[ntp:questions] NTP Denial of Service attack 29 November 2011
dfc-list at douglasfcalvert.net
Tue Nov 29 23:51:14 UTC 2011
On 11/29/2011 03:44 PM, Rich wrote:
> USNO is seeing an apparent coordinated denial of service attack on NTP
> originating with the following IPs:
> 188.8.131.52; 184.108.40.206; 220.127.116.11; 18.104.22.168. I
> recommend that you block 22.214.171.124/8, 126.96.36.199/8, and 188.8.131.52/8.
> There will likely be more to follow. These appear to originate on
> APNIC (Asian Pacific).
> Currently we are seeing many tens of thousands of packets per second
> coming in.
Pictures make every story better...
More information about the questions