[Pool] NTP amplification attack?
brak at constant.com
Thu Jul 23 23:38:58 UTC 2015
Honestly, it looks like someone's trying to abuse *his* machine to
We get abuse complaints all the time from people who are attacking us :/
On 7/23/2015 6:42 PM, oliver domke wrote:
> I got an abuse message today regarding an alleged ntp amplification attack,
> but I'm pretty sure that it's a confugiration problem on the other side.
> The guy sent me the following log-line:
> Jul 22 18:20:55 voip ntpd: sendto(18.104.22.168): Operation not permitted
> After some googling I think it's a firewall problem on the "voip" machine,
> not an attack from 22.214.171.124 (my machine).
> Can anyone confirm that?
> Thanks in advance!
> *Oliver Domke*
> +49 1575 663 66 53 | mail at piflix.de | Brünestr. 69, DE-52531 Übach-Palenberg
> pool mailing list
> pool at lists.ntp.org
More information about the pool