Real-time Memcached-based UDP Reflection/Amplification Attack Monitoring

For more info, please check our Blog

The timezone shows on this page is GMT +8

Memcached reflection attack trends

Attack Trends in last 3 months

Real time victims under memcached reflection attacks

DatetimeVictim IPDomainASNCountry/Region
2018-10-16 10:08:01121.52.214.58pic.taiyasaifu.com
api.hb.0086org.cn
app.yz.0086org.com
www.yz.0086org.com
vodfile.taiyasaifu.com
China Tietong Telecommunication CorporationCHN
2018-10-16 10:07:3545.235.44.26--
2018-10-16 10:07:2978.124.24.194Societe Francaise du Radiotelephone S.AFRA
2018-10-16 10:07:15119.145.148.143list.nc808.com
a.10.ad-2.biz
GuangdongCHN
2018-10-16 10:06:55192.126.127.23www.fsdcq.com
fsdcq.com
HOSTSPACE NETWORKS LLCUSA
2018-10-16 10:06:52192.126.127.243www.mhhj88.com
uuxxyy.7soyx.com
uuxxyy.foshanwuying.com
uuxxyy.99haoyx.com
uuxxyy.haoyx88.com
HOSTSPACE NETWORKS LLCUSA
2018-10-16 10:06:5158.215.98.35opencdncloud.jomodns.com
feedfree.jomodns.com
opencdnglobal.jomodns.com
hjtslopencdn.jomodns.com
chuangcache-s.a.aocde.com
AS Number for CHINANET jiangsu province backboneCHN
2018-10-16 10:06:38120.76.77.48www.chinacar.com.cn
image.chinacar.com.cn
wap.chinacar.com.cn
chinacar.com.cn
Hangzhou Alibaba Advertising Co.,Ltd.CHN
2018-10-16 10:05:5814.192.5.18mk.tianziyu.com
hk.q-cdn.cn
Sun Network (Hong Kong) LimitedHKG
2018-10-16 10:05:24192.126.126.27www.nengshifu.comHOSTSPACE NETWORKS LLCUSA
2018-10-16 09:58:45192.238.223.122Nobis Technology Group, LLCUSA
2018-10-16 09:58:00201.160.245.105Cablemas Telecomunicaciones SA de CVMEX
2018-10-16 09:51:33119.23.64.55xx.msws168.comCHN
2018-10-16 09:50:4913.35.103.65cdn.rttnews.com
www.stoptheballardcoaltrain.org
yaribu.jp
new.gemm-therapy.com
USA
2018-10-16 09:42:20175.6.244.205HengyangCHN
2018-10-16 09:42:13139.129.176.9www.shusongji.org
www.qianguyi.com
qianguyi.com
Hangzhou Alibaba Advertising Co.,Ltd.CHN
2018-10-16 09:34:1623.225.192.131tkcp.bz
1tkcp.com
www.tkcp.bz
www.1tkcp.com
wap.1tkcp.com
Nobis Technology Group, LLCUSA
2018-10-16 09:27:33103.49.213.97sjdw5588.com
6wscc.com
www.542578.com
HOSTSPACE NETWORKS LLCUSA
2018-10-16 09:27:1727.155.82.220ChinanetCHN
2018-10-16 09:26:1639.108.224.154www.xiaoheizy.com
xiaoheizy.com
Hangzhou Alibaba Advertising Co.,Ltd.CHN
2018-10-16 09:18:41202.68.207.70Citic Telecom International (Data) Limited.HKG
2018-10-16 09:18:36202.68.207.59Citic Telecom International (Data) Limited.HKG
2018-10-16 09:18:2767.23.255.10HostDime.com, Inc.USA
2018-10-16 09:18:18123.129.198.125CNCGROUP China169 BackboneCHN
2018-10-16 09:17:57192.126.121.218www.yajia666.comHOSTSPACE NETWORKS LLCUSA
2018-10-16 09:17:36154.223.65.65www.mhhj88.comUSA
2018-10-16 09:11:47202.68.207.58Citic Telecom International (Data) Limited.HKG
2018-10-16 09:11:04187.72.154.94secure.levelupgames.com.brTELECOM S/ABRA
2018-10-16 09:11:02172.247.250.43Nobis Technology Group, LLCUSA
2018-10-16 09:10:1623.234.30.51HOSTSPACE NETWORKS LLCUSA
Distribution of victims by ASNs
Distribution of victims by country/region

The reflector counts being used to launch memcached amplification attacks

Trends in last 30 days
Reflector IPAttack countASN
61.164.142.19537820"AS4134 No.31,Jin-rong Street"
186.163.3.2235950"AS21575 ENTEL PERU S.A."
177.55.60.13734389"AS262493 Global Tech Internet Banda Larga EPP - ltda"
61.130.9.19528426"AS4134 No.31,Jin-rong Street"
122.228.89.22226445"AS134771 CHINANET Sichuan province Chengdu MAN network"
47.97.2.20024550"AS37963 Hangzhou Alibaba Advertising Co.,Ltd."
61.175.216.23824009"AS4134 No.31,Jin-rong Street"
117.27.154.2323561"AS133774 Fuzhou"
183.131.65.3522134"AS4134 No.31,Jin-rong Street"