Honeyntp is an ntp-scan logger/honeypot. The code is based on https://github.com/limifly/ntpserver by limifly. Original ReadME follows.
Thanks for his work ;-)
we log all ntp packs (and port numbers) into redis database. We don't keep packets but only first-seen/last-seen information per IP/Port pair.
The DDoS attempts would often use port :80 as source port. Enjoy!
A Python based ntp server.
Tested on Linux and Windows7.
Based on ntplib(https://pypi.python.org/pypi/ntplib/), thanks for their work.