client stats


Estimated active ntp pool clients:      3842
Estimated abusive ntp pool clients:       26
Estimated inactive ntp pool clients:    4314
Total ntp pool clients being tracked:   8156
Note: NTP is a stateless and connectionless (UDP based) protocol, so
      exact numbers can't be determined.

111464866 ntp requests, in total, have been seen since 11/21/08 16:11:32
 60198758 (54.0%) are from clients that are still active.
Long term request rate:  0.037 seconds between requests  (27.32 req/sec)
Long term bandwidth in:  2.028 KBytes/s   16.222 Kbits/s
Long term bandwidth in:  5.012 GB/month   40.099 Gb/month
Current request rate:  0.058 seconds between requests  (17.31 req/sec)
Current bandwidth in:  1.285 KBytes/s   10.279 Kbits/s
Current bandwidth in:  3.176 GB/month   25.408 Gb/month
(NTP packets are usually 76 bytes, UDP overhead included, in each direction.)

The dump file was written 31 seconds ago, at 01/05/09 22:04:29

Subnets with many clients:
# of     Subnet       Total  Aggregate  Abusive
 IPs                  Count    Rate     Clients
  21 201.63.225.x       109   296.385       0
  12 201.221.55.x     20328    22.519       0
  11 201.221.56.x     27601     9.970       0
   9 201.221.39.x     17591   113.604       0
   8 201.221.33.x     19250   125.406       0
   8 201.221.45.x     21952   101.016       0
   8 201.221.44.x     11913    65.281       0
   7 150.165.54.x     40845   106.497       0
   7 200.150.148.x    15918   157.166       0
   6 201.221.41.x     10563   173.831       0
   6 189.38.66.x      26314    51.480       0
   6 201.49.217.x       273   242.621       0
   6 190.5.195.x      15609   160.791       0
   5 190.170.131.x    11956    68.210       0
   5 200.140.135.x    36460   104.000       0
   5 200.40.110.x     10885   362.395       0
   5 200.185.160.x     1037   232.459       0
   5 189.45.12.x        915   135.752       0
   5 64.76.109.x       2868   195.976       0
   5 89.234.7.x       28256   167.691       0
   5 200.184.42.x       798   191.143       0
   4 200.186.246.x    22151    53.500       0
   4 143.106.7.x      17210    96.655       0
   4 201.21.193.x     22214   100.030       0
   4 143.107.18.x      7627   265.996       0
   4 201.221.32.x      9163   256.980       0
   4 200.231.172.x      663   684.802       0
   4 201.221.57.x     22520    20.037       0
   4 200.178.136.x     5263   194.834       0
   4 150.188.8.x       8469   265.487       0
   4 201.221.37.x     16526   178.084       0
   4 200.170.125.x    74570    54.423       0

