[nsp-sec] NTP reflection attacks

Michael Sinatra michael at rancid.berkeley.edu
Wed Jan 8 20:50:23 EST 2014


On 01/08/14 11:44, Jared Mauch wrote:
> ----------- nsp-security Confidential --------
> 
> On Wed, Jan 08, 2014 at 02:39:04PM -0500, Jared Mauch wrote:
>> ----------- nsp-security Confidential --------
>>
>> On Thu, Jan 02, 2014 at 04:22:44PM +0000, Wentworth, Brett wrote:
>>> ----------- nsp-security Confidential --------
>>>
>>> We are seeing a spike.  Anyone else?
>>
>> Sure.
>>
>> http://openntpproject/ntp-worst-cymru.txt is available for your remediation action.
>> The website will be searchable soon, perhaps with the data from tomorrows scan.
> 
> that should be *dot org*
> 
> Also TOP ASNs:
>    2155 3152 

Yikes!  ACK for 3152, and also 68, 6406, 2936, 3428, in addition to what
I already acked.

michael





More information about the nsp-security mailing list