[pkg-ntp-maintainers] Should I worry about "ntpd[2994]: receive: Unexpected origin timestamp from" messages
Agustin Martin
agmartin at debian.org
Thu Oct 29 19:05:56 UTC 2015
Hi, ntp maintainers,
I am seeing a number of messages like
ntpd[2866]: receive: Unexpected origin timestamp from 176.31.53.99
in my syslog.
According to http://www.cs.bu.edu/~goldbe/NTPattack.html this might be an
indication of a so called 'priming-the-pump' attack, but it suggests to
upgrade to ntpd v4.2.8p4. However, I already have Debian 1:4.2.8p4+dfsg-3
installed.
176.31.53.99 seems to be be current IP of 2.es.pool.Ntp.org
Should I worry about those messages?
Thanks in advance,
--
Agustin
More information about the pkg-ntp-maintainers
mailing list