NTP Server Clients Statistics
Selected server: ntp1.ntp-servers.net
Sub ID: eth3
Estimated active ntp pool clients: 5389
Estimated abusive ntp pool clients: 40
Estimated inactive ntp pool clients: 1855
Total ntp pool clients being tracked: 7244
Note: NTP is a stateless and connectionless (UDP based) protocol, so
exact numbers can't be determined.
Note: this dump file is too new to give very accurate results.
120825 ntp requests, in total, have been seen since 01/18/26 20:50:28
87756 (72.6%) are from clients that are still active.
Current request rate: 0.035 seconds between requests (28.52 req/sec)
Current bandwidth in: 2.117 KBytes/s 16.934 Kbits/s
Current bandwidth in: 5.232 GB/month 41.859 Gb/month
(NTP packets are usually 76 bytes, UDP overhead included, in each direction.)
The dump file was written 0 seconds ago, at 01/18/26 21:45:30
Subnets with many clients:
# of Subnet Total Aggregate Abusive
IPs Count Rate Clients
24 85.175.156.x 221 9.941 0
17 178.178.245.x 167 16.769 0
17 185.228.135.x 319 9.390 0
13 79.135.227.x 112 22.222 0
13 178.178.244.x 209 11.224 0
13 5.16.15.x 418 7.239 0
13 188.170.78.x 108 25.104 0
12 2.63.220.x 110 19.512 0
11 94.79.7.x 120 22.104 0
10 178.216.174.x 120 22.483 0
10 185.228.132.x 164 18.880 0
9 188.170.83.x 74 31.579 0
9 62.213.13.x 29 116.950 0
9 178.72.72.x 71 39.328 0
8 91.211.229.x 62 46.718 0
8 77.220.60.x 73 38.686 0
8 188.170.77.x 174 17.967 0
7 194.32.242.x 110 26.726 0
7 188.170.74.x 59 48.301 0
6 212.32.219.x 19 175.594 0
6 5.16.11.x 213 15.592 0
6 85.175.220.x 51 37.543 0
6 85.140.7.x 61 41.275 0
6 37.28.175.x 48 47.551 0
6 185.99.5.x 80 29.570 0
6 188.170.87.x 51 54.475 0
6 176.15.164.x 60 53.807 0
5 178.176.80.x 57 45.541 0
5 87.103.212.x 46 66.545 0
5 178.176.87.x 42 63.893 0
5 217.107.122.x 131 24.567 0
5 80.83.238.x 15 0.000 0
5 84.53.229.x 45 43.492 0
5 93.170.94.x 45 70.197 0
5 188.170.85.x 27 91.680 0
5 185.99.7.x 68 49.801 0
5 176.118.247.x 45 70.199 0
5 89.110.63.x 229 14.333 0
4 188.170.82.x 33 79.840 0
4 91.210.45.x 36 50.252 0
4 109.72.248.x 131 21.303 0
4 188.168.138.x 93 27.986 0
4 188.170.86.x 74 41.576 0
4 31.40.163.x 55 52.646 0
4 79.174.187.x 54 58.052 0
4 217.66.152.x 33 95.254 0
4 79.122.231.x 160 19.581 0
4 188.170.79.x 34 81.584 0
4 188.170.84.x 38 63.323 0
4 81.30.112.x 50 34.159 0
4 31.200.197.x 31 74.514 0
4 2.62.121.x 36 87.751 0
4 95.107.6.x 35 84.374 0
4 195.9.195.x 220 17.748 0
4 178.176.82.x 36 90.406 0
4 5.16.16.x 150 22.129 0
4 45.139.24.x 42 61.374 0
