Estimated active ntp pool clients: 1711 Estimated abusive ntp pool clients: 18 Estimated inactive ntp pool clients: 76 Total ntp pool clients being tracked: 1787 Note: NTP is a stateless and connectionless (UDP based) protocol, so exact numbers can't be determined. 31482694 ntp requests, in total, have been seen since 09/26/05 18:34:58 10439062 (33.2%) are from clients that are still active. Long term request rate: 0.100 seconds between requests (10.03 req/sec) Long term bandwidth in: 0.744 KBytes/s 5.956 Kbits/s Long term bandwidth in: 1.840 GB/month 14.722 Gb/month Current request rate: 0.110 seconds between requests (9.06 req/sec) Current bandwidth in: 0.672 KBytes/s 5.380 Kbits/s Current bandwidth in: 1.662 GB/month 13.298 Gb/month (NTP packets are usually 76 bytes, UDP overhead included, in each direction.) The dump file was written 16 seconds ago, at 10/30/05 08:58:45 Subnets with many clients: # of Subnet Total Aggregate Abusive IPs Count Rate Clients 9 66.92.24.x 32720 79.349 0 5 217.78.0.x 358225 6.053 0 4 213.194.148.x 8365 221.528 0 Clients with rapid updates (min requests of 100): Rank First Seen Client IP Requests Rate Usage Cumulative 1 09/26/05 18:34:59 216.199.74.135 875538 1.48 8.39% 8.39% * ! 2 10/15/05 21:54:16 68.164.165.51 372541 1.61 3.57% 11.96% * ! 3 10/16/05 15:14:29 62.244.109.246 335170 1.97 3.21% 15.17% * ! 4 09/26/05 18:34:59 85.10.237.11 170474 15.02 1.63% 16.80% * ! 5 09/26/05 18:35:01 169.231.0.13 170178 15.02 1.63% 18.43% * ! 6 09/29/05 00:28:04 84.45.197.14 167562 13.61 1.61% 20.03% * ! 7 09/26/05 18:35:01 62.97.100.180 136741 12.44 ( 1.29%) 8 09/26/05 18:39:10 130.183.137.110 135405 15.00 1.30% 21.33% * ! 9 09/26/05 18:35:52 195.57.64.67 132182 10.21 1.27% 22.60% * ! 10 10/04/05 11:32:15 80.53.74.202 109468 15.00 1.05% 23.65% * ! 11 09/26/05 18:35:09 147.83.20.44 99865 30.01 0.96% 24.60% * ! 12 10/02/05 07:54:39 140.112.101.21 99661 35.37 0.95% 25.56% * ! 13 09/26/05 18:35:21 212.6.247.114 98609 30.28 0.94% 26.50% * ! 14 09/26/05 18:35:02 209.213.199.14 98070 30.23 0.94% 27.44% * ! 15 09/26/05 18:35:09 66.189.178.80 94735 30.23 0.91% 28.35% * 16 09/26/05 18:35:08 62.245.229.166 92406 30.14 0.89% 29.24% * 17 09/26/05 18:35:37 195.245.179.232 91268 30.39 0.87% 30.11% * 18 09/26/05 18:35:47 81.170.208.120 87798 30.27 0.84% 30.95% * 19 09/26/05 18:35:08 202.7.90.26 85438 50.90 0.82% 31.77% * 20 09/26/05 18:36:24 195.66.232.48 79112 30.13 0.76% 32.53% * 21 09/26/05 18:35:30 61.8.8.218 79022 25.17 0.76% 