client stats
Estimated active ntp pool clients: 3842
Estimated abusive ntp pool clients: 26
Estimated inactive ntp pool clients: 4314
Total ntp pool clients being tracked: 8156
Note: NTP is a stateless and connectionless (UDP based) protocol, so
exact numbers can't be determined.
111464866 ntp requests, in total, have been seen since 11/21/08 16:11:32
60198758 (54.0%) are from clients that are still active.
Long term request rate: 0.037 seconds between requests (27.32 req/sec)
Long term bandwidth in: 2.028 KBytes/s 16.222 Kbits/s
Long term bandwidth in: 5.012 GB/month 40.099 Gb/month
Current request rate: 0.058 seconds between requests (17.31 req/sec)
Current bandwidth in: 1.285 KBytes/s 10.279 Kbits/s
Current bandwidth in: 3.176 GB/month 25.408 Gb/month
(NTP packets are usually 76 bytes, UDP overhead included, in each direction.)
The dump file was written 31 seconds ago, at 01/05/09 22:04:29
Subnets with many clients:
# of Subnet Total Aggregate Abusive
IPs Count Rate Clients
21 201.63.225.x 109 296.385 0
12 201.221.55.x 20328 22.519 0
11 201.221.56.x 27601 9.970 0
9 201.221.39.x 17591 113.604 0
8 201.221.33.x 19250 125.406 0
8 201.221.45.x 21952 101.016 0
8 201.221.44.x 11913 65.281 0
7 150.165.54.x 40845 106.497 0
7 200.150.148.x 15918 157.166 0
6 201.221.41.x 10563 173.831 0
6 189.38.66.x 26314 51.480 0
6 201.49.217.x 273 242.621 0
6 190.5.195.x 15609 160.791 0
5 190.170.131.x 11956 68.210 0
5 200.140.135.x 36460 104.000 0
5 200.40.110.x 10885 362.395 0
5 200.185.160.x 1037 232.459 0
5 189.45.12.x 915 135.752 0
5 64.76.109.x 2868 195.976 0
5 89.234.7.x 28256 167.691 0
5 200.184.42.x 798 191.143 0
4 200.186.246.x 22151 53.500 0
4 143.106.7.x 17210 96.655 0
4 201.21.193.x 22214 100.030 0
4 143.107.18.x 7627 265.996 0
4 201.221.32.x 9163 256.980 0
4 200.231.172.x 663 684.802 0
4 201.221.57.x 22520 20.037 0
4 200.178.136.x 5263 194.834 0
4 150.188.8.x 8469 265.487 0
4 201.221.37.x 16526 178.084 0
4 200.170.125.x 74570 54.423 0
Clients with rapid updates (min requests of 100):
Rank First Seen Client IP Requests Rate Usage Cumulative
1 11/21/08 16:11:33 200.230.36.3 40575405 0.20 67.40% 67.40% * !
2 11/21/08 16:11:33 66.197.144.101 7102196 0.54 11.80% 79.20% * !
3 12/16/08 20:30:18 200.150.176.235 529884 1.69 0.88% 80.08% * !
4 11/21/08 16:11:51 200.47.151.107 274623 40.07 0.46% 80.54% * !
5 11/21/08 16:12:10 201.11.250.242 237670 12.24 0.39% 80.93% * !
6 11/21/08 16:11:50 24.106.189.26 193755 17.27 0.32% 81.25% * !
7 11/21/08 16:11:56 200.189.105.41 137881 30.30 0.23% 81.48% * !
8 11/30/08 09:02:50 189.72.107.184 132064 17.70 0.22% 81.70% * !
9 11/21/08 16:11:52 200.31.1.131 124018 30.57 0.21% 81.91% *
10 11/21/08 16:11:51 190.40.2.218 114985 32.22 0.19% 82.10% *
11 11/21/08 16:20:40 201.62.130.49 111123 31.77 0.18% 82.28% *
12 11/21/08 16:12:25 200.31.23.134 93070 32.36 0.15% 82.44% *
13 12/05/08 14:35:38 200.44.120.45 89621 30.16 0.15% 82.59% *
14 11/21/08 16:12:11 200.129.206.110 89445 52.98 0.15% 82.74% *
15 11/30/08 18:30:24 200.40.217.142 85553 32.32 0.14% 82.88% *
16 12/22/08 06:57:18 189.51.254.162 71308 14.52 0.12% 83.00% * !
