerusalem.netfirms.com (robtex, urlquery, urlvoid, virustotal, wot)4044248INA+E2014-08-05