Ransom DDoS attack - need help!
Baldur Norddahl
baldur.norddahl at gmail.com
Thu Dec 10 01:53:35 UTC 2015
>
>
> On 10 December 2015 at 01:48, alvin nanog <nanogml at mail.ddos-mitigator.net
> > wrote:
>
>> what app do yu have that talks to port 1900 ?
>>
>
> UDP 1900 is a "Chargen" UDP reflection attack. The DNS and NTP packets are
> also from a reflection attack.
>
>
Sorry I was made aware that UDP 1900 is SSDP. We still block it :-) To my
knowledge there is no real use case for it and no user has ever complained
about that being blocked.
Regards,
Baldur
More information about the NANOG
mailing list