[nsp-sec] 50Gbps NTP Attack, 23377 Source IP addresses

[Borja Marcos]

> On 25/02/2014, at 11:20, Phil Rosenthal <pr at isprime.com> wrote:
> 
> ----------- nsp-security Confidential --------
> 
> Hello all,
> 
> We have had a reoccuring NTP Reflected DDoS attack against one of our customers, and would love it if we could get some of these open NTP servers could be closed up.

I've proxied the Spanish addresses to a Spanish security list where most of them are present. 




Borja.