Estimated active ntp pool clients: 2995 Estimated abusive ntp pool clients: 43 Estimated inactive ntp pool clients: 4808 Total ntp pool clients being tracked: 7803 Note: NTP is a stateless and connectionless (UDP based) protocol, so exact numbers can't be determined. 677276 ntp requests, in total, have been seen since 07/03/05 03:49:06 588450 (86.9%) are from clients that are still active. Long term request rate: 0.074 seconds between requests (13.46 req/sec) Long term bandwidth in: 0.999 KBytes/s 7.990 Kbits/s Long term bandwidth in: 2.469 GB/month 19.750 Gb/month Current request rate: 0.074 seconds between requests (13.51 req/sec) Current bandwidth in: 1.003 KBytes/s 8.022 Kbits/s Current bandwidth in: 2.479 GB/month 19.831 Gb/month (NTP packets are usually 76 bytes, UDP overhead included, in each direction.) The dump file was written 38 seconds ago, at 07/03/05 17:47:56 Subnets with many clients: # of Subnet Total Aggregate Abusive IPs Count Rate Clients 12 128.226.2.x 751 78.955 0 9 66.92.24.x 724 67.296 0 6 195.228.240.x 969 50.935 0 6 217.78.0.x 1591 36.351 0 6 192.117.233.x 1024 38.431 0 5 212.55.198.x 1019 27.409 0 5 64.221.167.x 38 1094.440 0 4 147.32.84.x 1018 58.152 0 4 62.59.197.x 51 201.407 0 Clients with rapid updates (min requests of 100): Rank First Seen Client IP Requests Rate Usage Cumulative 1 07/03/05 03:49:06 24.98.240.189 40064 1.14 6.81% 6.81% * ! 2 07/03/05 03:49:07 200.42.40.207 40002 1.00 6.80% 13.61% * ! 3 07/03/05 03:49:07 67.189.5.126 31431 1.35 5.34% 18.95% * ! 4 07/03/05 03:49:07 62.244.109.246 24433 2.08 4.15% 23.10% * ! 5 07/03/05 03:49:08 204.185.42.148 22223 6.18 3.78% 26.88% * ! 6 07/03/05 03:49:08 204.60.87.242 20428 2.00 3.47% 30.35% * ! 7 07/03/05 03:49:06 80.26.90.87 20298 2.00 3.45% 33.80% * ! 8 07/03/05 03:51:14 68.48.245.115 18132 8.63 3.08% 36.88% * ! 9 07/03/05 10:29:23 85.204.188.160 13671 1.06 2.32% 39.20% * ! 10 07/03/05 03:50:14 213.96.248.50 10739 7.12 1.82% 41.03% * ! 11 07/03/05 03:59:04 212.106.224.74 6029 7.81 1.02% 42.05% * ! 12 07/03/05 03:49:18 212.227.165.27 3336 14.50 0.57% 42.62% * ! 13 07/03/05 03:49:19 66.93.114.95 3309 15.01 0.56% 43.18% * ! 14 07/03/05 03:49:19 209.61.155.188 3309 15.01 0.56% 43.74% * ! 15 07/03/05 03:49:08 217.40.213.68 3097 16.03 0.53% 44.27% * ! 16 07/03/05 13:10:16 209.20.249.192 3077 14.12 0.52% 44.79% * ! 17 07/03/05 03:49:22 63.117.208.66 3070 16.00 0.52% 45.31% * ! 18 07/03/05 03:49:07 203.97.51.57 3026 16.00 0.51% 45.83% * ! 19 07/03/05 03:49:13 153.96.16.129 3020 16.32 0.51% 46.34% * ! 