I have been learning about DDoS attacks and how to protect from it. I have a question regarding DDoS attacks. What are common services that are being misused in UDP amplification DDoS attacks?


The US-CERT lists a few. That list can also be easily found using a web search engine and the keywords in your question:

  • DNS
  • NTP
  • SNMPv2
  • NetBIOS
  • SSDP
  • CharGEN
  • QOTD
  • BitTorrent
  • Kad
  • Quake Network Protocol
  • Steam Protocol
  • RIPv1
  • Multicast DNS (mDNS)
  • Portmap
| improve this answer | |
  • 1
    Thanks, but can you answer a bit ditailed? I mean, why those services are misused? – Romzes Mar 20 '16 at 15:15
  • Because they can. They do let you command other machines to send data to a determined destination. – Tobi Nary Mar 20 '16 at 15:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.