Clients with rapid updates (min requests of 100):
Rank    First Seen         Client IP     Requests    Rate    Usage  Cumulative
  1  11/21/08 16:11:33   200.230.36.3     40575405     0.20  67.40%  67.40% * !
  2  11/21/08 16:11:33   66.197.144.101   7102196     0.54  11.80%  79.20% * !
  3  12/16/08 20:30:18   200.150.176.235   529884     1.69   0.88%  80.08% * !
  4  11/21/08 16:11:51   200.47.151.107    274623    40.07   0.46%  80.54% * !
  5  11/21/08 16:12:10   201.11.250.242    237670    12.24   0.39%  80.93% * !
  6  11/21/08 16:11:50   24.106.189.26     193755    17.27   0.32%  81.25% * !
  7  11/21/08 16:11:56   200.189.105.41    137881    30.30   0.23%  81.48% * !
  8  11/30/08 09:02:50   189.72.107.184    132064    17.70   0.22%  81.70% * !
  9  11/21/08 16:11:52   200.31.1.131      124018    30.57   0.21%  81.91% *
 10  11/21/08 16:11:51   190.40.2.218      114985    32.22   0.19%  82.10% *
 11  11/21/08 16:20:40   201.62.130.49     111123    31.77   0.18%  82.28% *
 12  11/21/08 16:12:25   200.31.23.134      93070    32.36   0.15%  82.44% *
 13  12/05/08 14:35:38   200.44.120.45      89621    30.16   0.15%  82.59% *
 14  11/21/08 16:12:11   200.129.206.110    89445    52.98   0.15%  82.74% *
 15  11/30/08 18:30:24   200.40.217.142     85553    32.32   0.14%  82.88% *
 16  12/22/08 06:57:18   189.51.254.162     71308    14.52   0.12%  83.00% * !
 17  11/27/08 06:24:28   200.223.178.254    67940    41.48   0.11%  83.11% *
 18  11/21/08 16:12:05   190.129.90.34      65190    41.18   0.11%  83.22% *
 19  12/27/08 15:52:23   67.190.73.191      49484    16.02   0.08%  83.30% * !
 20  12/19/08 09:15:00   70.158.21.101      47744    26.90   0.08%  83.38% *
 21  12/19/08 06:49:57   200.137.130.15     46637    33.55   0.08%  83.46% *
 22  12/25/08 10:52:04   189.2.231.194      44806    13.95   0.07%  83.53% * !
 23  12/25/08 10:44:02   200.208.185.162    44805    13.92   0.07%  83.61% * !
 24  11/21/08 16:15:32   200.167.163.17     44475    35.57   0.07%  83.68% *
 25  12/25/08 10:51:02   200.248.36.6       44419    13.94   0.07%  83.75% * !
 26  12/25/08 10:51:02   200.248.36.5       44382    13.91   0.07%  83.83% * !
 27  12/25/08 10:37:13   201.72.10.132      44333    13.93   0.07%  83.90% * !
 28  12/25/08 10:36:55   200.201.179.122    43522    14.35   0.07%  83.97% * !
 29  12/25/08 10:37:15   187.5.2.45         42908    13.92   0.07%  84.04% * !
 30  12/16/08 04:55:43   201.40.43.127      41253    35.61   0.07%  84.11% *
 31  12/17/08 08:03:15   200.183.205.187    38830    43.23   0.06%  84.18% *
 32  12/28/08 06:47:50   201.11.240.246     36442    28.53   0.06%  84.24% * !
 33  11/21/08 16:13:29   200.20.168.70      36315    42.87   0.06%  84.30% *
 34  12/23/08 05:58:40   201.6.100.252      36078    31.88   0.06%  84.36% *
 35  12/26/08 05:17:47   200.131.233.196    31293    30.04   0.05%  84.41% * !
 36  12/23/08 07:18:51   200.141.165.26     27008    33.16 ( 0.04%)
 37  12/24/08 03:22:31   201.20.20.55       25155    48.43   0.04%  84.45% *
 38  12/27/08 12:33:44   24.250.121.245     24558    35.35   0.04%  84.49% *
 39  12/20/08 20:02:59   201.28.35.182      24156    52.85   0.04%  84.53% *
 40  12/01/08 11:26:24   200.211.110.2      23549    32.04   0.04%  84.57% *
 41  12/25/08 11:06:15   201.18.33.1        20683    34.08   0.03%  84.61% *
 42  12/25/08 10:39:04   189.20.61.122      14830    50.28   0.02%  84.63% *
 43  12/25/08 10:51:06   200.218.187.90     14590    42.06   0.02%  84.65% *
 44  12/25/08 10:48:04   200.193.123.190    14500    42.13   0.02%  84.68% *
 45  12/25/08 10:51:07   200.219.166.130    14263    42.22   0.02%  84.70% *
 46  12/25/08 10:36:51   200.222.55.160     14255    42.11   0.02%  84.73% *
 47  12/29/08 16:11:34   200.250.69.194     13102    16.80 ( 0.02%)
 48  12/29/08 16:11:27   200.233.124.55     12681    18.56 ( 0.02%)
 49  11/21/08 16:14:22   200.152.54.241     12454    54.41   0.02%  84.75% *