20 07/03/05 03:49:16 80.218.239.145 2951 17.89 0.50% 46.84% * ! 21 07/03/05 03:49:41 202.138.229.251 2252 27.66 0.38% 47.23% * ! 22 07/03/05 03:49:23 209.213.199.14 1767 30.27 0.30% 47.53% * ! 23 07/03/05 03:49:22 205.161.1.217 1730 30.28 0.29% 47.82% * ! 24 07/03/05 03:49:34 62.245.229.166 1729 29.96 0.29% 48.11% * ! 25 07/03/05 03:49:07 70.58.239.65 1712 25.58 0.29% 48.40% * ! 26 07/03/05 03:49:33 83.211.151.90 1711 27.13 0.29% 48.70% * ! 27 07/03/05 03:49:21 83.88.168.74 1706 30.18 0.29% 48.98% * ! 28 07/03/05 03:49:25 24.108.240.245 1703 29.27 0.29% 49.27% * ! 29 07/03/05 03:49:12 68.41.193.244 1703 30.30 0.29% 49.56% * ! 30 07/03/05 03:49:22 82.182.115.96 1702 24.80 0.29% 49.85% * ! 31 07/03/05 03:49:12 66.28.181.99 1701 30.24 0.29% 50.14% * ! 32 07/03/05 03:49:24 212.204.56.186 1697 30.06 0.29% 50.43% * ! 33 07/03/05 03:49:21 209.181.101.111 1695 30.33 0.29% 50.72% * ! 34 07/03/05 03:49:33 217.126.226.13 1688 28.68 0.29% 51.01% * ! 35 07/03/05 03:49:21 24.231.238.102 1688 30.18 0.29% 51.29% * ! 36 07/03/05 03:49:16 67.93.201.124 1687 29.92 0.29% 51.58% * ! 37 07/03/05 03:49:09 63.237.219.255 1686 30.26 0.29% 51.87% * ! 38 07/03/05 03:49:14 62.140.239.106 1684 30.18 0.29% 52.15% * ! 39 07/03/05 03:49:07 63.211.155.98 1681 30.23 0.29% 52.44% * ! 40 07/03/05 03:49:23 209.73.14.6 1633 31.55 0.28% 52.71% * 41 07/03/05 03:49:32 68.2.127.180 1551 34.72 0.26% 52.98% * 42 07/03/05 03:51:01 66.111.36.143 1459 29.32 ( 0.25%) 43 07/03/05 03:49:17 209.19.42.19 1452 15.60 0.25% 53.23% * 44 07/03/05 03:49:22 80.38.36.53 1440 35.09 0.24% 53.47% * 45 07/03/05 03:51:02 207.150.178.80 1431 30.27 0.24% 53.71% * 46 07/03/05 03:49:35 64.81.145.31 1421 38.62 0.24% 53.95% * 47 07/03/05 03:49:32 86.42.11.251 1408 33.26 0.24% 54.19% * 48 07/03/05 03:49:22 192.149.252.4 1352 41.48 0.23% 54.42% * 49 07/03/05 03:49:18 195.197.238.77 1349 42.28 0.23% 54.65% * 50 07/03/05 03:57:16 213.143.239.37 1293 32.50 0.22% 54.87% * 51 07/03/05 09:03:33 213.244.28.222 1187 0.53 ( 0.20%) 52 07/03/05 03:49:13 83.160.27.25 1084 45.73 0.18% 55.06% * 53 07/03/05 03:49:40 129.13.73.33 1081 54.14 0.18% 55.24% * 54 07/03/05 09:07:41 81.178.75.144 944 1.46 ( 0.16%) 55 07/03/05 03:52:22 62.81.176.50 891 53.37 0.15% 55.39% * 56 07/03/05 03:49:18 24.208.145.131 849 48.47 0.14% 55.54% * 57 07/03/05 12:12:53 82.182.241.89 655 27.80 0.11% 55.65% * 58 07/03/05 03:50:12 62.105.106.149 628 47.51 ( 0.11%) 59 07/03/05 03:51:39 212.76.39.242 552 52.13 0.09% 55.74% * 60 07/03/05 13:54:27 85.194.37.140 494 28.67 0.08% 55.83% * ! 