4 217.66.157.x 34 87.562 0
4 85.175.222.x 32 75.262 0
4 195.248.236.x 104 26.933 0
4 217.199.220.x 27 109.031 0
4 89.22.54.x 135 26.077 1
4 37.29.88.x 26 97.640 0
4 87.226.174.x 136 25.696 0
4 195.208.164.x 95 35.669 0
4 82.162.17.x 36 87.748 0
4 85.26.235.x 36 87.757 0
4 92.50.220.x 131 26.753 0
4 84.53.216.x 47 49.999 0
4 95.68.226.x 64 49.639 0
4 80.80.196.x 37 82.123 0
4 46.172.90.x 16 236.544 0
4 78.108.70.x 36 51.817 0
4 109.188.123.x 38 77.449 0
4 95.167.182.x 103 32.578 0
4 85.26.233.x 38 77.155 0
4 95.154.108.x 36 87.749 0
4 91.225.90.x 318 9.739 2
4 95.167.26.x 124 28.587 0
4 195.133.255.x 15 208.800 0
4 91.220.233.x 12 260.973 0
4 95.107.7.x 36 87.750 0
Clients with rapid updates (min requests of 100):
Rank First Seen Client IP Requests Rate Usage Cumulative
1 01/18/26 20:50:32 195.133.244.162 385 0.79 ( 0.44%)
2 01/18/26 20:50:40 188.170.72.84 354 1.10 ( 0.40%)
3 01/18/26 20:50:38 178.178.244.6 345 1.18 ( 0.39%)
4 01/18/26 20:50:28 89.19.193.162 302 0.74 ( 0.34%)
5 01/18/26 20:50:31 188.254.51.166 183 3.66 ( 0.21%)
6 01/18/26 20:50:30 94.50.143.186 177 3.60 ( 0.20%)
7 01/18/26 20:52:21 94.199.108.206 172 5.55 ( 0.20%)
8 01/18/26 21:03:19 212.30.132.247 156 0.98 ( 0.18%)
9 01/18/26 20:50:31 83.111.177.17 147 1.53 ( 0.17%)
10 01/18/26 20:50:28 81.95.142.249 145 3.01 ( 0.16%)
11 01/18/26 20:50:51 194.55.235.122 144 26.00 0.16% 0.16% * !
12 01/18/26 20:50:28 212.30.132.250 142 1.08 ( 0.16%)
13 01/18/26 20:50:32 95.156.82.222 139 4.57 ( 0.16%)
14 01/18/26 20:50:29 89.106.175.75 139 2.76 ( 0.16%)
15 01/18/26 20:50:34 194.67.152.102 139 4.75 ( 0.16%)
16 01/18/26 20:51:17 80.232.237.68 135 5.24 ( 0.15%)
17 01/18/26 20:50:29 178.124.154.5 135 8.01 ( 0.15%)
18 01/18/26 20:50:35 178.57.81.114 134 9.03 ( 0.15%)
19 01/18/26 20:50:44 81.200.14.106 133 6.24 ( 0.15%)
20 01/18/26 20:50:30 188.186.186.1 133 9.71 ( 0.15%)
21 01/18/26 20:52:11 5.149.207.101 132 15.19 ( 0.15%)
22 01/18/26 20:53:50 195.94.251.138 131 7.79 ( 0.15%)
23 01/18/26 20:50:40 121.46.244.28 131 6.81 ( 0.15%)
24 01/18/26 20:50:29 194.67.19.99 129 6.73 ( 0.15%)
25 01/18/26 20:50:28 176.222.250.8 128 4.53 ( 0.15%)
26 01/18/26 20:50:32 212.164.74.34 128 9.23 ( 0.15%)
27 01/18/26 20:50:36 79.135.227.254 127 7.22 ( 0.14%)
28 01/18/26 20:50:29 95.64.211.250 127 5.54 ( 0.14%)
29 01/18/26 20:50:43 89.175.13.226 126 9.19 ( 0.14%)
30 01/18/26 20:50:29 85.113.45.197 125 11.21 ( 0.14%)
31 01/18/26 20:50:29 194.146.201.167 125 5.53 ( 0.14%)
32 01/18/26 20:50:28 80.244.232.222 125 26.71 0.14% 0.31% * !
