Which type of attack occurs when an attacker utilizes a botnet to reflect requests off an NTP server to overwhelm their target?

A man-in-the-middle attack involves intercepting communications between two parties, not flooding a target with amplified reflection traffic.

A denial of service attack originates from a single source, whereas this scenario explicitly involves a botnet consisting of numerous distributed sources.

This describes a DDoS NTP amplification attack, which uses a botnet - a distributed network of compromised hosts - to send spoofed requests to publicly accessible NTP servers, which then reflect large responses to the victim. The distributed nature of the botnet differentiates this from a simple DoS attack, as traffic originates from many unique IP addresses simultaneously. The NTP monlist command can amplify requests by a factor of over 200x, making this a highly effective volumetric DDoS vector.

A replay attack retransmits previously captured legitimate traffic to impersonate a session, not to overwhelm a target with amplified reflected traffic.