17 11/27/08 06:24:28 200.223.178.254 67940 41.48 0.11% 83.11% *
18 11/21/08 16:12:05 190.129.90.34 65190 41.18 0.11% 83.22% *
19 12/27/08 15:52:23 67.190.73.191 49484 16.02 0.08% 83.30% * !
20 12/19/08 09:15:00 70.158.21.101 47744 26.90 0.08% 83.38% *
21 12/19/08 06:49:57 200.137.130.15 46637 33.55 0.08% 83.46% *
22 12/25/08 10:52:04 189.2.231.194 44806 13.95 0.07% 83.53% * !
23 12/25/08 10:44:02 200.208.185.162 44805 13.92 0.07% 83.61% * !
24 11/21/08 16:15:32 200.167.163.17 44475 35.57 0.07% 83.68% *
25 12/25/08 10:51:02 200.248.36.6 44419 13.94 0.07% 83.75% * !
26 12/25/08 10:51:02 200.248.36.5 44382 13.91 0.07% 83.83% * !
27 12/25/08 10:37:13 201.72.10.132 44333 13.93 0.07% 83.90% * !
28 12/25/08 10:36:55 200.201.179.122 43522 14.35 0.07% 83.97% * !
29 12/25/08 10:37:15 187.5.2.45 42908 13.92 0.07% 84.04% * !
30 12/16/08 04:55:43 201.40.43.127 41253 35.61 0.07% 84.11% *
31 12/17/08 08:03:15 200.183.205.187 38830 43.23 0.06% 84.18% *
32 12/28/08 06:47:50 201.11.240.246 36442 28.53 0.06% 84.24% * !
33 11/21/08 16:13:29 200.20.168.70 36315 42.87 0.06% 84.30% *
34 12/23/08 05:58:40 201.6.100.252 36078 31.88 0.06% 84.36% *
35 12/26/08 05:17:47 200.131.233.196 31293 30.04 0.05% 84.41% * !
36 12/23/08 07:18:51 200.141.165.26 27008 33.16 ( 0.04%)
37 12/24/08 03:22:31 201.20.20.55 25155 48.43 0.04% 84.45% *
38 12/27/08 12:33:44 24.250.121.245 24558 35.35 0.04% 84.49% *
39 12/20/08 20:02:59 201.28.35.182 24156 52.85 0.04% 84.53% *
40 12/01/08 11:26:24 200.211.110.2 23549 32.04 0.04% 84.57% *
41 12/25/08 11:06:15 201.18.33.1 20683 34.08 0.03% 84.61% *
42 12/25/08 10:39:04 189.20.61.122 14830 50.28 0.02% 84.63% *
43 12/25/08 10:51:06 200.218.187.90 14590 42.06 0.02% 84.65% *
44 12/25/08 10:48:04 200.193.123.190 14500 42.13 0.02% 84.68% *
45 12/25/08 10:51:07 200.219.166.130 14263 42.22 0.02% 84.70% *
46 12/25/08 10:36:51 200.222.55.160 14255 42.11 0.02% 84.73% *
47 12/29/08 16:11:34 200.250.69.194 13102 16.80 ( 0.02%)
48 12/29/08 16:11:27 200.233.124.55 12681 18.56 ( 0.02%)
49 11/21/08 16:14:22 200.152.54.241 12454 54.41 0.02% 84.75% *
50 01/02/09 13:07:26 190.98.28.95 12028 25.89 0.02% 84.77% * !
51 01/02/09 04:55:32 189.19.253.218 11806 171.19 0.02% 84.79% * !
