New Active Exploit: memcached on port 11211 UDP & TCP being exploited for reflection attacks

Michel 'ic' Luczak lists at
Fri Mar 2 21:48:56 UTC 2018

The ones I know do so on private VLANs (or ATM circuits on DSL) so anyway unrelated to any client’s address space. Also, french triple play ISPs use RFC1918 space for IPTV but again isolated of any customer network so doesn’t really matter.

> On 2 Mar 2018, at 22:18, K. Scott Helms <kscotthelms at> wrote:
> I won't comment on the sanity of doing so, but _many_ service providers use
> EMTAs, ATAs, and other voice devices over RFC1918 space back to their core.

More information about the NANOG mailing list