Ransom DDoS attack - need help!

Baldur Norddahl baldur.norddahl at gmail.com
Thu Dec 10 01:53:35 UTC 2015


>
>
> On 10 December 2015 at 01:48, alvin nanog <nanogml at mail.ddos-mitigator.net
> > wrote:
>
>> what app do yu have that talks to port 1900 ?
>>
>
> UDP 1900 is a "Chargen" UDP reflection attack. The DNS and NTP packets are
> also from a reflection attack.
>
>
Sorry I was made aware that UDP 1900 is SSDP. We still block it :-) To my
knowledge there is no real use case for it and no user has ever complained
about that being blocked.

Regards,

Baldur



More information about the NANOG mailing list