New DDOS Attack Vector: Network Time Protocol (NTP)

"The Network Time Protocol, or NTP, syncs time between machines on the network, and runs over port 123 UDP. It's typically configured once by network administrators and often is not updated, according to Symantec, which discovered a major jump in attacks via the protocol over the past few weeks.

'NTP is one of those set-it-and-forget-it protocols that is configured once, and most network administrators don't worry about it after that. Unfortunately, that means it is also not a service that is upgraded often, leaving it vulnerable to these reflection attacks,' says Allan Liska, a Symantec researcher in blog post last week:"

http://www.darkreading.com/attacks-breaches/attackers-wage-network-time-protocol-bas/240165063