 50  01/02/09 13:07:26   190.98.28.95       12028    25.89   0.02%  84.77% * !
 51  01/02/09 04:55:32   189.19.253.218     11806   171.19   0.02%  84.79% * !
 52  12/30/08 15:40:54   200.223.251.148    10948    51.59   0.02%  84.80% *
 53  12/29/08 11:43:20   200.60.93.50       10480    41.59   0.02%  84.82% *
 54  12/25/08 10:40:48   189.4.65.79         9795    55.40   0.02%  84.84% *
 55  12/29/08 10:30:20   200.152.106.78      9258    42.32   0.02%  84.85% *
 56  12/31/08 21:58:42   201.221.56.52       8232    58.90   0.01%  84.87% *
 57  01/03/09 11:19:16   200.170.218.90      7257    30.16   0.01%  84.88% * !
 58  01/01/09 03:36:22   189.56.72.130       6851    51.00 ( 0.01%)
 59  01/04/09 07:21:34   200.186.151.58      4395     3.82 ( 0.01%)
 60  01/05/09 14:44:11   200.203.122.235     4131     1.11 ( 0.01%)
 61  01/05/09 05:34:39   189.106.99.158      4102    15.29 ( 0.01%)
 62  01/05/09 04:42:47   200.230.36.3.cl/1     3519    15.99 ( 0.01%)
 63  01/05/09 04:38:54   189.22.65.130       3012    13.78   0.01%  84.88% * !
 64  01/03/09 20:09:08   200.70.34.171       2852    23.43 ( 0.00%)
 65  01/04/09 17:45:09   201.47.240.5        2831    32.42   0.00%  84.89% *
 66  01/05/09 07:02:51   201.209.194.192     2804    21.04 ( 0.00%)
 67  01/03/09 20:04:02   200.47.83.10        2762    28.40 ( 0.00%)
 68  01/05/09 04:41:23   189.26.148.206      2740    24.68   0.00%  84.89% * !
 69  01/04/09 10:38:07   201.17.54.221       2735    11.82 ( 0.00%)
 70  01/05/09 02:31:37   201.36.208.131      2688     5.60 ( 0.00%)
 71  01/04/09 19:11:04   189.42.8.130        2628    13.93   0.00%  84.90% *
 72  01/05/09 05:21:43   189.47.142.16       2571    27.03   0.00%  84.90% * !
 73  01/05/09 01:30:02   200.248.98.1        2448     6.39 ( 0.00%)
 74  01/05/09 00:39:59   200.194.71.130      2400     5.12 ( 0.00%)
 75  01/03/09 21:20:02   200.49.156.162      2372    25.14 ( 0.00%)
 76  01/04/09 10:04:10   189.79.44.23        2359    22.89 ( 0.00%)
 77  01/03/09 21:20:02   200.49.156.165      2354    24.49 ( 0.00%)
 78  01/05/09 05:37:38   201.66.242.86       2112     4.44 ( 0.00%)
 79  01/04/09 20:39:12   201.6.222.196       1996     5.13 ( 0.00%)
 80  01/05/09 02:45:45   201.0.140.183       1985     4.43 ( 0.00%)
 81  01/05/09 10:10:38   190.134.5.29        1903    24.64   0.00%  84.91% * !
 82  01/04/09 10:14:32   200.143.5.55        1853    26.14 ( 0.00%)
 83  01/05/09 00:37:46   200.171.123.19      1795     9.24 ( 0.00%)
 84  01/05/09 00:43:05   189.62.227.83       1777     4.97 ( 0.00%)
 85  01/04/09 10:03:02   201.87.101.72       1740    18.70 ( 0.00%)
 86  01/04/09 10:38:01   200.233.108.115     1739    19.63 ( 0.00%)
 87  01/02/09 09:55:38   200.204.183.154     1728    42.87   0.00%  84.91% *
 88  01/05/09 00:16:35   189.27.31.229       1706    51.28   0.00%  84.91% *
 89  01/04/09 10:08:06   200.206.241.32      1680    47.13 ( 0.00%)
 90  01/04/09 07:21:44   200.186.151.59      1675    18.78 ( 0.00%)
 91  01/04/09 10:04:02   200.203.122.194     1670    28.05 ( 0.00%)
 92  01/04/09 10:09:02   201.11.52.148       1645    20.72 ( 0.00%)
 93  01/04/09 10:04:01   189.8.63.58         1624    25.73 ( 0.00%)
 94  01/04/09 10:04:18   200.232.127.130     1623    41.87 ( 0.00%)
 95  01/04/09 10:07:02   200.171.37.195      1616    18.35 ( 0.00%)
 96  01/05/09 06:15:06   200.207.154.200     1589    32.36   0.00%  84.91% *
 97  01/05/09 01:30:44   189.34.242.209      1576     4.44 ( 0.00%)
 98  01/04/09 10:14:02   189.80.42.50        1545    18.46 ( 0.00%)
 99  01/04/09 17:58:03   200.70.34.173       1544    23.40 ( 0.00%)
100  01/05/09 08:39:47   200.35.75.34        1512    31.96   0.00%  84.92% *
* = "active"  = probably will send another request.
! = "abusive" = min requests of 100 and an average rate of less than 30s
                between requests over the life of the entire connection.
Percentages are based on all packets from *active* clients.  If the client
is not active, its percentage is what it would be if it were active.