61 07/03/05 13:09:22 84.19.197.49 490 32.19 0.08% 55.91% * 62 07/03/05 14:03:03 196.192.108.79 461 30.36 0.08% 55.99% * ! 63 07/03/05 13:49:37 84.191.70.211 446 30.12 ( 0.08%) 64 07/03/05 14:24:33 202.154.112.4 439 30.59 0.07% 56.06% * ! 65 07/03/05 14:32:47 84.173.110.194 406 30.19 0.07% 56.13% * ! 66 07/03/05 13:06:52 80.164.178.94 395 16.07 ( 0.07%) 67 07/03/05 13:58:09 82.233.39.107 336 36.56 ( 0.06%) 68 07/03/05 13:49:19 85.97.173.237 279 57.60 ( 0.05%) 69 07/03/05 14:01:01 81.2.223.12 256 30.06 ( 0.04%) 70 07/03/05 13:50:21 202.72.146.193 185 30.61 ( 0.03%) 71 07/03/05 14:27:30 84.147.34.143 167 36.75 ( 0.03%) 72 07/03/05 13:50:02 66.194.80.250 152 13.13 ( 0.03%) 73 07/03/05 13:50:14 61.62.177.183 148 12.99 ( 0.03%) 74 07/03/05 13:56:58 61.62.108.248 147 8.57 ( 0.02%) 75 07/03/05 14:25:52 82.232.145.148 147 30.02 ( 0.02%) 76 07/03/05 13:59:11 212.159.86.70 143 28.87 ( 0.02%) 77 07/03/05 13:50:12 61.62.135.146 142 7.29 ( 0.02%) 78 07/03/05 14:02:45 221.0.25.75 140 11.71 ( 0.02%) 79 07/03/05 13:50:03 64.123.10.8 132 16.96 ( 0.02%) 80 07/03/05 14:01:29 208.34.224.153 130 30.00 ( 0.02%) 81 07/03/05 13:59:42 70.243.117.60 125 6.30 ( 0.02%) 82 07/03/05 14:04:19 69.157.41.89 124 30.22 ( 0.02%) 83 07/03/05 14:02:13 67.184.53.220 124 30.48 ( 0.02%) 84 07/03/05 13:49:03 84.151.37.85 124 15.91 ( 0.02%) 85 07/03/05 14:27:25 218.212.228.15 123 6.14 ( 0.02%) 86 07/03/05 13:49:01 70.33.44.221 120 16.56 ( 0.02%) 87 07/03/05 15:19:21 206.162.152.193 120 24.32 ( 0.02%) 88 07/03/05 13:51:39 80.175.212.153 116 1.21 ( 0.02%) 89 07/03/05 13:51:12 81.155.248.155 115 14.68 ( 0.02%) 90 07/03/05 15:20:01 206.162.152.194 112 26.16 ( 0.02%) 91 07/03/05 13:48:05 213.238.235.163 110 18.29 ( 0.02%) 92 07/03/05 14:30:26 61.88.171.38 109 4.72 ( 0.02%) 93 07/03/05 13:49:12 62.77.173.157 108 18.66 ( 0.02%) 94 07/03/05 16:24:05 69.246.44.10 104 52.61 0.02% 56.15% * 95 07/03/05 13:49:01 82.229.156.40 102 23.07 ( 0.02%) * = "active" = probably will send another request. ! = "abusive" = min requests of 100 and an average rate of less than 30s between requests over the life of the entire connection. Percentages are based on all packets from *active* clients. If the client is not active, its percentage is what it would be if it were active. Clients with very long updates (min requests of 10): Rank First Seen Client IP Requests Rate Usage Cumulative 1 07/03/05 04:21:17 64.221.167.105 10 5652.16 0.00% 0.00% * 2 07/03/05 05:02:51 