Real-time Memcached-based UDP Reflection/Amplification Attack Monitoring

For more info, please check our Blog

The timezone shows on this page is GMT +8

Memcached reflection attack trends

Attack Trends in last 3 months

Real time victims under memcached reflection attacks

DatetimeVictim IPDomainASNCountry/Region
2019-04-24 02:36:18178.235.188.116VECTRA S.A.POL
2019-04-24 02:35:3323.224.179.30Nobis Technology Group, LLCUSA
2019-04-24 02:35:1823.245.100.29www.9me28.com
9me28.com
Enzu IncUSA
2019-04-24 02:35:10188.37.30.78Vodafone Telecel, Comunicacoes Pessoais, SAPRT
2019-04-24 02:33:41154.209.244.56USA
2019-04-24 02:33:39154.209.244.57USA
2019-04-24 02:33:37154.209.244.55USA
2019-04-24 02:33:3237.7.136.159Plus network operator in PolandPOL
2019-04-24 02:33:32154.209.244.54USA
2019-04-24 02:33:3152.81.29.85CHN
2019-04-24 02:33:3152.81.52.39CHN
2019-04-24 02:33:31103.46.138.850410.wyart.cc
0215.imaka.org
Hangzhou ZhiYu Network Technology Co.,Ltd.CHN
2019-04-24 02:33:2593.168.230.1Saudi Telecom Company JSCSAU
2019-04-24 02:33:21103.113.95.99evu15dh.cstack169.cname.hosts.topvps.topAP
2019-04-24 02:33:20119.188.197.49www-ptafw-com-1825.2cname.com
www-ptaft-com-1821.2cname.com
aftt-ptafw-com-1824.2cname.com
CNCGROUP China169 BackboneCHN
2019-04-24 02:33:04170.245.14.194BRA
2019-04-24 02:33:03120.55.9.90lks.dahongshan.vipHangzhou Alibaba Advertising Co.,Ltd.CHN
2019-04-24 02:25:41154.209.244.50USA
2019-04-24 02:25:40154.209.244.49USA
2019-04-24 02:25:40154.209.244.51USA
2019-04-24 02:25:36154.209.244.53USA
2019-04-24 02:25:35154.209.244.52USA
2019-04-24 02:25:21144.217.10.229dc-c03fd622d5c8.redefocus.tkCAN
2019-04-24 02:24:52172.83.153.211yytianya.com
vip.yytianya.top
www.yytianya.top
www.yytianya.com
--
2019-04-24 02:21:41103.91.10.44f102xir.yb559.com
e086uom.yb559.com
HKG
2019-04-24 02:17:17154.209.244.46USA
2019-04-24 02:17:16154.209.244.47USA
2019-04-24 02:17:13154.209.244.48USA
2019-04-24 02:17:03212.64.46.193www.91fyt.com
cms.dajingjuan.cn
cms.dajingjuan.com
gh.dajingjuan.cn
Euronet Communications B.V.CHN
2019-04-24 02:17:03119.29.75.182Shenzhen Tencent Computer Systems Company LimitedCHN
2019-04-24 02:16:5623.225.102.9nfhl.5a1.xyz
qf.x9i.cc
93515.ngkbkb01825.cn
46615.ngkbkb01825.cn
ep.k-ys.cn
Nobis Technology Group, LLCUSA
2019-04-24 02:10:12154.209.244.45USA
2019-04-24 02:10:11154.209.244.43USA
2019-04-24 02:10:08154.209.244.42USA
2019-04-24 02:10:08154.209.244.41USA
2019-04-24 02:10:07154.209.244.44USA
2019-04-24 02:09:1360.205.38.148CHN
2019-04-24 02:01:26154.209.244.38USA
2019-04-24 02:01:25154.209.244.39USA
2019-04-24 02:01:21154.209.244.40USA
2019-04-24 02:01:0834.245.23.134IRL
2019-04-24 01:54:14154.209.244.37USA
2019-04-24 01:54:07154.209.244.35USA
2019-04-24 01:54:07154.209.244.34USA
2019-04-24 01:54:05154.209.244.36USA
2019-04-24 01:53:51185.36.86.126Elta Kabel d.o.o.BIH
2019-04-24 01:53:51180.101.45.72taizhu.1e6r89z.topChinanetCHN
2019-04-24 01:53:4578.3.244.21Hrvatski Telekom d.d.HRV
2019-04-24 01:46:26154.209.244.30USA
2019-04-24 01:46:23154.209.244.29USA
Distribution of victims by ASNs
Distribution of victims by country/region

The reflector counts being used to launch memcached amplification attacks

Trends in last 30 days
Reflector IPAttack countASN
59.44.27.15863944"AS4134 No.31,Jin-rong Street"
183.131.114.11157405"AS4134 No.31,Jin-rong Street"
68.142.1.15852713"AS11280 SNAPPYDSL.NET"
115.231.100.12647655"AS4134 No.31,Jin-rong Street"
202.100.183.24038274"AS4134 No.31,Jin-rong Street"
47.97.43.6333137"AS37963 Hangzhou Alibaba Advertising Co.,Ltd."
121.43.35.14733071"AS37963 Hangzhou Alibaba Advertising Co.,Ltd."
177.75.64.232557"AS53087 TELY Ltda."
120.26.212.16832527"AS37963 Hangzhou Alibaba Advertising Co.,Ltd."
47.99.57.2432429"AS37963 Hangzhou Alibaba Advertising Co.,Ltd."