New Report: A Decade of Passive DNS: A Snapshot of Top-Level Domain Traffic



Farsight is pleased to be able to share a free new report entitled "A Decade of Passive DNS: A Snapshot of Top-Level Domain Traffic". The 181-page report is available for download now here.

This document summarizes what Farsight has seen in its global sensor network (plus ICANN zone files) for over 1500 IANA-recognized Top Level Domains (TLDs) from 2010 to 2019, including classic generic top-level domains (gTLDs), country-code top-level domains (ccTLDs), new generic top-level domains (gTLDs), and internationalized domain names (IDNs).

We share four values for non-DNSSEC RRtypes in each TLD:

  • The total number of unique RRsets (unique combinations of RRname, RRtype, Rdata, Bailiwick, sensor or zone data)
  • The total number of unique fully qualified domain names (FQDNs)
  • The total number of unique effective 2nd-level domains (or "delegation points")
  • The sum of counts, or total number of cache misses seen.

We also report the RRtype distribution (% "A" records, % "AAAA" records, % "CNAME" records, etc.) for each TLD (again excluding DNSSEC records).

We believe the information included in this report will be of great interest to those who may be curious about the relative size of various top level domains, and the distribution of RRtypes as seen by our sensors. This data will also allow current and prospective customers to get a lower bound of just how large DNSDB's data actually is, based on what was received through 2019.

The report is available here. If you have any questions or feedback about this report, please contact

Joe St Sauver is a Distinguished Scientist and the Director of Research for Farsight Security, Inc..