Website Security & Threat Management
Memcrashed - Major amplification attacks from UDP port 11211

Memcrashed - Major amplification attacks from UDP port 11211

2/27/2018 · Marek Majkowski

What this post added

This post details a newly discovered and significant amplification attack vector using the memcached protocol over UDP port 11211. It explains the mechanics of such attacks, highlights the massive bandwidth generated (up to 260Gbps observed), identifies common sources of vulnerable memcached servers (OVH, Digital Ocean, Sakura), and provides actionable advice for memcached users, system administrators, and ISPs to mitigate these threats. It also emphasizes the ongoing challenge of IP spoofing and the need for developers to be cautious with UDP protocols.

Read the original post ↗