Honeypot DNS and amplification attacks

This page is updated daily. Last update: 2016-09-29 22:07:02 UTC

Low bandwidth open resolver server to observe DNS amplification attacks automatically, providing IP addresses target.
Warning: the table contains false positives and legitimate domains (ie. google.com, openresolverproject.org etc.).

Documentation | Target map | Latest attacks | Top 10 target IPs address | Top 10 target countries | Latest distinct FQDN collected | Top 100 FQDN collected

Documentation:

Target countries map



Latest DNS reflection attacks (see all)

Dateins IP ATTACKED ASN ASN org DNS Geo
2016-09-24 15:55:1631.204.128.2249544INTERACTIVE3D , NLhosted-by.2sync.coNL
2016-09-23 21:59:1840.74.50.2388075MICROSOFT-CORP-MSN-AS-BLO...n/aNL
2016-09-15 14:57:16176.31.39.10216276OVH , FRn/aFR
2016-09-12 11:37:1691.220.101.4634259HIGHLOADSYSTEMS , UAsrv-s46.antiddos.euNL
2016-09-03 23:59:15147.75.205.14154825PACKET Packet Host, Inc., USbkaUS
2016-09-02 16:35:16104.236.186.12614061DIGITALOCEAN-ASN Digital ...production.ap.4201c8.boostgram.comUS
2016-08-30 09:53:17162.248.92.7814586NUCLEARFALLOUT-CHI Nuclea...v-162-248-92-78.unman-vds.premium-chicago.nfoservers.comUS
2016-06-28 06:03:18104.85.165.120940AKAMAI-ASN1 , USa104-85-165-1.deploy.static.akamaitechnologies.comUS
2016-05-31 21:03:35202.106.83.1254808CHINA169-BJ China Unicom ...64.83.106.202.icbc.com.cnCN
2016-05-26 15:03:34219.142.91.1254847CNIX-AP China Networks In...n/aCN

Top 10 target IPs

# IP ATTACKED ASN ASN org DNS Geo
1669.31.20.7835994AKAMAI-AS Akamai Technolo...n/aUS
1269.31.20.7635994AKAMAI-AS Akamai Technolo...n/aUS
724.27.236.1377843TWCABLE-BACKBONE Time War...n/aUS
569.31.20.7535994AKAMAI-AS Akamai Technolo...n/aUS
5185.130.5.228203569SILK-AS Sindicate Group Ltd,LTn/aUNK
4186.2.164.30262254DANCOM LTDddos-guard.netRU
4104.255.67.21146664VOLUMEDRIVE VolumeDrive,USn/aUNK
4109.163.224.343223VOXILITY Voxility S.R.L.,ROwww.voxility.comRO
3104.96.1.5220940AKAMAI-ASN1 Akamai Intern...a104-96-1-52.deploy.static.akamaitechnologies.comUNK
3104.85.165.120940AKAMAI-ASN1 Akamai Intern...a104-85-165-1.deploy.static.akamaitechnologies.comUNK

Top 10 target countries

# Tld Geo
113USUS
38RURU
29NLNL
24UNKUNK
23FRFR
18CNCN
12BZBZ
12CACA
11DEDE
9GBGB

Latest distinct FQDN collected

FQDN Size Dateins
tl7h.56ba254f.wc.syssec.rub.de (robtex, urlquery, urlvoid, virustotal, wot)752016-09-25
buydomains.com (robtex, urlquery, urlvoid, virustotal, wot)5422016-09-21
k9l5.3bf50e57.wc.syssec.rub.de (robtex, urlquery, urlvoid, virustotal, wot)752016-09-17
leth.cc (robtex, urlquery, urlvoid, virustotal, wot)124222016-09-14
activum.nu (robtex, urlquery, urlvoid, virustotal, wot)77142016-09-14
7f.io (robtex, urlquery, urlvoid, virustotal, wot)2442016-09-14
samfunnsovervakning.no (robtex, urlquery, urlvoid, virustotal, wot)205152016-09-14
hoffmeister.be (robtex, urlquery, urlvoid, virustotal, wot)110792016-09-14
surfcontrol.cn (robtex, urlquery, urlvoid, virustotal, wot)432016-09-14
asac.pw (robtex, urlquery, urlvoid, virustotal, wot)40882016-09-12

FQDN collected and corresponding amplification (Top 100)