33 01/18/26 20:50:29 195.239.154.254 125 4.69 ( 0.14%)
34 01/18/26 20:50:28 37.235.152.211 125 22.95 ( 0.14%)
35 01/18/26 20:50:29 185.180.229.195 124 9.64 ( 0.14%)
36 01/18/26 20:50:39 91.122.37.176 124 24.60 0.14% 0.45% * !
37 01/18/26 20:50:35 91.229.200.15 124 9.09 ( 0.14%)
38 01/18/26 20:50:34 31.28.10.24 124 9.20 ( 0.14%)
39 01/18/26 20:50:32 2.59.240.53 123 15.15 ( 0.14%)
40 01/18/26 20:50:42 195.189.181.72 123 26.43 ( 0.14%)
41 01/18/26 20:50:37 91.209.69.42 123 26.21 ( 0.14%)
42 01/18/26 20:50:40 194.135.231.126 123 23.23 ( 0.14%)
43 01/18/26 20:50:38 188.128.25.3 123 7.22 ( 0.14%)
44 01/18/26 20:50:42 95.161.195.198 122 7.33 ( 0.14%)
45 01/18/26 20:50:30 188.244.128.40 122 17.79 ( 0.14%)
46 01/18/26 20:50:38 213.33.160.66 122 15.53 ( 0.14%)
47 01/18/26 20:50:53 91.225.90.127 122 25.80 0.14% 0.59% * !
48 01/18/26 20:50:33 193.93.121.81 122 19.96 ( 0.14%)
49 01/18/26 20:50:30 37.143.27.234 122 24.38 ( 0.14%)
50 01/18/26 20:50:36 212.232.55.73 122 20.06 ( 0.14%)
51 01/18/26 20:50:28 78.109.138.192 122 2.50 ( 0.14%)
52 01/18/26 20:50:29 185.160.36.129 121 5.91 ( 0.14%)
53 01/18/26 20:50:32 91.228.208.248 121 10.00 ( 0.14%)
54 01/18/26 20:50:30 91.228.208.249 121 10.00 ( 0.14%)
55 01/18/26 20:50:30 81.30.179.162 121 24.89 ( 0.14%)
56 01/18/26 20:50:31 178.46.170.198 121 9.74 ( 0.14%)
57 01/18/26 20:50:29 82.208.85.155 121 9.46 ( 0.14%)
58 01/18/26 20:50:29 195.151.168.5 121 10.24 ( 0.14%)
59 01/18/26 20:50:33 82.142.130.98 121 7.43 ( 0.14%)
60 01/18/26 20:50:33 89.175.12.203 121 7.61 ( 0.14%)
61 01/18/26 20:50:29 91.228.49.82 121 2.36 ( 0.14%)
62 01/18/26 20:50:35 176.126.41.222 121 10.80 ( 0.14%)
63 01/18/26 20:50:31 141.101.226.5 121 39.28 0.14% 0.72% * !
64 01/18/26 21:03:12 89.20.104.4 120 11.47 ( 0.14%)
65 01/18/26 20:50:48 2.63.211.145 120 4.65 ( 0.14%)
66 01/18/26 20:50:55 37.78.95.171 120 26.83 0.14% 0.86% * !
67 01/18/26 20:50:39 91.215.90.39 120 19.51 ( 0.14%)
68 01/18/26 20:50:29 194.158.209.201 120 10.08 ( 0.14%)
69 01/18/26 20:50:37 89.208.125.126 120 19.96 ( 0.14%)
70 01/18/26 20:50:45 188.65.135.126 120 25.77 ( 0.14%)
71 01/18/26 20:50:42 195.68.150.110 120 15.02 ( 0.14%)
72 01/18/26 20:50:44 213.108.128.68 120 7.81 ( 0.14%)
73 01/18/26 20:50:39 89.107.120.28 120 20.08 ( 0.14%)
74 01/18/26 20:51:13 185.180.251.32 120 18.62 ( 0.14%)
75 01/18/26 20:50:40 176.114.16.126 120 15.09 ( 0.14%)
76 01/18/26 20:50:46 89.109.15.190 119 26.70 0.14% 1.00% * !