Clients with very long updates (min requests of 10):
Rank    First Seen         Client IP     Requests    Rate    Usage  Cumulative
  1  11/21/08 18:41:36   75.144.206.89        271 14411.59   0.00%   0.00% *
  2  12/09/08 00:09:11   200.82.145.159       198 14383.74   0.00%   0.00% *
  3  01/04/09 18:59:31   201.63.225.216        11  9764.47   0.00%   0.00% *
  4  01/04/09 23:10:33   189.110.194.224       12  7806.95   0.00%   0.00% *
  5  01/04/09 12:14:25   69.156.152.243        17  7314.26   0.00%   0.00% *
  6  01/04/09 04:22:39   201.27.209.215        24  7085.86   0.00%   0.00% *
  7  01/04/09 17:46:50   201.63.225.213        14  7017.87   0.00%   0.00% *
  8  01/05/09 01:09:18   201.22.140.123        11  6785.15   0.00%   0.00% *
  9  01/04/09 18:14:16   201.221.29.10         16  6654.16   0.00%   0.00% *
 10  01/04/09 09:47:02   67.33.35.145          22  6480.52   0.00%   0.00% *

Clients distribution by count:
   bin  (    bin range    ) count
      1 (      1 -       1)  1500 *********************************************
      2 (      2 -       2)   534 ****************
      3 (      3 -       3)   164 ****
      4 (      4 -       4)  1067 ********************************
      5 (      5 -       6)   148 ****
      8 (      7 -       9)   453 *************
     11 (     10 -      13)   234 *******
     16 (     14 -      19)   210 ******
     22 (     20 -      26)   208 ******
     32 (     27 -      38)   162 ****
     45 (     39 -      53)   164 ****
     64 (     54 -      76)   180 *****
     90 (     77 -     107)   187 *****
    128 (    108 -     152)   233 ******
    181 (    153 -     215)   206 ******
    256 (    216 -     304)   199 *****
    362 (    305 -     430)   205 ******
    512 (    431 -     608)   174 *****
    724 (    609 -     861)   181 *****
   1024 (    862 -    1217)   160 ****
   1448 (   1218 -    1722)   217 ******
   2048 (   1723 -    2435)   221 ******
   2896 (   2436 -    3444)   246 *******
   4096 (   3445 -    4870)   380 ***********
   5792 (   4871 -    6888)   168 *****
   8192 (   6889 -    9741)   109 ***
  11585 (   9742 -   13777)    90 **
  16384 (  13778 -   19483)    52 *
  23170 (  19484 -   27554)    38 *
  32768 (  27555 -   38967)    15 
  46340 (  38968 -   55108)    21 
  65536 (  55109 -   77935)    12 
  92681 (  77936 -  110217)     7 
 131072 ( 110218 -  155871)     5 
 185363 ( 155872 -  220435)     1 
 262144 ( 220436 -  311743)     2 
 370727 ( 311744 -  440871)     0 
 524288 ( 440872 -  623487)     1 
 741455 ( 623488 -  881743)     0 
1048576 ( 881744 - 1246974)     0 
1482910 (1246975 - 1763487)     0 
2097152 (1763488 - 2493948)     0 
2965820 (2493949 - 3526975)     0 
4194304 (3526976 - 4987896)     0 
5931641 (4987897 - 7053950)     0 
8388608 (7053951 - 9975792)     1 
11863283 (9975793 - 14107900)     0 
16777216 (14107901 - 19951584)     0 
23726566 (19951585 - 28215801)     0 
33554432 (28215802 - 39903169)     0 
47453132 (39903170 - 56431603)     1 

