UDP Bomb

Jhun Banzuela — Sun, 10 Mar 2019 13:09:58 GMT

Hi Expert,

We are always detecting too many UDP bomb event.

It is low severity though. Normally the victim IP is a mobile device.

Is there a way to know what is causing and how to prevent .

Regards,

Jhun

UDP flood attack can be

Ravi Singh — Thu, 17 Apr 2014 23:23:52 GMT

UDP flood attack can be initiated by sending a large number of UDP packets to random ports on a remote host. As a result, the distant host will:

Check for the application listening at that port;
See that no application listens at that port;
Reply with an ICMP Destination Unreachable packet.

Thus, for a large number of UDP packets, the victimized system will be forced into sending many ICMP packets, eventually leading it to be unreachable by other clients.

To block it you can see the following link

http://kb.cyberoam.com/default.asp?id=1232

topic UDP Bomb in Network Security

UDP Bomb

UDP flood attack can be