Reflection Attack

Definition: An attack where the perpetrator spoofs the victim’s IP address and sends requests to third-party servers, which then direct their responses to the victim.

Example: In an NTP reflection attack, an attacker might send a small “get monlist” request (234 bytes) to multiple NTP servers using the victim’s spoofed IP. Each server responds with a large packet (around 100 times larger) to the victim, amplifying the attack.