[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Ransom DDoS attack - need help!
- Subject: Ransom DDoS attack - need help!
- From: baldur.norddahl at gmail.com (Baldur Norddahl)
- Date: Thu, 10 Dec 2015 02:53:35 +0100
- In-reply-to: <CAPkb-7Bz33D2m8rLBn-U=ZJOcUUZE9+LG9bBjUoHZU8DqRo-cw@mail.gmail.com>
- References: <CAKDS_tnZysQSQfoQve3X78FB5cO8HgD=jfFWBt1wz=ySrsxbsw@mail.gmail.com> <[email protected]> <CAPkb-7Bz33D2m8rLBn-U=ZJOcUUZE9+LG9bBjUoHZU8DqRo-cw@mail.gmail.com>
>
>
> On 10 December 2015 at 01:48, alvin nanog <nanogml at mail.ddos-mitigator.net
> > wrote:
>
>> what app do yu have that talks to port 1900 ?
>>
>
> UDP 1900 is a "Chargen" UDP reflection attack. The DNS and NTP packets are
> also from a reflection attack.
>
>
Sorry I was made aware that UDP 1900 is SSDP. We still block it :-) To my
knowledge there is no real use case for it and no user has ever complained
about that being blocked.
Regards,
Baldur