52 12/30/08 15:40:54 200.223.251.148 10948 51.59 0.02% 84.80% *
53 12/29/08 11:43:20 200.60.93.50 10480 41.59 0.02% 84.82% *
54 12/25/08 10:40:48 189.4.65.79 9795 55.40 0.02% 84.84% *
55 12/29/08 10:30:20 200.152.106.78 9258 42.32 0.02% 84.85% *
56 12/31/08 21:58:42 201.221.56.52 8232 58.90 0.01% 84.87% *
57 01/03/09 11:19:16 200.170.218.90 7257 30.16 0.01% 84.88% * !
58 01/01/09 03:36:22 189.56.72.130 6851 51.00 ( 0.01%)
59 01/04/09 07:21:34 200.186.151.58 4395 3.82 ( 0.01%)
60 01/05/09 14:44:11 200.203.122.235 4131 1.11 ( 0.01%)
61 01/05/09 05:34:39 189.106.99.158 4102 15.29 ( 0.01%)
62 01/05/09 04:42:47 200.230.36.3.cl/1 3519 15.99 ( 0.01%)
63 01/05/09 04:38:54 189.22.65.130 3012 13.78 0.01% 84.88% * !
64 01/03/09 20:09:08 200.70.34.171 2852 23.43 ( 0.00%)
65 01/04/09 17:45:09 201.47.240.5 2831 32.42 0.00% 84.89% *
66 01/05/09 07:02:51 201.209.194.192 2804 21.04 ( 0.00%)
67 01/03/09 20:04:02 200.47.83.10 2762 28.40 ( 0.00%)
68 01/05/09 04:41:23 189.26.148.206 2740 24.68 0.00% 84.89% * !
69 01/04/09 10:38:07 201.17.54.221 2735 11.82 ( 0.00%)
70 01/05/09 02:31:37 201.36.208.131 2688 5.60 ( 0.00%)
71 01/04/09 19:11:04 189.42.8.130 2628 13.93 0.00% 84.90% *
72 01/05/09 05:21:43 189.47.142.16 2571 27.03 0.00% 84.90% * !
73 01/05/09 01:30:02 200.248.98.1 2448 6.39 ( 0.00%)
74 01/05/09 00:39:59 200.194.71.130 2400 5.12 ( 0.00%)
75 01/03/09 21:20:02 200.49.156.162 2372 25.14 ( 0.00%)
76 01/04/09 10:04:10 189.79.44.23 2359 22.89 ( 0.00%)
77 01/03/09 21:20:02 200.49.156.165 2354 24.49 ( 0.00%)
78 01/05/09 05:37:38 201.66.242.86 2112 4.44 ( 0.00%)
79 01/04/09 20:39:12 201.6.222.196 1996 5.13 ( 0.00%)
80 01/05/09 02:45:45 201.0.140.183 1985 4.43 ( 0.00%)
81 01/05/09 10:10:38 190.134.5.29 1903 24.64 0.00% 84.91% * !
82 01/04/09 10:14:32 200.143.5.55 1853 26.14 ( 0.00%)
83 01/05/09 00:37:46 200.171.123.19 1795 9.24 ( 0.00%)
84 01/05/09 00:43:05 189.62.227.83 1777 4.97 ( 0.00%)
85 01/04/09 10:03:02 201.87.101.72 1740 18.70 ( 0.00%)
86 01/04/09 10:38:01 200.233.108.115 1739 19.63 ( 0.00%)
87 01/02/09 09:55:38 200.204.183.154 1728 42.87 0.00% 84.91% *
88 01/05/09 00:16:35 189.27.31.229 1706 51.28 0.00% 84.91% *
89 01/04/09 10:08:06 200.206.241.32 1680 47.13 ( 0.00%)
90 01/04/09 07:21:44 200.186.151.59 1675 18.78 ( 0.00%)
91 01/04/09 10:04:02 200.203.122.194 1670 28.05 ( 0.00%)
92 01/04/09 10:09:02 201.11.52.148 1645 20.72 ( 0.00%)
93 01/04/09 10:04:01 189.8.63.58 1624 25.73 ( 0.00%)
94 01/04/09 10:04:18 200.232.127.130 1623 41.87 ( 0.00%)
95 01/04/09 10:07:02 200.171.37.195 1616 18.35 ( 0.00%)
96 01/05/09 06:15:06 200.207.154.200 1589 32.36 0.00% 84.91% *
97 01/05/09 01:30:44 189.34.242.209 1576 4.44 ( 0.00%)
98 01/04/09 10:14:02 189.80.42.50 1545 18.46 ( 0.00%)
99 01/04/09 17:58:03 200.70.34.173 1544 23.40 ( 0.00%)
100 01/05/09 08:39:47 200.35.75.34 1512 31.96 0.00% 84.92% *
* = "active" = probably will send another request.
