Attackers are abusing yet another protocol in order to amplify distributed denial-of-service attacks. Connectionless LDAP (CLDAP) is a variant of LDAP that uses the User Datagram Protocol (UDP) for transport. DDoS reflection is the practice of sending requests using a spoofed source IP address to various servers on the Internet, which will then direct their responses to that address instead of the real sender. CLDAP (LDAP over UDP) has an average amplification factor of 46x and a peak of 55x.”]