GoKawiilNetgear router bug swamped University of Wisconsin's NTP time server in 2003
In May 2003, UW-Madison discovered its public NTP time server was being hit by a massive, sustained flood of hundreds of thousands of packets per second from hundreds of thousands of hosts worldwide. Investigation revealed this wasn't a DDoS attack but a design flaw in a popular vendor's cheap consumer routers, which mistakenly hardcoded UW-Madison's server as a time source and queried it far too aggressively.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident showed how a single manufacturer's firmware mistake could unintentionally weaponize hundreds of thousands of consumer devices against public infrastructure, foreshadowing later IoT-driven network abuse. It forced a university to coordinate with a hardware vendor, standards bodies, and ISPs just to keep a basic time service running, highlighting the fragility of shared internet infrastructure.
- A vendor's low-cost residential routers hardcoded UW-Madison's NTP server, causing accidental mass flooding.
- The traffic reached hundreds of megabits per second and hundreds of thousands of packets per second, straining campus routers.
- The fix required multi-year coordination between the university, the manufacturer, RFC standards groups, and ISPs.
Ubiquiti UniFi Express Router — After reading how sloppy consumer router firmware once buried a university's NTP server in traffic, it's a good reminder that firmware quality matters. Ubiquiti's UniFi Express brings enterprise-style management and regular firmware updates to a compact home router, with a clean app for monitoring exactly what your network is doing.
See Ubiquiti UniFi Express Router on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: pages.cs.wisc.edu, 2026-09-13
Published there as: “Flawed Routers Flood University of Wisconsin Internet Time Server (2003)”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.