from Hacker News

Memcrashed – Major amplification attacks from UDP port 11211

by rb2e on 2/27/18, 10:54 PM with 4 comments

• by hitsurume on 2/27/18, 11:34 PM

  Anyone run memcache outside their network to be able to get attacked like this? To be services like memcache, db, etc should all be internal use only and never allowed access from the outside.

• by muglug on 2/27/18, 10:59 PM

  I was caught up in this, but luckily my hosting provider (MediaTemple) disabled my server due to the large bandwidth overruns.

  It was fun to spend Sunday night hurriedly reading up on iptables. Still getting a lot of inbound traffic (everything is getting dropped), but thankfully no outbound now.