33.28% * 22 09/26/05 18:38:18 80.126.153.209 75056 30.26 0.72% 34.00% * 23 09/26/05 18:35:10 217.6.225.126 74901 30.41 0.72% 34.72% * 24 09/26/05 18:39:29 213.84.231.217 74841 30.47 0.72% 35.44% * 25 09/26/05 18:35:09 83.253.140.95 74494 30.24 0.71% 36.15% * 26 09/26/05 18:36:24 68.144.53.40 74182 30.30 0.71% 36.86% * 27 09/26/05 18:36:41 164.77.195.34 73909 30.10 0.71% 37.57% * 28 09/26/05 18:35:30 12.10.216.4 73851 30.45 0.71% 38.28% * 29 09/26/05 18:37:09 195.43.255.251 73487 30.22 0.70% 38.98% * 30 09/26/05 18:37:46 202.221.180.132 73454 30.66 0.70% 39.68% * 31 09/26/05 18:36:19 81.89.247.51 72591 30.20 0.70% 40.38% * 32 10/04/05 08:44:27 81.226.115.147 72505 30.11 0.69% 41.07% * 33 09/26/05 18:35:26 68.101.41.217 72469 30.21 0.69% 41.77% * 34 09/26/05 18:35:46 80.55.110.230 72393 30.38 0.69% 42.46% * 35 09/26/05 18:37:04 216.168.60.30 72242 30.50 0.69% 43.15% * 36 09/26/05 18:35:10 85.118.4.17 72237 30.27 0.69% 43.85% * 37 09/26/05 18:37:10 24.173.197.228 72225 30.28 0.69% 44.54% * 38 09/26/05 18:35:52 192.44.242.19 72130 30.25 0.69% 45.23% * 39 09/26/05 18:36:12 217.78.0.24 72119 30.35 0.69% 45.92% * 40 09/26/05 18:37:16 82.197.165.83 72085 30.27 0.69% 46.61% * 41 09/26/05 18:36:42 195.56.253.27 71961 30.28 0.69% 47.30% * 42 09/26/05 18:36:36 217.78.0.17 71898 30.28 0.69% 47.99% * 43 09/26/05 18:35:28 63.255.178.162 71626 30.41 0.69% 48.67% * 44 09/26/05 18:35:38 213.215.37.74 71554 30.32 0.69% 49.36% * 45 09/26/05 18:36:35 195.92.253.138 71455 30.49 0.68% 50.04% * 46 09/26/05 18:36:30 217.78.0.12 71413 30.18 0.68% 50.73% * 47 09/26/05 18:35:17 217.78.0.13 71402 30.30 0.68% 51.41% * 48 09/26/05 18:38:40 217.78.0.11 71393 30.20 0.68% 52.10% * 49 09/26/05 18:35:38 195.169.149.102 71384 30.30 0.68% 52.78% * 50 09/27/05 02:49:50 66.41.103.58 71220 30.56 0.68% 53.46% * 51 09/26/05 18:36:10 142.179.148.101 71184 30.40 0.68% 54.14% * 52 09/26/05 18:36:14 193.2.154.110 71174 30.60 0.68% 54.83% * 53 09/26/05 18:36:35 69.204.159.68 70923 30.53 0.68% 55.51% * 54 10/02/05 08:04:46 129.128.163.11 70812 30.50 0.68% 56.18% * 55 09/29/05 13:12:30 209.124.39.126 70545 30.39 0.68% 56.86% * 56 09/26/05 18:36:29 132.229.170.11 70531 30.38 0.68% 57.54% * 57 09/26/05 18:37:58 24.129.190.30 70239 31.28 0.67% 58.21% * 58 09/26/05 18:35:27 82.161.6.88 70175 30.56 0.67% 58.88% * 59 10/04/05 11:14:19 193.231.80.204 69485 32.13 ( 0.66%) 60 09/26/05 18:37:40 216.254.15.117 69433 30.54 0.67% 59.55% * 61 09/26/05 18:39:26 128.178.157.86 69408 30.31 0.66% 