DDOS: Low Orbit Ion Cannon (LOIC) UDP Method
This signature detects the behavior of the Low Orbit Ion Cannon (LOIC) packet flooding tool when using the UDP Method option. Attackers can use this tool to send extremely large amounts of packets over the network to attempt to overwhelm a target. When used collectively from multiple sources, a Distributed Denial of Service (DDoS) can occur. Due to high performance impact this signature can impart, this signature should only be used to protect your servers when under active attack.
References
Short Name
DDOS:LOIC-UDP-METHOD
Severity
Major
Recommended
False
Recommended Action
Drop
Category
DDOS
Keywords
(LOIC) Cannon Ion Low Method Orbit UDP
Release Date
10/25/2010
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3538
Port
UDP/0-52,54-66,70-122,124,136,140-160,163-388,390-635,637-65535
False Positive
Unknown