[j-nsp] Juniper UDP Amplification Attack - UDP port 111 ?

[Roland Dobbins]

On 16 Mar 2018, at 8:59, Chris Kawchuk wrote:

> Just a heads up; I'm probably not the first person to see this--

This is rpcbind/portmapper, FYI, which is often abused for 
reflection/amplification attacks.

I'm assuming vMX is a virtual MX - if so, are you sure the issue isn't 
on the hypervisor host?

If not, definitely seems like a bug which should be reported to JSIRT.

-----------------------------------
Roland Dobbins <rdobbins at arbor.net>