Clients distribution by rate (min requests of 10):  
   bin  (    bin range    ) count
    1.0 (    0.0 -     1.2)    26 
    1.4 (    1.2 -     1.7)     1 
    2.0 (    1.7 -     2.4)     2 
    2.8 (    2.4 -     3.4)     2 
    4.0 (    3.4 -     4.8)    73 **
    5.7 (    4.8 -     6.7)    18 
    8.0 (    6.7 -     9.5)    16 
   11.3 (    9.5 -    13.5)    11 
   16.0 (   13.5 -    19.0)    51 *
   22.6 (   19.0 -    26.9)    50 *
   32.0 (   26.9 -    38.1)   105 ***
   45.3 (   38.1 -    53.8)    56 *
   64.0 (   53.8 -    76.1)   164 ****
   90.5 (   76.1 -   107.6)   126 ***
  128.0 (  107.6 -   152.2)   167 ****
  181.0 (  152.2 -   215.3)   182 *****
  256.0 (  215.3 -   304.4)   267 *******
  362.0 (  304.4 -   430.5)   277 ********
  512.0 (  430.5 -   608.9)   287 ********
  724.1 (  608.9 -   861.1)   315 *********
 1024.0 (  861.1 -  1217.7)  1517 *********************************************
 1448.2 ( 1217.7 -  1722.2)   179 *****
 2048.0 ( 1722.2 -  2435.5)   199 *****
 2896.3 ( 2435.5 -  3444.3)    90 **
 4096.0 ( 3444.3 -  4871.0)    83 **
 5792.6 ( 4871.0 -  6888.6)    19 
 8192.0 ( 6888.6 -  9742.0)     4 
11585.2 ( 9742.0 - 13777.2)     1 
16384.0 (13777.2 - 19484.0)     2 

Clients distribution by amount of time client was active (in hours):
   bin  (    bin range    ) count
    1.0 (    0.0 -     1.2)  3438 *********************************************
    1.4 (    1.2 -     1.7)    57 
    2.0 (    1.7 -     2.4)   285 ***
    2.8 (    2.4 -     3.4)   135 *
    4.0 (    3.4 -     4.8)   401 *****
    5.7 (    4.8 -     6.7)   362 ****
    8.0 (    6.7 -     9.5)   320 ****
   11.3 (    9.5 -    13.5)   315 ****
   16.0 (   13.5 -    19.0)   490 ******
   22.6 (   19.0 -    26.9)   150 *
   32.0 (   26.9 -    38.1)   187 **
   45.3 (   38.1 -    53.8)    89 *
   64.0 (   53.8 -    76.1)    80 *
   90.5 (   76.1 -   107.6)   123 *
  128.0 (  107.6 -   152.2)   102 *
  181.0 (  152.2 -   215.3)   157 **
  256.0 (  215.3 -   304.4)   137 *
  362.0 (  304.4 -   430.5)   221 **
  512.0 (  430.5 -   608.9)   269 ***
  724.1 (  608.9 -   861.1)   210 **
 1024.0 (  861.1 -  1217.7)   628 ********

Clients distribution by time since first request (in hours):
   bin  (    bin range    ) count
    1.0 (    0.0 -     1.2)   623 **********************
    1.4 (    1.2 -     1.7)   541 *******************
    2.0 (    1.7 -     2.4)   717 **************************
    2.8 (    2.4 -     3.4)  1221 *********************************************
    4.0 (    3.4 -     4.8)   707 **************************
    5.7 (    4.8 -     6.7)   418 ***************
    8.0 (    6.7 -     9.5)   565 ********************
   11.3 (    9.5 -    13.5)   418 ***************
   16.0 (   13.5 -    19.0)   436 ****************
   22.6 (   19.0 -    26.9)   293 **********
   32.0 (   26.9 -    38.1)   197 *******
   45.3 (   38.1 -    53.8)    92 ***
   64.0 (   53.8 -    76.1)    81 **
   90.5 (   76.1 -   107.6)   122 ****
  128.0 (  107.6 -   152.2)   103 ***
  181.0 (  152.2 -   215.3)   157 *****
  256.0 (  215.3 -   304.4)   137 *****
  362.0 (  304.4 -   430.5)   221 ********
  512.0 (  430.5 -   608.9)   269 *********
  724.1 (  608.9 -   861.1)   210 *******
 1024.0 (  861.1 -  1217.7)   628 ***********************

