The number of NTP servers that can be abused to amplify DDoS attacks has decreased dramatically this year, but the threat remains.