Honeypot DNS and amplification attacks

This page is updated daily. Last update: 2017-05-22 22:07:02 UTC

Low bandwidth open resolver server to observe DNS amplification attacks automatically, providing IP addresses target.
Warning: the table contains false positives and legitimate domains (ie. google.com, openresolverproject.org etc.).

Documentation | Target map | Latest attacks | Top 10 target IPs address | Top 10 target countries | Latest distinct FQDN collected | Top 100 FQDN collected

Documentation:

Target countries map



Latest DNS reflection attacks (see all)

Dateins IP ATTACKED ASN ASN org DNS Geo
2017-05-21 19:35:1679.137.34.22416276OVH, FR224.ip-79-137-34.euIT
2017-05-18 13:49:18211.159.214.10945090CNNIC-TENCENT-NET-AP Shen...n/aCN
2017-05-13 06:27:16139.199.111.8045090CNNIC-TENCENT-NET-AP Shen...n/aCN
2017-05-10 16:11:1694.177.198.24231034ARUBA-ASN, IThost242-198-177-94.serverdedicati.aruba.itIT
2017-05-06 18:13:17177.124.131.15174COGENT-174 Cogent Communi...177-124-131-15.upx.comBR
2017-04-29 01:57:165.231.86.7012586ASGHOSTNET, DEn/aDE
2017-04-26 12:51:1594.23.97.10216276OVH, FRn/aFR
2017-04-17 22:11:16201.46.53.16328580CILNET Comunicacao e Info...beta.hgidc.com.brBR
2017-04-11 06:53:1761.164.110.674134CHINANET-BACKBONE No.31,J...n/aCN
2017-03-30 22:55:17109.18.206.22515557LDCOMNET, FR225.206.18.109.rev.sfr.netFR

Top 10 target IPs

# IP ATTACKED ASN ASN org DNS Geo
1669.31.20.7835994AKAMAI-AS Akamai Technolo...n/aUS
1269.31.20.7635994AKAMAI-AS Akamai Technolo...n/aUS
724.27.236.1377843TWCABLE-BACKBONE Time War...n/aUS
569.31.20.7535994AKAMAI-AS Akamai Technolo...n/aUS
5185.130.5.228203569SILK-AS Sindicate Group Ltd,LTn/aUNK
4186.2.164.30262254DANCOM LTDddos-guard.netRU
4104.255.67.21146664VOLUMEDRIVE VolumeDrive,USn/aUNK
4109.163.224.343223VOXILITY Voxility S.R.L.,ROwww.voxility.comRO
3104.96.1.5220940AKAMAI-ASN1 Akamai Intern...a104-96-1-52.deploy.static.akamaitechnologies.comUNK
3104.85.165.120940AKAMAI-ASN1 Akamai Intern...a104-85-165-1.deploy.static.akamaitechnologies.comUNK

Top 10 target countries

# Tld Geo
116USUS
38RURU
32NLNL
25UNKUNK
25FRFR
24CNCN
14BZBZ
13DEDE
12CACA
10GBGB

Latest distinct FQDN collected

FQDN Size Dateins
1b7b0fbb.openresolvertest.net (robtex, urlquery, urlvoid, virustotal, wot)2632017-05-17
1e47148c.openresolverproject.org (robtex, urlquery, urlvoid, virustotal, wot)3032017-05-14
2g0e.c55d0e57.wc.syssec.rub.de (robtex, urlquery, urlvoid, virustotal, wot)752017-05-14
065c9b0a.openresolvertest.net (robtex, urlquery, urlvoid, virustotal, wot)2272017-05-10
pi0u.43d2154f.wc.syssec.rub.de (robtex, urlquery, urlvoid, virustotal, wot)752017-05-07
065c9b0a.openresolverproject.org (robtex, urlquery, urlvoid, virustotal, wot)3032017-05-07
baf9.1ee6fa5f.wc.syssec.rub.de (robtex, urlquery, urlvoid, virustotal, wot)752017-05-06
193d9308.openresolvertest.net (robtex, urlquery, urlvoid, virustotal, wot)2632017-05-03
6park.com (robtex, urlquery, urlvoid, virustotal, wot)2072017-05-02
deviantart.com (robtex, urlquery, urlvoid, virustotal, wot)3242017-05-02

FQDN collected and corresponding amplification (Top 100)

