On 11 Jan 2014, at 21:09, Kent Borg wrote: > After poking around I finally isolated it: NTP. Perhaps this? http://blog.cloudflare.com/understanding-and-mitigating-ntp-based-ddos-attacks -- dNb