Active clients distribution by time since last request (in secs):
   bin  (    bin range    ) count
    1.0 (    0.0 -     1.2)     9 
    1.4 (    1.2 -     1.7)     2 
    2.0 (    1.7 -     2.4)     7 
    2.8 (    2.4 -     3.4)    11 
    4.0 (    3.4 -     4.8)    12 *
    5.7 (    4.8 -     6.7)    15 *
    8.0 (    6.7 -     9.5)    29 **
   11.3 (    9.5 -    13.5)    34 ***
   16.0 (   13.5 -    19.0)    40 ***
   22.6 (   19.0 -    26.9)    65 *****
   32.0 (   26.9 -    38.1)    82 *******
   45.3 (   38.1 -    53.8)    90 ********
   64.0 (   53.8 -    76.1)   106 *********
   90.5 (   76.1 -   107.6)   128 ***********
  128.0 (  107.6 -   152.2)   160 **************
  181.0 (  152.2 -   215.3)   241 *********************
  256.0 (  215.3 -   304.4)   296 **************************
  362.0 (  304.4 -   430.5)   276 ************************
  512.0 (  430.5 -   608.9)   339 ******************************
  724.1 (  608.9 -   861.1)   497 *********************************************
 1024.0 (  861.1 -  1217.7)   320 ****************************
 1448.2 ( 1217.7 -  1722.2)    42 ***
 2048.0 ( 1722.2 -  2435.5)    51 ****
 2896.3 ( 2435.5 -  3444.3)    77 ******
 4096.0 ( 3444.3 -  4871.0)   353 *******************************
 5792.6 ( 4871.0 -  6888.6)   131 ***********
 8192.0 ( 6888.6 -  9742.0)   231 ********************
11585.2 ( 9742.0 - 13777.2)   157 **************
16384.0 (13777.2 - 19484.0)    41 ***

Inactive clients distribution by time since last request (in secs):
   bin  (    bin range    ) count
    1.0 (    0.0 -     1.2)     0 
    1.4 (    1.2 -     1.7)     0 
    2.0 (    1.7 -     2.4)     0 
    2.8 (    2.4 -     3.4)     0 
    4.0 (    3.4 -     4.8)     0 
    5.7 (    4.8 -     6.7)     0 
    8.0 (    6.7 -     9.5)     0 
   11.3 (    9.5 -    13.5)     0 
   16.0 (   13.5 -    19.0)     0 
   22.6 (   19.0 -    26.9)     0 
   32.0 (   26.9 -    38.1)     0 
   45.3 (   38.1 -    53.8)     0 
   64.0 (   53.8 -    76.1)     0 
   90.5 (   76.1 -   107.6)     0 
  128.0 (  107.6 -   152.2)     1 
  181.0 (  152.2 -   215.3)     2 
  256.0 (  215.3 -   304.4)     7 
  362.0 (  304.4 -   430.5)     6 
  512.0 (  430.5 -   608.9)    10 
  724.1 (  608.9 -   861.1)     5 
 1024.0 (  861.1 -  1217.7)     9 
 1448.2 ( 1217.7 -  1722.2)    32 *
 2048.0 ( 1722.2 -  2435.5)    36 *
 2896.3 ( 2435.5 -  3444.3)   103 ***
 4096.0 ( 3444.3 -  4871.0)   963 ******************************
 5792.6 ( 4871.0 -  6888.6)   512 ****************
 8192.0 ( 6888.6 -  9742.0)   661 ********************
11585.2 ( 9742.0 - 13777.2)  1420 *********************************************
16384.0 (13777.2 - 19484.0)   547 *****************