[ntp:questions] NTP Denial of Service attack 29 November 2011

Rich schmidt.rich at gmail.com
Tue Nov 29 20:44:44 UTC 2011


USNO is seeing an apparent coordinated denial of service attack on NTP
originating with the following IPs:
220.117.53.67; 218.92.115.152; 114.40.28.224; 218.201.21.194.   I
recommend that you block 220.0.0.0/8, 218.0.0.0/8, and 114.0.0.0/8.
There will likely be more to follow. These appear to originate on
APNIC (Asian Pacific).

Currently we are seeing many tens of thousands of packets per second
coming in.

R.Schmidt
Time Service Department
US Naval Observatory

29 November 2011



More information about the questions mailing list