Re: New Active Exploit: memcached on port 11211 UDP & TCP being exploited for reflection attacks

[Ca By <cb.list6 () gmail com>]

On Tue, Feb 27, 2018 at 1:54 PM Chip Marshall <chip () 2bithacker net> wrote:

> On 2018-02-27, Ca By <cb.list6 () gmail com> sent:
> > Please do take a look at the cloudflare blog specifically as they name
> and
> > shame OVH and Digital Ocean for being the primary sources of mega crap
> > traffic
> https://blog.cloudflare.com/memcrashed-major-amplification-attacks-from-port-11211/
> > Also, policer all UDP all the time... UDP is unsafe at any speed.
>
> Hi, DigitalOcean here. We've taken steps to mitigate this attack on our
> network.
>
> Also, we've only seen udp/11211 being a problem. I'd be interested to
> hear of anyone seeing tcp/11211 attacks.

Thanks DO!

Just udp.



> --
> Chip Marshall <chip () 2bithacker net>
> http://2bithacker.net/