I have been learning about DDoS attacks and how to protect from it. I have a question regarding DDoS attacks. What are common services that are being misused in UDP amplification DDoS attacks?
1 Answer
The US-CERT lists a few. That list can also be easily found using a web search engine and the keywords in your question:
- DNS
- NTP
- SNMPv2
- NetBIOS
- SSDP
- CharGEN
- QOTD
- BitTorrent
- Kad
- Quake Network Protocol
- Steam Protocol
- RIPv1
- Multicast DNS (mDNS)
- Portmap
-
1Thanks, but can you answer a bit ditailed? I mean, why those services are misused?– RomzesCommented Mar 20, 2016 at 15:15
-
Because they can. They do let you command other machines to send data to a determined destination. Commented Mar 20, 2016 at 15:16