This is a non-IMPACT record, meaning that access to the data is not controlled by IMPACT. For access, see the directions below.

This Resource is offered and provided outside of the IMPACT mediation framework. IMPACT and the IMPACT Coordination Council/Blackfire Technology, Inc. expressly disclaim all conditions, representations and warranties including but not limited to Resource availability, quality, accuracy, non-infringement, and non-interference. All Resource information and access is controlled by entities and under terms that are external to the IMPACT legal framework.


Active DNS Project
External Dataset
External Data Source
Georgia Institute of Technology
55 (lowest rank is 55)

Category & Restrictions

dns data, network data


In order to facilitate research around DNS, this project actively submits iterative and recursive DNS lookups for the several popular zones (i.e., COM, NAME, NET, ORG, BIZ) and lists of domain names (i.e., Alexa Top 1M, Public Blacklists) on a daily basis.

The dataset comes in Avro format which can be processed by several tools like avro-tools or fastavro for Python. We are working on a JSON version of the data for applications that do not rely on Java or Hadoop. This data is freely available to the academic research community for incorporation into new or existing work. This dataset relies on active DNS and a new large scale system, Thales, which is able to systematically query and collect large volumes of active DNS data. The output of this system is a distilled dataset that can be easily used by the security community. Thales has been reliably active for more than six monts and collected many terabytes of DNS data, while causing only a handful of abuse complaints.

Additional Details

active dns project, inferlink corporation, application layer protocols, data serialization formats, external data source, history of computing, 1269, domain name system, json, apache avro, domain name, hadoop, cloud computing, internet governance