Yep. Had a system on one of our ranges that was involved in yesterday's cloudfare ddos. It's not anymore and won't be anymore. Open to all NTP queries types from the world :/ Alan