Re: Fwd: port 123 reflection attacks

2015-12-30 Thread Randy Bush
> - be sure ntpd is properly configured to be explicit, test it % ntpdc -n -c monlist psg.com psg.com: timed out, nothing received ***Request timed out this is the desired result. any real response means the host is open to be a reflector fwiw, i got caught last week. a

Re: Fwd: port 123 reflection attacks

2015-12-30 Thread alvin nanog
hi ya colin On 12/30/15 at 09:04am, Colin Johnston wrote: > Where does it say we need to contact home cert instead on your website ? because cnc...@cert.org.cn asked ? > verification of what ? i'd want to see if it's a simple port scan by a script kidddie vs a more serious upcoming DOS

Fwd: port 123 reflection attacks

2015-12-30 Thread Colin Johnston
il: cnc...@cert.org.cn website:www.cert.org.cn > Address: A3 Yumin Road, Chaoyang District, Beijing,100029, China > > > > > -- Original -- > From: "Colin Johnston"<col...@gt86car.org.uk>; > Date: Fri,