---
title: Hosts Making A Lot of DNS Requests
description: The query uses Zeek DNS logs see which hosts on your network are making the most DNS requests. It demonstrates well the ax, stats, and alias modules.
---

[Gravwell Blog ](https://www.gravwell.io/blog)

# [Hosts Making A Lot of DNS Requests](https://www.gravwell.io/blog/hosts-making-a-lot-of-dns-requests)

 Written by [Gravwell](https://www.gravwell.io/blog/author/gravwell) | Jun 23, 2021 1:28:10 PM

This query uses Zeek DNS logs to see which hosts on your network are making the most DNS requests. Although simple, it does a good job of demonstrating the ax, stats, and alias modules. here…

`tag=zeekdns ax`

`| alias orig Host`

`| stats count by Host`

`| table Host count`

 

[View full post](https://www.gravwell.io/blog/hosts-making-a-lot-of-dns-requests)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Gravwell"
  },
  "dateModified" : "2025-08-23T21:37:38.335Z",
  "datePublished" : "2021-06-23T13:28:10Z",
  "headline" : "Hosts Making A Lot of DNS Requests",
  "image" : {
    "@type" : "ImageObject",
    "height" : 60,
    "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
    "width" : 60
  },
  "mainEntityOfPage" : "https://www.gravwell.io/blog/hosts-making-a-lot-of-dns-requests",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Want deeper insights? Read exclusive commentary from the Gravwell team on the issues that matter most. "
  }
}
```