+/- recursion, S signed, E EDNS0, D DNSSEC, CD/C checking
FQDN Size # Address Class Type Flags Dateins
uvgczsuidrtg.com (robtex, urlquery, urlvoid, virustotal, wot)556241INANY+E2017-02-17
lolwhatabeautifuldomain.btnpl.net (robtex, urlquery, urlvoid, virustotal, wot)3777613INANY+E2014-07-08
web3.ikrizzy.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)266840INANY+E2014-07-16
downboot.xyz (robtex, urlquery, urlvoid, virustotal, wot)217451345INANY+E2016-05-31
thebestdomainintheworld.cloudns.eu (robtex, urlquery, urlvoid, virustotal, wot)217391344INANY+E2013-11-15
samfunnsovervakning.no (robtex, urlquery, urlvoid, virustotal, wot)205151INANY+E2016-09-14
inboot.eu (robtex, urlquery, urlvoid, virustotal, wot)2026530INA+E2014-05-28
d5l.ru (robtex, urlquery, urlvoid, virustotal, wot)144631INANY+2016-09-09
leth.cc (robtex, urlquery, urlvoid, virustotal, wot)124221INANY+E2016-09-14
hoffmeister.be (robtex, urlquery, urlvoid, virustotal, wot)110791INANY+E2016-09-14
defcongroups.org (robtex, urlquery, urlvoid, virustotal, wot)100191INANY+E2016-09-29
amp.crack-zone.ru (robtex, urlquery, urlvoid, virustotal, wot)92790INANY+E2013-12-22
remix-developement.com (robtex, urlquery, urlvoid, virustotal, wot)87111INANY+E2014-07-09
magas.bslrpg.com (robtex, urlquery, urlvoid, virustotal, wot)8263510INANY+E2014-05-15
ahuyehue.info (robtex, urlquery, urlvoid, virustotal, wot)8067490INANY+E2014-03-09
activum.nu (robtex, urlquery, urlvoid, virustotal, wot)77141INANY+E2016-09-14
svist21.cz (robtex, urlquery, urlvoid, virustotal, wot)70681INANY+E2014-07-14
commerce.gov (robtex, urlquery, urlvoid, virustotal, wot)69741INANY+E2015-02-21
globe.gov (robtex, urlquery, urlvoid, virustotal, wot)69712INANY+E2014-12-15
067.cz (robtex, urlquery, urlvoid, virustotal, wot)67541INANY+E2014-07-10
gransy.com (robtex, urlquery, urlvoid, virustotal, wot)62701INANY+E2014-11-27
1x1.cz (robtex, urlquery, urlvoid, virustotal, wot)61711INANY+E2013-09-27
census.gov (robtex, urlquery, urlvoid, virustotal, wot)59371INANY+E2014-05-16
doc.gov (robtex, urlquery, urlvoid, virustotal, wot)59201INANY+E2013-10-12
amp2.hornyhf.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)58120INANY+E2014-07-13
test.zong.co.ua (robtex, urlquery, urlvoid, virustotal, wot)57700INANY+E2014-06-04
zzxz.com.ru (robtex, urlquery, urlvoid, virustotal, wot)54251INANY+E2014-08-25
psg.com (robtex, urlquery, urlvoid, virustotal, wot)49451INANY+E2015-04-05
httrack.com (robtex, urlquery, urlvoid, virustotal, wot)48651INANY+E2015-03-09
sema.cz (robtex, urlquery, urlvoid, virustotal, wot)48551INANY+E2013-12-30
lalka.com.ru (robtex, urlquery, urlvoid, virustotal, wot)48511INANY+E2014-07-07
energystar.gov (robtex, urlquery, urlvoid, virustotal, wot)48111INANY+E2014-08-18
hrsa.gov (robtex, urlquery, urlvoid, virustotal, wot)47581INANY+E2016-10-12
sandia.gov (robtex, urlquery, urlvoid, virustotal, wot)45461INANY+E2013-11-06
ietf.org (robtex, urlquery, urlvoid, virustotal, wot)45161INANY+E2013-10-11
infoblox.com (robtex, urlquery, urlvoid, virustotal, wot)44981INANY+E2014-05-22
ic3.gov (robtex, urlquery, urlvoid, virustotal, wot)44891INANY+E2015-06-05
bang.zong.co.ua (robtex, urlquery, urlvoid, virustotal, wot)4475270INANY+E2014-06-13
nccih.nih.gov (robtex, urlquery, urlvoid, virustotal, wot)44701INANY+E2017-01-26
inboot.co (robtex, urlquery, urlvoid, virustotal, wot)44611INANY+E2015-02-20
cpsc.gov (robtex, urlquery, urlvoid, virustotal, wot)44541INANY+E2015-07-12
hajjamservices.us (robtex, urlquery, urlvoid, virustotal, wot)4432242INANY+E2016-06-18
socrata.com (robtex, urlquery, urlvoid, virustotal, wot)44311INANY+E2015-03-11
eda.gov (robtex, urlquery, urlvoid, virustotal, wot)44071INANY+E2015-04-09
vlch.net (robtex, urlquery, urlvoid, virustotal, wot)435116INTXT+E2014-12-09
hotpujcka.cz (robtex, urlquery, urlvoid, virustotal, wot)43451INANY+E2015-06-04
siska1.com (robtex, urlquery, urlvoid, virustotal, wot)4336257INANY+E2013-11-10
wapa.gov (robtex, urlquery, urlvoid, virustotal, wot)43171ANYANY+E2016-06-18
access-board.gov (robtex, urlquery, urlvoid, virustotal, wot)42891INANY+2015-10-09
36088.info (robtex, urlquery, urlvoid, virustotal, wot)4239256INANY+E2013-10-13