! = "abusive" = min requests of 100 and an average rate of less than 30s
between requests over the life of the entire connection.
Percentages are based on all packets from *active* clients. If the client
is not active, its percentage is what it would be if it were active.
Clients with very long updates (min requests of 10):
Rank First Seen Client IP Requests Rate Usage Cumulative
1 11/21/08 18:41:36 75.144.206.89 271 14411.59 0.00% 0.00% *
2 12/09/08 00:09:11 200.82.145.159 198 14383.74 0.00% 0.00% *
3 01/04/09 18:59:31 201.63.225.216 11 9764.47 0.00% 0.00% *
4 01/04/09 23:10:33 189.110.194.224 12 7806.95 0.00% 0.00% *
5 01/04/09 12:14:25 69.156.152.243 17 7314.26 0.00% 0.00% *
6 01/04/09 04:22:39 201.27.209.215 24 7085.86 0.00% 0.00% *
7 01/04/09 17:46:50 201.63.225.213 14 7017.87 0.00% 0.00% *
8 01/05/09 01:09:18 201.22.140.123 11 6785.15 0.00% 0.00% *
9 01/04/09 18:14:16 201.221.29.10 16 6654.16 0.00% 0.00% *
10 01/04/09 09:47:02 67.33.35.145 22 6480.52 0.00% 0.00% *
Clients distribution by count:
bin ( bin range ) count
1 ( 1 - 1) 1500 *********************************************
2 ( 2 - 2) 534 ****************
3 ( 3 - 3) 164 ****
4 ( 4 - 4) 1067 ********************************
5 ( 5 - 6) 148 ****
8 ( 7 - 9) 453 *************
11 ( 10 - 13) 234 *******
16 ( 14 - 19) 210 ******
22 ( 20 - 26) 208 ******
32 ( 27 - 38) 162 ****
45 ( 39 - 53) 164 ****
64 ( 54 - 76) 180 *****
90 ( 77 - 107) 187 *****
128 ( 108 - 152) 233 ******
181 ( 153 - 215) 206 ******
256 ( 216 - 304) 199 *****
362 ( 305 - 430) 205 ******
512 ( 431 - 608) 174 *****
724 ( 609 - 861) 181 *****
1024 ( 862 - 1217) 160 ****
1448 ( 1218 - 1722) 217 ******
2048 ( 1723 - 2435) 221 ******
2896 ( 2436 - 3444) 246 *******
4096 ( 3445 - 4870) 380 ***********
5792 ( 4871 - 6888) 168 *****
8192 ( 6889 - 9741) 109 ***
11585 ( 9742 - 13777) 90 **
16384 ( 13778 - 19483) 52 *
23170 ( 19484 - 27554) 38 *
32768 ( 27555 - 38967) 15
46340 ( 38968 - 55108) 21
65536 ( 55109 - 77935) 12
92681 ( 77936 - 110217) 7
131072 ( 110218 - 155871) 5
185363 ( 155872 - 220435) 1
262144 ( 220436 - 311743) 2
370727 ( 311744 - 440871) 0
524288 ( 440872 - 623487) 1
741455 ( 623488 - 881743) 0
1048576 ( 881744 - 1246974) 0
1482910 (1246975 - 1763487) 0
2097152 (1763488 - 2493948) 0
2965820 (2493949 - 3526975) 0
4194304 (3526976 - 4987896) 0
5931641 (4987897 - 7053950) 0
8388608 (7053951 - 9975792) 1
11863283 (9975793 - 14107900) 0
