[nsp-sec] NTP server under attack

[Thomas Mangin]

Hello,

One of our NTP server ( 82.219.4.31 ) is under attack and is receiving in excess of 2 Gb/s of traffic and quite some PPS.

We are lucky and are now able to filter the attack at the edge using flowspec.
It was the first time that I had to use ExaBGP to filter a DDOS against my own network - glad I took the time to write the stuff :-)

Did other network see any attempt to get some NTP servers removed from the NTP pool ?
http://www.pool.ntp.org/scores/82.219.4.31

Regards,

Thomas
--
Exa Networks Limited - http://www.exa-networks.co.uk/
Company No. 04922037 - VAT no. 829 1565 09
27-29 Mill Field Road, BD16 1PY, UK
Phone: +44 (0) 845 145 1234 - Fax: +44 (0) 1274 567646

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 203 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20131105/8019c422/attachment-0001.sig>