I've been studying DOS flood attacks, namely NTP and DNS floods. I know that monlist is the primary factor in launching these sorts of attacks, but I have one question. The problem is are these servers still dangerous without it it enabled? I mean if I tried to run a NTP packet flood without monlist enabled would it still cause a DOS attack or would nothing happen?

  • 2
    NTP servers can still be abused for DoS, just not as badly as when monlist is enabled.
    – forest
    Nov 12, 2018 at 3:20

1 Answer 1


I think that the monlist is used for amplify the attach basically, so no the case of amplification attacks I don't think is a problem, however, the NTP servers could still be used for DoS attacks but not with amplification capabilities.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.