16777216 (14107901 - 19951584) 0
23726566 (19951585 - 28215801) 0
33554432 (28215802 - 39903169) 0
47453132 (39903170 - 56431603) 1
Clients distribution by rate (min requests of 10):
bin ( bin range ) count
1.0 ( 0.0 - 1.2) 26
1.4 ( 1.2 - 1.7) 1
2.0 ( 1.7 - 2.4) 2
2.8 ( 2.4 - 3.4) 2
4.0 ( 3.4 - 4.8) 73 **
5.7 ( 4.8 - 6.7) 18
8.0 ( 6.7 - 9.5) 16
11.3 ( 9.5 - 13.5) 11
16.0 ( 13.5 - 19.0) 51 *
22.6 ( 19.0 - 26.9) 50 *
32.0 ( 26.9 - 38.1) 105 ***
45.3 ( 38.1 - 53.8) 56 *
64.0 ( 53.8 - 76.1) 164 ****
90.5 ( 76.1 - 107.6) 126 ***
128.0 ( 107.6 - 152.2) 167 ****
181.0 ( 152.2 - 215.3) 182 *****
256.0 ( 215.3 - 304.4) 267 *******
362.0 ( 304.4 - 430.5) 277 ********
512.0 ( 430.5 - 608.9) 287 ********
724.1 ( 608.9 - 861.1) 315 *********
1024.0 ( 861.1 - 1217.7) 1517 *********************************************
1448.2 ( 1217.7 - 1722.2) 179 *****
2048.0 ( 1722.2 - 2435.5) 199 *****
2896.3 ( 2435.5 - 3444.3) 90 **
4096.0 ( 3444.3 - 4871.0) 83 **
5792.6 ( 4871.0 - 6888.6) 19
8192.0 ( 6888.6 - 9742.0) 4
11585.2 ( 9742.0 - 13777.2) 1
16384.0 (13777.2 - 19484.0) 2
Clients distribution by amount of time client was active (in hours):
bin ( bin range ) count
1.0 ( 0.0 - 1.2) 3438 *********************************************
1.4 ( 1.2 - 1.7) 57
2.0 ( 1.7 - 2.4) 285 ***
2.8 ( 2.4 - 3.4) 135 *
4.0 ( 3.4 - 4.8) 401 *****
5.7 ( 4.8 - 6.7) 362 ****
8.0 ( 6.7 - 9.5) 320 ****
11.3 ( 9.5 - 13.5) 315 ****
16.0 ( 13.5 - 19.0) 490 ******
22.6 ( 19.0 - 26.9) 150 *
32.0 ( 26.9 - 38.1) 187 **
45.3 ( 38.1 - 53.8) 89 *
64.0 ( 53.8 - 76.1) 80 *
90.5 ( 76.1 - 107.6) 123 *
128.0 ( 107.6 - 152.2) 102 *
181.0 ( 152.2 - 215.3) 157 **
256.0 ( 215.3 - 304.4) 137 *
362.0 ( 304.4 - 430.5) 221 **
512.0 ( 430.5 - 608.9) 269 ***
724.1 ( 608.9 - 861.1) 210 **
1024.0 ( 861.1 - 1217.7) 628 ********
Clients distribution by time since first request (in hours):
bin ( bin range ) count
1.0 ( 0.0 - 1.2) 623 **********************
1.4 ( 1.2 - 1.7) 541 *******************
2.0 ( 1.7 - 2.4) 717 **************************
2.8 ( 2.4 - 3.4) 1221 *********************************************
4.0 ( 3.4 - 4.8) 707 **************************
5.7 ( 4.8 - 6.7) 418 ***************
8.0 ( 6.7 - 9.5) 565 ********************
11.3 ( 9.5 - 13.5) 418 ***************
16.0 ( 13.5 - 19.0) 436 ****************
22.6 ( 19.0 - 26.9) 293 **********
32.0 ( 26.9 - 38.1) 197 *******
45.3 ( 38.1 - 53.8) 92 ***
64.0 ( 53.8 - 76.1) 81 **