60.21% * 62 10/02/05 16:55:34 200.189.105.12 69399 30.45 0.66% 60.88% * 63 09/26/05 18:38:43 68.254.185.147 69163 30.04 0.66% 61.54% * 64 09/26/05 18:35:41 163.1.156.230 69097 30.39 0.66% 62.20% * 65 09/26/05 18:35:42 83.98.244.23 68853 30.41 0.66% 62.86% * 66 10/07/05 07:33:54 70.162.57.187 61955 30.44 0.59% 63.45% * 67 09/26/05 18:45:26 202.92.127.194 60220 39.88 0.58% 64.03% * 68 09/26/05 18:39:28 80.37.124.217 57461 51.80 0.55% 64.58% * 69 09/26/05 18:37:28 216.132.112.35 53454 29.77 0.51% 65.09% * 70 10/10/05 03:59:07 140.211.164.37 53224 30.58 0.51% 65.60% * 71 09/26/05 18:35:00 80.38.36.53 47403 36.42 0.45% 66.06% * 72 09/26/05 18:50:12 62.105.106.149 29706 58.81 ( 0.28%) 73 10/20/05 12:31:37 71.69.160.48 29278 29.55 0.28% 66.34% * ! 74 10/24/05 10:11:51 216.47.168.9 25894 16.30 0.25% 66.58% * ! 75 10/24/05 13:54:36 66.99.85.250 24849 2309.87 0.24% 66.82% * ! 76 10/23/05 15:04:53 142.68.251.170 18849 30.16 0.18% 67.00% * 77 10/24/05 09:38:11 80.63.251.94 16455 30.32 0.16% 67.16% * 78 10/27/05 00:46:52 70.60.148.189 9145 30.27 0.09% 67.25% * 79 10/28/05 00:15:18 212.31.197.253 6450 30.23 0.06% 67.31% * 80 10/29/05 01:05:09 129.71.207.53 4476 16.14 0.04% 67.35% * ! 81 10/29/05 06:18:08 84.141.164.87 2526 58.91 ( 0.02%) 82 10/29/05 14:28:23 84.176.97.70 2020 30.30 0.02% 67.37% * 83 10/29/05 07:24:32 24.106.69.174 1894 32.64 0.02% 67.39% * 84 10/30/05 08:08:49 85.204.188.160 949 1.12 0.01% 67.40% * ! 85 10/30/05 02:30:29 66.248.82.124 692 30.66 0.01% 67.41% * 86 10/30/05 05:18:04 84.141.158.159 397 30.30 0.00% 67.41% * * = "active" = probably will send another request. ! = "abusive" = min requests of 100 and an average rate of less than 30s between requests over the life of the entire connection. Percentages are based on all packets from *active* clients. If the client is not active, its percentage is what it would be if it were active. Clients with very long updates (min requests of 10): Rank First Seen Client IP Requests Rate Usage Cumulative 1 10/29/05 07:29:29 81.33.24.168 18 5896.12 0.00% 0.00% * 2 10/29/05 10:23:29 80.33.107.110 18 5066.97 0.00% 0.00% * 3 10/29/05 09:01:40 82.144.21.106 19 4877.37 0.00% 0.00% * 4 10/29/05 15:14:12 64.91.61.188 18 3992.23 0.00% 0.00% * 5 10/29/05 13:40:30 69.248.14.194 21 3601.90 0.00% 0.00% * 6 10/29/05 14:21:37 208.253.178.38 23 3297.61 0.00% 0.00% * Clients distribution by count: bin ( bin range ) count 1 ( 1 - 1) 30 ** 2 ( 2 - 2) 4 3 ( 3 - 3) 3 4 ( 4 - 4) 3 5 ( 5 - 6) 0 8 ( 7 - 9) 4 11 ( 