37349.info (robtex, urlquery, urlvoid, virustotal, wot)4239256INANY+E2013-10-16
io (robtex, urlquery, urlvoid, virustotal, wot)42181ANYANY+E2015-06-09
aa3247.com (robtex, urlquery, urlvoid, virustotal, wot)4167256INA+E2013-09-27
30259.info (robtex, urlquery, urlvoid, virustotal, wot)4166256INA+E2013-10-09
www.jrdga.info (robtex, urlquery, urlvoid, virustotal, wot)4154255INA+E2014-02-27
web.ikrizzy.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-07-15
umad.nothink.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-08-28
try.ikrizzy.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-07-31
hek.heckbro.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-10-10
bmw.digmehl.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41490INANY+E2014-10-28
bangtest.zong.co.ua (robtex, urlquery, urlvoid, virustotal, wot)4136250INANY+E2014-06-05
web.asdasd.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41300INANY+E2014-07-17
hold.mybig.mobi (robtex, urlquery, urlvoid, virustotal, wot)4126252INANY+E2014-07-10
fema.gov (robtex, urlquery, urlvoid, virustotal, wot)41091INANY+E2014-05-01
sukapadla.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41081INANY+E2014-11-27
pizdaizda.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41081INANY+E2014-12-08
fkfkfkfc.biz (robtex, urlquery, urlvoid, virustotal, wot)4107236INANY+E2014-03-08
rukojop.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41061INANY+E2014-12-14
basjuk.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41051INANY+E2014-12-03
pidarastik.ru (robtex, urlquery, urlvoid, virustotal, wot)41041INANY+E2015-01-13
a.packetdevil.com (robtex, urlquery, urlvoid, virustotal, wot)41030INANY+E2013-11-25
uzuzuu.ru (robtex, urlquery, urlvoid, virustotal, wot)41001INANY+E2015-01-14
martinimedianetwork.com (robtex, urlquery, urlvoid, virustotal, wot)40971INANY+E2015-06-04
ttrs.spb.ru (robtex, urlquery, urlvoid, virustotal, wot)40921INANY+E2014-11-20
htyper.xyz (robtex, urlquery, urlvoid, virustotal, wot)4091244INANY+E2016-09-12
learnengs.com (robtex, urlquery, urlvoid, virustotal, wot)40901INANY+E2017-03-23
lizing.pw (robtex, urlquery, urlvoid, virustotal, wot)4090244INANY+E2016-10-10
usmas.pw (robtex, urlquery, urlvoid, virustotal, wot)4089244INANY+E2016-10-10
asac.pw (robtex, urlquery, urlvoid, virustotal, wot)4088244INANY+E2016-09-12
lrc-pipec.com (robtex, urlquery, urlvoid, virustotal, wot)4083241INANY+E2013-11-16
sunrisecx.com (robtex, urlquery, urlvoid, virustotal, wot)4082250INA+E2015-05-05
reanimator.in (robtex, urlquery, urlvoid, virustotal, wot)4082240INA+E2013-11-01
ms08067.com (robtex, urlquery, urlvoid, virustotal, wot)4081250INA+E2015-05-16
sswew.co.uk (robtex, urlquery, urlvoid, virustotal, wot)4081242INANY+E2014-05-15
q1w.in (robtex, urlquery, urlvoid, virustotal, wot)4078250INA+E2015-07-08
amp.hornyhf.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)40760INANY+E2014-07-13
somethingstrange.netfirms.com (robtex, urlquery, urlvoid, virustotal, wot)4073248INANY+E2014-07-07
admin.wilyee.com (robtex, urlquery, urlvoid, virustotal, wot)40731INTXT+E2014-04-15
eschenemnogo.com (robtex, urlquery, urlvoid, virustotal, wot)4070245INANY+E2013-11-21
dk (robtex, urlquery, urlvoid, virustotal, wot)40701INANY+E2015-10-29
cdnmyhost.com (robtex, urlquery, urlvoid, virustotal, wot)40591INANY+E2015-02-18
www.djcgrafix.netfirms.com (robtex, urlquery, urlvoid, virustotal, wot)4048248INA+E2014-08-16
jerusalem.netfirms.com (robtex, urlquery, urlvoid, virustotal, wot)4044248INA+E2014-08-05
pipcvsemnaher.com (robtex, urlquery, urlvoid, virustotal, wot)4039239INANY+E2013-10-18
defcon.org (robtex, urlquery, urlvoid, virustotal, wot)40391INANY+E2015-02-01
webpanel.sk (robtex, urlquery, urlvoid, virustotal, wot)40381INANY+E2014-07-31
gerdar3.ru (robtex, urlquery, urlvoid, virustotal, wot)40341INANY+E2014-02-19
onlyforyoumydear.btnpl.net (robtex, urlquery, urlvoid, virustotal, wot)40320INANY+E2014-07-14
zing.zong.co.ua (robtex, urlquery, urlvoid, virustotal, wot)4027242INANY+E2014-02-27
4khdtv.btnpl.net (robtex, urlquery, urlvoid, virustotal, wot)40220INANY+E2014-07-10