90.5 ( 76.1 - 107.6) 122 ****
128.0 ( 107.6 - 152.2) 103 ***
181.0 ( 152.2 - 215.3) 157 *****
256.0 ( 215.3 - 304.4) 137 *****
362.0 ( 304.4 - 430.5) 221 ********
512.0 ( 430.5 - 608.9) 269 *********
724.1 ( 608.9 - 861.1) 210 *******
1024.0 ( 861.1 - 1217.7) 628 ***********************
Active clients distribution by time since last request (in secs):
bin ( bin range ) count
1.0 ( 0.0 - 1.2) 9
1.4 ( 1.2 - 1.7) 2
2.0 ( 1.7 - 2.4) 7
2.8 ( 2.4 - 3.4) 11
4.0 ( 3.4 - 4.8) 12 *
5.7 ( 4.8 - 6.7) 15 *
8.0 ( 6.7 - 9.5) 29 **
11.3 ( 9.5 - 13.5) 34 ***
16.0 ( 13.5 - 19.0) 40 ***
22.6 ( 19.0 - 26.9) 65 *****
32.0 ( 26.9 - 38.1) 82 *******
45.3 ( 38.1 - 53.8) 90 ********
64.0 ( 53.8 - 76.1) 106 *********
90.5 ( 76.1 - 107.6) 128 ***********
128.0 ( 107.6 - 152.2) 160 **************
181.0 ( 152.2 - 215.3) 241 *********************
256.0 ( 215.3 - 304.4) 296 **************************
362.0 ( 304.4 - 430.5) 276 ************************
512.0 ( 430.5 - 608.9) 339 ******************************
724.1 ( 608.9 - 861.1) 497 *********************************************
1024.0 ( 861.1 - 1217.7) 320 ****************************
1448.2 ( 1217.7 - 1722.2) 42 ***
2048.0 ( 1722.2 - 2435.5) 51 ****
2896.3 ( 2435.5 - 3444.3) 77 ******
4096.0 ( 3444.3 - 4871.0) 353 *******************************
5792.6 ( 4871.0 - 6888.6) 131 ***********
8192.0 ( 6888.6 - 9742.0) 231 ********************
11585.2 ( 9742.0 - 13777.2) 157 **************
16384.0 (13777.2 - 19484.0) 41 ***
Inactive clients distribution by time since last request (in secs):
bin ( bin range ) count
1.0 ( 0.0 - 1.2) 0
1.4 ( 1.2 - 1.7) 0
2.0 ( 1.7 - 2.4) 0
2.8 ( 2.4 - 3.4) 0
4.0 ( 3.4 - 4.8) 0
5.7 ( 4.8 - 6.7) 0
8.0 ( 6.7 - 9.5) 0
11.3 ( 9.5 - 13.5) 0
16.0 ( 13.5 - 19.0) 0
22.6 ( 19.0 - 26.9) 0
32.0 ( 26.9 - 38.1) 0
45.3 ( 38.1 - 53.8) 0
64.0 ( 53.8 - 76.1) 0
90.5 ( 76.1 - 107.6) 0
128.0 ( 107.6 - 152.2) 1
181.0 ( 152.2 - 215.3) 2
256.0 ( 215.3 - 304.4) 7
362.0 ( 304.4 - 430.5) 6
512.0 ( 430.5 - 608.9) 10
724.1 ( 608.9 - 861.1) 5
1024.0 ( 861.1 - 1217.7) 9
1448.2 ( 1217.7 - 1722.2) 32 *
2048.0 ( 1722.2 - 2435.5) 36 *
2896.3 ( 2435.5 - 3444.3) 103 ***
4096.0 ( 3444.3 - 4871.0) 963 ******************************
5792.6 ( 4871.0 - 6888.6) 512 ****************
8192.0 ( 6888.6 - 9742.0) 661 ********************
11585.2 ( 9742.0 - 13777.2) 1420 *********************************************
16384.0 (13777.2 - 19484.0) 547 *****************