Understanding and mitigating NTP-based DDoS attacks | CloudFlare Blog NTP contains a command called monlist (or sometimes MON_GETLIST) which can be sent to an NTP server for monitoring purposes. It returns the addresses of up to the last 6…