80.24.84.177 10 5089.40 0.00% 0.00% * 3 07/03/05 03:59:34 66.192.231.224 10 5030.42 0.00% 0.01% * 4 07/03/05 04:35:28 85.49.128.210 11 4914.96 0.00% 0.01% * 5 07/03/05 04:11:02 86.135.187.102 10 4878.74 0.00% 0.01% * 6 07/03/05 04:53:18 217.126.199.31 11 4559.13 0.00% 0.01% * 7 07/03/05 04:56:19 217.75.229.77 11 4559.05 0.00% 0.01% * 8 07/03/05 04:54:59 81.33.24.168 11 4558.89 0.00% 0.01% * 9 07/03/05 04:10:01 193.219.160.135 10 4544.01 0.00% 0.02% * 10 07/03/05 04:31:57 68.78.90.10 11 4351.89 0.00% 0.02% * Clients distribution by count: bin ( bin range ) count 1 ( 1 - 1) 2390 ********************************************* 2 ( 2 - 2) 264 **** 3 ( 3 - 3) 163 *** 4 ( 4 - 4) 654 ************ 5 ( 5 - 6) 130 ** 8 ( 7 - 9) 294 ***** 11 ( 10 - 13) 166 *** 16 ( 14 - 19) 161 *** 22 ( 20 - 26) 375 ******* 32 ( 27 - 38) 288 ***** 45 ( 39 - 53) 1637 ****************************** 64 ( 54 - 76) 269 ***** 90 ( 77 - 107) 313 ***** 128 ( 108 - 152) 170 *** 181 ( 153 - 215) 143 ** 256 ( 216 - 304) 173 *** 362 ( 305 - 430) 96 * 512 ( 431 - 608) 34 724 ( 609 - 861) 26 1024 ( 862 - 1217) 5 1448 ( 1218 - 1722) 28 2048 ( 1723 - 2435) 4 2896 ( 2436 - 3444) 9 4096 ( 3445 - 4870) 0 5792 ( 4871 - 6888) 1 8192 ( 6889 - 9741) 0 11585 ( 9742 - 13777) 2 16384 ( 13778 - 19483) 1 23170 ( 19484 - 27554) 4 32768 ( 27555 - 38967) 1 46340 ( 38968 - 55108) 2 Clients distribution by rate (min requests of 10): bin ( bin range ) count 1.0 ( 0.0 - 1.2) 14 1.4 ( 1.2 - 1.7) 3 2.0 ( 1.7 - 2.4) 3 2.8 ( 2.4 - 3.4) 1 4.0 ( 3.4 - 4.8) 7 5.7 ( 4.8 - 6.7) 6 8.0 ( 6.7 - 9.5) 68 * 11.3 ( 9.5 - 13.5) 23 16.0 ( 13.5 - 19.0) 159 **** 22.6 ( 19.0 - 26.9) 253 ******* 32.0 ( 26.9 - 38.1) 232 ****** 45.3 ( 38.1 - 53.8) 79 ** 64.0 ( 53.8 - 76.1) 162 **** 90.5 ( 76.1 - 107.6) 140 *** 128.0 ( 107.6 - 152.2) 118 *** 181.0 ( 152.2 - 215.3) 221 ****** 256.0 ( 215.3 - 304.4) 217 ****** 362.0 ( 304.4 - 430.5) 128 *** 512.0 ( 430.5 - 608.9) 150 **** 724.1 ( 608.9 - 861.1) 179 ***** 1024.0 ( 861.1 - 1217.7) 1587 ********************************************* 1448.2 ( 1217.7 - 1722.2) 36 * 2048.0 ( 1722.2 - 2435.5) 53 * 2896.3 ( 2435.5 - 3444.3) 15 4096.0 ( 3444.3 - 4871.0) 49 * 5792.6 ( 4871.0 - 6888.6) 5 Clients distribution by amount of time client was active (in hours): bin ( bin range ) count 1.0 ( 0.0 - 1.2) 4810 ********************************************* 1.4 ( 1.2 - 1.7) 48 2.0 ( 1.7 - 2.4) 141 * 2.8 ( 2.4 - 3.4) 64 4.0 ( 3.4 - 4.8) 133 * 5.7 ( 4.8 - 6.7) 81 8.0 ( 6.7 - 9.5) 69 11.3 ( 9.5 - 13.5) 251 ** 16.0 ( 13.5 - 19.0) 2206 ******************** Clients distribution by time since first request (in hours): bin ( bin range ) count 1.0 ( 0.0 - 1.2) 483 ********* 1.4 ( 1.2 - 1.7) 131 ** 2.0 ( 1.7 - 2.4) 787 *************** 2.8 ( 2.4 - 3.4) 1785 ********************************** 4.0 ( 3.4 - 4.8) 1937 ************************************* 5.7 ( 4.8 - 6.7) 115 ** 8.0 ( 6.7 - 9.5) 78 * 11.3 ( 9.5 - 13.5) 169 *** 16.0 ( 13.5 - 19.0) 2318 ********************************************* Active clients distribution by time since last request (in secs): bin ( bin range ) count 1.0 ( 0.0 - 1.2) 22 ** 1.4 ( 1.2 - 1.7) 5 2.0 ( 1.7 - 2.4) 9 2.8 ( 2.4 - 3.4) 11 * 4.0 ( 3.4 - 4.8) 10 * 5.7 ( 4.8 - 6.7) 18 * 8.0 ( 6.7 - 9.5) 30 *** 11.3 ( 9.5 - 13.5) 33 *** 16.0 ( 13.5 - 19.0) 41 **** 22.6 ( 19.0 - 26.9) 52 ***** 32.0 ( 26.9 - 38.1) 80 ******** 45.3 ( 38.1 - 53.8) 109 ********** 64.0 ( 53.8 - 76.1) 114 *********** 90.5 ( 76.1 - 107.6) 151 *************** 128.0 ( 107.6 - 152.2) 158 *************** 181.0 ( 152.2 - 215.3) 219 ********************** 256.0 ( 215.3 - 304.4) 265 ************************** 362.0 ( 304.4 - 430.5) 256 ************************* 512.0 ( 430.5 - 608.9) 369 ************************************* 724.1 ( 608.9 - 861.1) 446 ********************************************* 1024.0 ( 861.1 - 1217.7) 319 ******************************** 1448.2 ( 1217.7 - 1722.2) 40 **** 2048.0 ( 1722.2 - 2435.5) 62 ****** 2896.3 ( 2435.5 - 3444.3) 78 ******* 4096.0 ( 3444.3 - 4871.0) 28 ** 5792.6 ( 4871.0 - 6888.6) 11 * 8192.0 ( 6888.6 - 9742.0) 38 *** 11585.2 ( 9742.0 - 13777.2) 17 * 16384.0 (13777.2 - 19484.0) 4 Inactive clients distribution by time since last request (in secs): bin ( bin range ) count 1.0 ( 0.0 - 1.2) 0 1.4 ( 1.2 - 1.7) 0 2.0 ( 1.7 - 2.4) 0 2.8 ( 2.4 - 3.4) 0 4.0 ( 3.4 - 4.8) 0 5.7 ( 4.8 - 6.7) 0 8.0 ( 6.7 - 9.5) 0 11.3 ( 9.5 - 13.5) 0 16.0 ( 13.5 - 19.0) 0 22.6 ( 19.0 - 26.9) 0 32.0 ( 26.9 - 38.1) 0 45.3 ( 38.1 - 53.8) 0 64.0 ( 53.8 - 76.1) 0 90.5 ( 76.1 - 107.6) 0 128.0 ( 107.6 - 152.2) 1 181.0 ( 152.2 - 215.3) 4 256.0 ( 215.3 - 304.4) 3 362.0 ( 304.4 - 430.5) 4 512.0 ( 430.5 - 608.9) 8 724.1 ( 608.9 - 861.1) 13 1024.0 ( 861.1 - 1217.7) 27 1448.2 ( 1217.7 - 1722.2) 36 2048.0 ( 1722.2 - 2435.5) 86 * 2896.3 ( 2435.5 - 3444.3) 142 ** 4096.0 ( 3444.3 - 4871.0) 57 5792.6 ( 4871.0 - 6888.6) 324 ***** 8192.0 ( 6888.6 - 9742.0) 844 ************* 11585.2 ( 9742.0 - 13777.2) 2810 ********************************************* 16384.0 (13777.2 - 19484.0) 449 *******