Real-time Memcached-based UDP Reflection/Amplification Attack Monitoring

For more info, please check our Blog

The timezone shows on this page is GMT +8

Memcached reflection attack trends

Attack Trends in last 3 months

Real time victims under memcached reflection attacks

DatetimeVictim IPDomainASNCountry/Region
2018-12-10 15:07:50118.70.153.145mail.tanhoangminh.com.vnThe Corporation for Financing & Promoting TechnologyVNM
2018-12-10 15:07:35123.206.81.85www.lc889.cnShenzhen Tencent Computer Systems Company LimitedCHN
2018-12-10 15:07:14198.44.231.143SERVERYOU INCUSA
2018-12-10 15:07:1423.252.161.193ymna.live
m.tkva.vip
07i5.cn
3w44.cn
m.tkvs.vip
HOSTSPACE NETWORKS LLCUSA
2018-12-10 15:06:4647.99.174.115duohg.com
www.duohg.com
CHN
2018-12-10 15:06:12180.101.78.19ChinanetCHN
2018-12-10 15:05:5547.75.127.30img.alialicdn.comHKG
2018-12-10 15:05:1962.210.170.81ONLINE S.A.S.FRA
2018-12-10 15:03:5847.75.248.246www.10679yc.comHKG
2018-12-10 15:03:39103.197.69.205hzj.jqdns.netItace International LimitedHKG
2018-12-10 15:03:37113.137.59.32ChinanetCHN
2018-12-10 15:03:3452.208.177.248infinox.com
www.infinox.com
IRL
2018-12-10 15:03:01116.213.39.229hzj.jqdns.net
gao141.bbin-cdn.com
NETWORK AND SECURITY SOLUTIONS LIMITEDHKG
2018-12-10 15:02:42221.206.123.30bbs.mdjaa.com
home.mdjaa.com
www.mdjaa.com
CNCGROUP China169 BackboneCHN
2018-12-10 15:02:39115.231.35.146ChinanetCHN
2018-12-10 15:02:35103.43.188.120hkvhost693.800cdn.comSGP
2018-12-10 15:02:32115.231.234.37xc4j.xyz
baxv.xyz
5yvn.xyz
5iq8.xyz
4cvi.xyz
ChinanetCHN
2018-12-10 15:02:29103.224.25.169661p.com
9662ac.com
60 Market Square,P.O. Box 364PHL
2018-12-10 15:02:28103.224.26.1399661qs.com
9661xz.com
60 Market Square,P.O. Box 364PHL
2018-12-10 15:02:2727.50.162.216CNCGROUP China169 BackboneCHN
2018-12-10 15:02:2759.188.255.86www.qm0471.com
3tong.com.cn
AS number for New World Telephone Ltd.HKG
2018-12-10 15:01:39113.10.181.8www.tcl2013.comAS number for New World Telephone Ltd.HKG
2018-12-10 15:00:2342.96.143.101www.wlho.cn
wlho.com
www.wlho.com.cn
Hangzhou Alibaba Advertising Co.,Ltd.CHN
2018-12-10 14:56:13183.131.217.190ChinanetCHN
2018-12-10 14:55:5645.199.157.50fangddos.usa-cdn.comMULTACOM CORPORATIONUSA
2018-12-10 14:55:26103.88.32.101CHN
2018-12-10 14:55:2443.248.191.105CHN
2018-12-10 14:55:08119.188.250.9CNCGROUP China169 BackboneCHN
2018-12-10 14:55:0423.234.30.226gjjp.yxid.net
wnf.yxid.net
HOSTSPACE NETWORKS LLCUSA
2018-12-10 14:55:0423.234.30.209gjjb.yxid.netHOSTSPACE NETWORKS LLCUSA
2018-12-10 14:55:0359.188.255.61cg008.w214-e1.ezcname.com
nhb093039.w214-e1.ezcname.com
AS number for New World Telephone Ltd.HKG
2018-12-10 14:55:0239.107.67.220ycwlwh.com
www.ycwlwh.com
wd.ycwlwh.com
Hangzhou Alibaba Advertising Co.,Ltd.CHN
2018-12-10 14:53:18184.168.221.34GoDaddy.com, LLCUSA
2018-12-10 14:51:00115.159.123.104Shenzhen Tencent Computer Systems Company LimitedCHN
2018-12-10 14:47:59183.131.182.38ChinanetCHN
2018-12-10 14:47:4745.199.158.223fangddos.usa-cdn.comMULTACOM CORPORATIONUSA
2018-12-10 14:47:4645.199.158.1MULTACOM CORPORATIONUSA
2018-12-10 14:47:4345.199.158.236fangddos.usa-cdn.comMULTACOM CORPORATIONUSA
2018-12-10 14:47:4245.199.158.224MULTACOM CORPORATIONUSA
2018-12-10 14:47:4245.199.158.227fangddos.usa-cdn.com
qqgaofang.yunfangyu9.com
MULTACOM CORPORATIONUSA
2018-12-10 14:47:41160.19.50.159fxoum.cc
fxoum.com
HKG
2018-12-10 14:47:33118.31.11.204cdn.xiaoyangren.netHangzhou Alibaba Advertising Co.,Ltd.CHN
2018-12-10 14:44:3527.155.82.196ChinanetCHN
2018-12-10 14:39:37146.88.84.1189661w.com60 Market Square,P.O. Box 364PHL
2018-12-10 14:38:4935.156.160.57europe.ethash-hub.miningpoolhub.com
ec2-35-156-160-57.eu-central-1.compute.amazonaws.com
Merit Network Inc.DEU
2018-12-10 14:38:3761.146.72.208GuangdongCHN
2018-12-10 14:38:29219.234.29.188HKG
2018-12-10 14:38:23170.33.9.64zhoujissl.ppbk5.com
www.kkw7070.com
www.kkw6060.com
TIME dotCom BerhadHKG
2018-12-10 14:36:44148.70.100.93Spacenet, Inc.CHN
2018-12-10 14:36:43222.186.171.66cdn.xiaoyangren.netChinanetCHN
Distribution of victims by ASNs
Distribution of victims by country/region

The reflector counts being used to launch memcached amplification attacks

Trends in last 30 days
Reflector IPAttack countASN
177.55.60.13792041"AS262493 Global Tech Internet Banda Larga EPP - ltda"
201.16.140.12662743"AS16735 ALGAR TELECOM S/A"
138.117.4.17256017"AS263765 XINWEI INTELCOM.NIC, S.A."
186.103.142.17952004"AS15311 Telefonica Empresas"
190.111.31.12951598"AS27742 Amnet Telecomunicaciones S.A."
200.48.243.20350923"AS6147 Telefonica del Peru S.A.A."
187.72.167.11548913"AS16735 ALGAR TELECOM S/A"
190.111.29.11848140"AS23243 COMCEL GUATEMALA S.A."
200.115.155.10345845"AS21599 Cable Onda"
186.103.221.17945292"AS15311 Telefonica Empresas"