10 - 13) 1 16 ( 14 - 19) 14 22 ( 20 - 26) 9 32 ( 27 - 38) 13 45 ( 39 - 53) 14 64 ( 54 - 76) 649 ********************************************* 90 ( 77 - 107) 92 ****** 128 ( 108 - 152) 98 ****** 181 ( 153 - 215) 68 **** 256 ( 216 - 304) 59 **** 362 ( 305 - 430) 61 **** 512 ( 431 - 608) 36 ** 724 ( 609 - 861) 56 *** 1024 ( 862 - 1217) 15 * 1448 ( 1218 - 1722) 85 ***** 2048 ( 1723 - 2435) 61 **** 2896 ( 2436 - 3444) 132 ********* 4096 ( 3445 - 4870) 49 *** 5792 ( 4871 - 6888) 24 * 8192 ( 6889 - 9741) 36 ** 11585 ( 9742 - 13777) 32 ** 16384 ( 13778 - 19483) 17 * 23170 ( 19484 - 27554) 28 * 32768 ( 27555 - 38967) 12 46340 ( 38968 - 55108) 13 65536 ( 55109 - 77935) 47 *** 92681 ( 77936 - 110217) 13 131072 ( 110218 - 155871) 3 185363 ( 155872 - 220435) 3 262144 ( 220436 - 311743) 0 370727 ( 311744 - 440871) 2 524288 ( 440872 - 623487) 0 741455 ( 623488 - 881743) 1 Clients distribution by rate (min requests of 10): bin ( bin range ) count 1.0 ( 0.0 - 1.2) 1 1.4 ( 1.2 - 1.7) 2 2.0 ( 1.7 - 2.4) 1 2.8 ( 2.4 - 3.4) 0 4.0 ( 3.4 - 4.8) 0 5.7 ( 4.8 - 6.7) 0 8.0 ( 6.7 - 9.5) 0 11.3 ( 9.5 - 13.5) 2 16.0 ( 13.5 - 19.0) 8 22.6 ( 19.0 - 26.9) 2 32.0 ( 26.9 - 38.1) 67 ** 45.3 ( 38.1 - 53.8) 6 64.0 ( 53.8 - 76.1) 69 ** 90.5 ( 76.1 - 107.6) 39 * 128.0 ( 107.6 - 152.2) 49 ** 181.0 ( 152.2 - 215.3) 76 *** 256.0 ( 215.3 - 304.4) 102 **** 362.0 ( 304.4 - 430.5) 60 ** 512.0 ( 430.5 - 608.9) 68 ** 724.1 ( 608.9 - 861.1) 91 *** 1024.0 ( 861.1 - 1217.7) 1067 ********************************************* 1448.2 ( 1217.7 - 1722.2) 20 2048.0 ( 1722.2 - 2435.5) 5 2896.3 ( 2435.5 - 3444.3) 3 4096.0 ( 3444.3 - 4871.0) 2 5792.6 ( 4871.0 - 6888.6) 3 Clients distribution by amount of time client was active (in hours): bin ( bin range ) count 1.0 ( 0.0 - 1.2) 59 ** 1.4 ( 1.2 - 1.7) 5 2.0 ( 1.7 - 2.4) 4 2.8 ( 2.4 - 3.4) 4 4.0 ( 3.4 - 4.8) 9 5.7 ( 4.8 - 6.7) 11 8.0 ( 6.7 - 9.5) 19 11.3 ( 9.5 - 13.5) 21 * 16.0 ( 13.5 - 19.0) 38 * 22.6 ( 19.0 - 26.9) 925 ********************************************* 32.0 ( 26.9 - 38.1) 69 *** 45.3 ( 38.1 - 53.8) 5 64.0 ( 53.8 - 76.1) 9 90.5 ( 76.1 - 107.6) 15 128.0 ( 107.6 - 152.2) 24 * 181.0 ( 152.2 - 215.3) 18 256.0 ( 215.3 - 304.4) 32 * 362.0 ( 304.4 - 430.5) 15 512.0 ( 430.5 - 608.9) 143 ****** 724.1 ( 608.9 - 861.1) 362 ***************** Clients distribution by time since first request (in hours): bin ( bin range ) count 1.0 ( 0.0 - 1.2) 27 * 1.4 ( 1.2 - 1.7) 11 2.0 ( 1.7 - 2.4) 7 2.8 ( 2.4 - 3.4) 13 4.0 ( 3.4 - 4.8) 17 5.7 ( 4.8 - 6.7) 14 