+/- recursion, S signed, E EDNS0, D DNSSEC, CD/C checking
FQDN Size # Address Class Type Flags Dateins
lolwhatabeautifuldomain.btnpl.net (robtex, urlquery, urlvoid, virustotal, wot)3777613INANY+E2014-07-08
web3.ikrizzy.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)266840INANY+E2014-07-16
downboot.xyz (robtex, urlquery, urlvoid, virustotal, wot)217451345INANY+E2016-05-31
thebestdomainintheworld.cloudns.eu (robtex, urlquery, urlvoid, virustotal, wot)217391344INANY+E2013-11-15
samfunnsovervakning.no (robtex, urlquery, urlvoid, virustotal, wot)205151INANY+E2016-09-14
inboot.eu (robtex, urlquery, urlvoid, virustotal, wot)2026530INA+E2014-05-28
d5l.ru (robtex, urlquery, urlvoid, virustotal, wot)144631INANY+2016-09-09
leth.cc (robtex, urlquery, urlvoid, virustotal, wot)124221INANY+E2016-09-14
hoffmeister.be (robtex, urlquery, urlvoid, virustotal, wot)110791INANY+E2016-09-14
amp.crack-zone.ru (robtex, urlquery, urlvoid, virustotal, wot)92790INANY+E2013-12-22
remix-developement.com (robtex, urlquery, urlvoid, virustotal, wot)87111INANY+E2014-07-09
magas.bslrpg.com (robtex, urlquery, urlvoid, virustotal, wot)8263510INANY+E2014-05-15
ahuyehue.info (robtex, urlquery, urlvoid, virustotal, wot)8067490INANY+E2014-03-09
activum.nu (robtex, urlquery, urlvoid, virustotal, wot)77141INANY+E2016-09-14
svist21.cz (robtex, urlquery, urlvoid, virustotal, wot)70681INANY+E2014-07-14
commerce.gov (robtex, urlquery, urlvoid, virustotal, wot)69741INANY+E2015-02-21
globe.gov (robtex, urlquery, urlvoid, virustotal, wot)69712INANY+E2014-12-15
067.cz (robtex, urlquery, urlvoid, virustotal, wot)67541INANY+E2014-07-10
gransy.com (robtex, urlquery, urlvoid, virustotal, wot)62701INANY+E2014-11-27
1x1.cz (robtex, urlquery, urlvoid, virustotal, wot)61711INANY+E2013-09-27
census.gov (robtex, urlquery, urlvoid, virustotal, wot)59371INANY+E2014-05-16
doc.gov (robtex, urlquery, urlvoid, virustotal, wot)59201INANY+E2013-10-12
amp2.hornyhf.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)58120INANY+E2014-07-13
test.zong.co.ua (robtex, urlquery, urlvoid, virustotal, wot)57700INANY+E2014-06-04
zzxz.com.ru (robtex, urlquery, urlvoid, virustotal, wot)54251INANY+E2014-08-25
psg.com (robtex, urlquery, urlvoid, virustotal, wot)49451INANY+E2015-04-05
httrack.com (robtex, urlquery, urlvoid, virustotal, wot)48651INANY+E2015-03-09
sema.cz (robtex, urlquery, urlvoid, virustotal, wot)48551INANY+E2013-12-30
lalka.com.ru (robtex, urlquery, urlvoid, virustotal, wot)48511INANY+E2014-07-07
energystar.gov (robtex, urlquery, urlvoid, virustotal, wot)48111INANY+E2014-08-18
sandia.gov (robtex, urlquery, urlvoid, virustotal, wot)45461INANY+E2013-11-06
ietf.org (robtex, urlquery, urlvoid, virustotal, wot)45161INANY+E2013-10-11
infoblox.com (robtex, urlquery, urlvoid, virustotal, wot)44981INANY+E2014-05-22
ic3.gov (robtex, urlquery, urlvoid, virustotal, wot)44891INANY+E2015-06-05
bang.zong.co.ua (robtex, urlquery, urlvoid, virustotal, wot)4475270INANY+E2014-06-13
inboot.co (robtex, urlquery, urlvoid, virustotal, wot)44611INANY+E2015-02-20
cpsc.gov (robtex, urlquery, urlvoid, virustotal, wot)44541INANY+E2015-07-12
hajjamservices.us (robtex, urlquery, urlvoid, virustotal, wot)4432242INANY+E2016-06-18
socrata.com (robtex, urlquery, urlvoid, virustotal, wot)44311INANY+E2015-03-11
eda.gov (robtex, urlquery, urlvoid, virustotal, wot)44071INANY+E2015-04-09
vlch.net (robtex, urlquery, urlvoid, virustotal, wot)435116INTXT+E2014-12-09
hotpujcka.cz (robtex, urlquery, urlvoid, virustotal, wot)43451INANY+E2015-06-04
siska1.com (robtex, urlquery, urlvoid, virustotal, wot)4336257INANY+E2013-11-10
wapa.gov (robtex, urlquery, urlvoid, virustotal, wot)43171ANYANY+E2016-06-18
access-board.gov (robtex, urlquery, urlvoid, virustotal, wot)42891INANY+2015-10-09
36088.info (robtex, urlquery, urlvoid, virustotal, wot)4239256INANY+E2013-10-13
37349.info (robtex, urlquery, urlvoid, virustotal, wot)4239256INANY+E2013-10-16
io (robtex, urlquery, urlvoid, virustotal, wot)42181ANYANY+E2015-06-09
aa3247.com (robtex, urlquery, urlvoid, virustotal, wot)4167256INA+E2013-09-27
30259.info (robtex, urlquery, urlvoid, virustotal, wot)4166256INA+E2013-10-09
www.jrdga.info (robtex, urlquery, urlvoid, virustotal, wot)4154255INA+E2014-02-27
web.ikrizzy.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-07-15
umad.nothink.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-08-28
try.ikrizzy.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-07-31
hek.heckbro.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41500INANY+E2014-10-10
bmw.digmehl.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41490INANY+E2014-10-28
bangtest.zong.co.ua (robtex, urlquery, urlvoid, virustotal, wot)4136250INANY+E2014-06-05
web.asdasd.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)41300INANY+E2014-07-17
hold.mybig.mobi (robtex, urlquery, urlvoid, virustotal, wot)4126252INANY+E2014-07-10
fema.gov (robtex, urlquery, urlvoid, virustotal, wot)41091INANY+E2014-05-01
sukapadla.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41081INANY+E2014-11-27
pizdaizda.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41081INANY+E2014-12-08
fkfkfkfc.biz (robtex, urlquery, urlvoid, virustotal, wot)4107236INANY+E2014-03-08
rukojop.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41061INANY+E2014-12-14
basjuk.com.ru (robtex, urlquery, urlvoid, virustotal, wot)41051INANY+E2014-12-03
pidarastik.ru (robtex, urlquery, urlvoid, virustotal, wot)41041INANY+E2015-01-13
a.packetdevil.com (robtex, urlquery, urlvoid, virustotal, wot)41030INANY+E2013-11-25
uzuzuu.ru (robtex, urlquery, urlvoid, virustotal, wot)41001INANY+E2015-01-14
martinimedianetwork.com (robtex, urlquery, urlvoid, virustotal, wot)40971INANY+E2015-06-04
ttrs.spb.ru (robtex, urlquery, urlvoid, virustotal, wot)40921INANY+E2014-11-20
htyper.xyz (robtex, urlquery, urlvoid, virustotal, wot)4091244INANY+E2016-09-12
asac.pw (robtex, urlquery, urlvoid, virustotal, wot)4088244INANY+E2016-09-12
lrc-pipec.com (robtex, urlquery, urlvoid, virustotal, wot)4083241INANY+E2013-11-16
sunrisecx.com (robtex, urlquery, urlvoid, virustotal, wot)4082250INA+E2015-05-05
reanimator.in (robtex, urlquery, urlvoid, virustotal, wot)4082240INA+E2013-11-01
ms08067.com (robtex, urlquery, urlvoid, virustotal, wot)4081250INA+E2015-05-16
sswew.co.uk (robtex, urlquery, urlvoid, virustotal, wot)4081242INANY+E2014-05-15
q1w.in (robtex, urlquery, urlvoid, virustotal, wot)4078250INA+E2015-07-08
amp.hornyhf.cu.cc (robtex, urlquery, urlvoid, virustotal, wot)40760INANY+E2014-07-13
somethingstrange.netfirms.com (robtex, urlquery, urlvoid, virustotal, wot)4073248INANY+E2014-07-07
admin.wilyee.com (robtex, urlquery, urlvoid, virustotal, wot)40731INTXT+E2014-04-15
eschenemnogo.com (robtex, urlquery, urlvoid, virustotal, wot)4070245INANY+E2013-11-21
dk (robtex, urlquery, urlvoid, virustotal, wot)40701INANY+E2015-10-29
cdnmyhost.com (robtex, urlquery, urlvoid, virustotal, wot)40591INANY+E2015-02-18
www.djcgrafix.netfirms.com (robtex, urlquery, urlvoid, virustotal, wot)4048248INA+E2014-08-16
jerusalem.netfirms.com (robtex, urlquery, urlvoid, virustotal, wot)4044248INA+E2014-08-05
pipcvsemnaher.com (robtex, urlquery, urlvoid, virustotal, wot)4039239INANY+E2013-10-18
defcon.org (robtex, urlquery, urlvoid, virustotal, wot)40391INANY+E2015-02-01
webpanel.sk (robtex, urlquery, urlvoid, virustotal, wot)40381INANY+E2014-07-31
gerdar3.ru (robtex, urlquery, urlvoid, virustotal, wot)40341INANY+E2014-02-19
onlyforyoumydear.btnpl.net (robtex, urlquery, urlvoid, virustotal, wot)40320INANY+E2014-07-14
zing.zong.co.ua (robtex, urlquery, urlvoid, virustotal, wot)4027242INANY+E2014-02-27
4khdtv.btnpl.net (robtex, urlquery, urlvoid, virustotal, wot)40220INANY+E2014-07-10
viareality.cz (robtex, urlquery, urlvoid, virustotal, wot)40191INANY+E2015-03-09
z4w.ru (robtex, urlquery, urlvoid, virustotal, wot)4016247INA+E2015-05-17
6z2.ru (robtex, urlquery, urlvoid, virustotal, wot)4016247INA+E2015-11-01
vizit-gamepro.ru (robtex, urlquery, urlvoid, virustotal, wot)40141INANY+ED2015-05-10
lifemotodrive.ru (robtex, urlquery, urlvoid, virustotal, wot)40141INANY+E2015-04-22
ironmen-style.ru (robtex, urlquery, urlvoid, virustotal, wot)40141INANY+ED2015-05-11
restorclub.ru (robtex, urlquery, urlvoid, virustotal, wot)40111INANY+ED2015-08-01