Re: Ransom DDoS attack - need help!

[Baldur Norddahl <baldur.norddahl () gmail com>]

> On 10 December 2015 at 01:48, alvin nanog <nanogml () mail ddos-mitigator net
> > wrote:
>
> > what app do yu have that talks to port 1900 ?
>
> UDP 1900 is a "Chargen" UDP reflection attack. The DNS and NTP packets are
> also from a reflection attack.
Sorry I was made aware that UDP 1900 is SSDP. We still block it :-) To my
knowledge there is no real use case for it and no user has ever complained
about that being blocked.

Regards,

Baldur