8.0 ( 6.7 - 9.5) 18 11.3 ( 9.5 - 13.5) 22 * 16.0 ( 13.5 - 19.0) 32 * 22.6 ( 19.0 - 26.9) 933 ********************************************* 32.0 ( 26.9 - 38.1) 70 *** 45.3 ( 38.1 - 53.8) 5 64.0 ( 53.8 - 76.1) 9 90.5 ( 76.1 - 107.6) 15 128.0 ( 107.6 - 152.2) 24 * 181.0 ( 152.2 - 215.3) 18 256.0 ( 215.3 - 304.4) 32 * 362.0 ( 304.4 - 430.5) 15 512.0 ( 430.5 - 608.9) 143 ****** 724.1 ( 608.9 - 861.1) 362 ***************** Active clients distribution by time since last request (in secs): bin ( bin range ) count 1.0 ( 0.0 - 1.2) 8 * 1.4 ( 1.2 - 1.7) 2 2.0 ( 1.7 - 2.4) 9 * 2.8 ( 2.4 - 3.4) 4 4.0 ( 3.4 - 4.8) 10 * 5.7 ( 4.8 - 6.7) 9 * 8.0 ( 6.7 - 9.5) 25 **** 11.3 ( 9.5 - 13.5) 20 *** 16.0 ( 13.5 - 19.0) 42 ****** 22.6 ( 19.0 - 26.9) 51 ******** 32.0 ( 26.9 - 38.1) 64 ********** 45.3 ( 38.1 - 53.8) 72 *********** 64.0 ( 53.8 - 76.1) 74 *********** 90.5 ( 76.1 - 107.6) 67 ********** 128.0 ( 107.6 - 152.2) 83 ************* 181.0 ( 152.2 - 215.3) 124 ******************* 256.0 ( 215.3 - 304.4) 134 ********************* 362.0 ( 304.4 - 430.5) 169 *************************** 512.0 ( 430.5 - 608.9) 226 ************************************ 724.1 ( 608.9 - 861.1) 281 ********************************************* 1024.0 ( 861.1 - 1217.7) 209 ********************************* 1448.2 ( 1217.7 - 1722.2) 6 2048.0 ( 1722.2 - 2435.5) 6 2896.3 ( 2435.5 - 3444.3) 5 4096.0 ( 3444.3 - 4871.0) 8 * 5792.6 ( 4871.0 - 6888.6) 1 8192.0 ( 6888.6 - 9742.0) 2 Inactive clients distribution by time since last request (in secs): bin ( bin range ) count 1.0 ( 0.0 - 1.2) 0 1.4 ( 1.2 - 1.7) 0 2.0 ( 1.7 - 2.4) 0 2.8 ( 2.4 - 3.4) 0 4.0 ( 3.4 - 4.8) 0 5.7 ( 4.8 - 6.7) 0 8.0 ( 6.7 - 9.5) 0 11.3 ( 9.5 - 13.5) 0 16.0 ( 13.5 - 19.0) 0 22.6 ( 19.0 - 26.9) 0 32.0 ( 26.9 - 38.1) 0 45.3 ( 38.1 - 53.8) 0 64.0 ( 53.8 - 76.1) 0 90.5 ( 76.1 - 107.6) 0 128.0 ( 107.6 - 152.2) 0 181.0 ( 152.2 - 215.3) 1 *** 256.0 ( 215.3 - 304.4) 1 *** 362.0 ( 304.4 - 430.5) 1 *** 512.0 ( 430.5 - 608.9) 2 ****** 724.1 ( 608.9 - 861.1) 1 *** 1024.0 ( 861.1 - 1217.7) 4 ************ 1448.2 ( 1217.7 - 1722.2) 2 ****** 2048.0 ( 1722.2 - 2435.5) 4 ************ 2896.3 ( 2435.5 - 3444.3) 4 ************ 4096.0 ( 3444.3 - 4871.0) 6 ****************** 5792.6 ( 4871.0 - 6888.6) 8 ************************ 8192.0 ( 6888.6 - 9742.0) 14 ****************************************** 11585.2 ( 9742.0 - 13777.2) 15 ********************************************* 16384.0 (13777.2 - 19484.0) 13 ***************************************