I have been learning about DDoS attacks and how to protect from it. I have a question regarding DDoS attacks. What are common services that are being misused in UDP amplification DDoS attacks?

1 Answer 1


The US-CERT lists a few. That list can also be easily found using a web search engine and the keywords in your question:

  • DNS
  • NTP
  • SNMPv2
  • NetBIOS
  • SSDP
  • CharGEN
  • QOTD
  • BitTorrent
  • Kad
  • Quake Network Protocol
  • Steam Protocol
  • RIPv1
  • Multicast DNS (mDNS)
  • Portmap
  • 1
    Thanks, but can you answer a bit ditailed? I mean, why those services are misused?
    – Romzes
    Mar 20, 2016 at 15:15
  • Because they can. They do let you command other machines to send data to a determined destination.
    – Tobi Nary
    Mar 20, 2016 at 15:16

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .