Ransom DDoS attack - need help!
baldur.norddahl at gmail.com
Thu Dec 10 01:53:35 UTC 2015
> On 10 December 2015 at 01:48, alvin nanog <nanogml at mail.ddos-mitigator.net
> > wrote:
>> what app do yu have that talks to port 1900 ?
> UDP 1900 is a "Chargen" UDP reflection attack. The DNS and NTP packets are
> also from a reflection attack.
Sorry I was made aware that UDP 1900 is SSDP. We still block it :-) To my
knowledge there is no real use case for it and no user has ever complained
about that being blocked.
More information about the NANOG