[Pool] NTP amplification attack?

Brian Rak brak at constant.com
Thu Jul 23 23:38:58 UTC 2015


Honestly, it looks like someone's trying to abuse *his* machine to 
attack you.

We get abuse complaints all the time from people who are attacking us :/

On 7/23/2015 6:42 PM, oliver domke wrote:
> I got an abuse message today regarding an alleged ntp amplification attack,
> but I'm pretty sure that it's a confugiration problem on the other side.
> The guy sent me the following log-line:
>
> Jul 22 18:20:55 voip ntpd[2743]: sendto(5.9.29.107): Operation not permitted
>
>
> After some googling I think it's a firewall problem on the "voip" machine,
> not an attack from 5.9.29.107 (my machine).
> Can anyone confirm that?
>
> Thanks in advance!
>
> *Oliver Domke*
> +49 1575 663 66 53 | mail at piflix.de | Brünestr. 69, DE-52531 Übach-Palenberg
> _______________________________________________
> pool mailing list
> pool at lists.ntp.org
> http://lists.ntp.org/listinfo/pool



More information about the pool mailing list