77 01/18/26 20:50:30 213.142.35.204 119 12.89 ( 0.14%)
78 01/18/26 20:51:03 212.124.11.115 119 8.29 ( 0.14%)
79 01/18/26 20:50:38 176.65.56.39 119 10.34 ( 0.14%)
80 01/18/26 21:06:55 89.109.153.14 119 6.81 ( 0.14%)
81 01/18/26 20:50:32 95.129.138.165 119 27.02 ( 0.14%)
82 01/18/26 20:50:28 195.239.243.92 119 13.22 ( 0.14%)
83 01/18/26 20:50:56 46.39.246.127 118 27.25 0.13% 1.13% * !
84 01/18/26 20:51:00 80.80.101.135 118 22.95 ( 0.13%)
85 01/18/26 20:52:01 80.62.20.66 118 9.33 ( 0.13%)
86 01/18/26 20:50:31 94.241.44.85 118 14.51 ( 0.13%)
87 01/18/26 20:50:30 92.50.170.102 118 9.61 ( 0.13%)
88 01/18/26 20:50:53 217.196.21.114 118 14.51 ( 0.13%)
89 01/18/26 20:50:28 109.195.102.167 118 22.51 ( 0.13%)
90 01/18/26 20:50:30 89.189.158.219 118 15.00 ( 0.13%)
91 01/18/26 20:51:02 31.173.24.98 117 6.70 ( 0.13%)
92 01/18/26 20:50:59 89.175.13.146 117 15.07 ( 0.13%)
93 01/18/26 20:51:05 154.43.165.6 117 18.65 ( 0.13%)
94 01/18/26 20:50:32 109.195.226.90 117 31.71 0.13% 1.26% * !
95 01/18/26 20:50:32 193.193.238.102 117 28.29 0.13% 1.40% * !
96 01/18/26 20:50:41 88.87.86.6 117 20.56 ( 0.13%)
97 01/18/26 20:50:30 81.88.208.102 117 8.51 ( 0.13%)
98 01/18/26 20:51:20 178.209.98.210 116 33.09 ( 0.13%)
99 01/18/26 20:50:34 46.8.55.3 116 22.82 ( 0.13%)
100 01/18/26 20:50:28 62.32.89.34 116 28.59 0.13% 1.53% * !
* = "active" = probably will send another request.
! = "abusive" = min requests of 100 and an average rate of less than 30s
between requests over the life of the entire connection.
Percentages are based on all packets from *active* clients. If the client
is not active, its percentage is what it would be if it were active.
Clients with very long updates (min requests of 10):
Rank First Seen Client IP Requests Rate Usage Cumulative
Clients distribution by count:
bin ( bin range ) count
1 ( 1 - 1) 665 ***************
2 ( 2 - 2) 116 **
3 ( 3 - 3) 656 ***************
4 ( 4 - 4) 215 *****
5 ( 5 - 6) 342 ********
8 ( 7 - 9) 1898 *********************************************
11 ( 10 - 13) 1608 **************************************
16 ( 14 - 19) 374 ********
22 ( 20 - 26) 279 ******
32 ( 27 - 38) 346 ********
45 ( 39 - 53) 272 ******
64 ( 54 - 76) 170 ****
90 ( 77 - 107) 125 **
128 ( 108 - 152) 170 ****
181 ( 153 - 215) 4
256 ( 216 - 304) 1
362 ( 305 - 430) 3
Clients distribution by rate (min requests of 10):
bin ( bin range ) count
1.0 ( 0.0 - 1.2) 15
1.4 ( 1.2 - 1.7) 2
2.0 ( 1.7 - 2.4) 2
2.8 ( 2.4 - 3.4) 3
4.0 ( 3.4 - 4.8) 10
5.7 ( 4.8 - 6.7) 12
8.0 ( 6.7 - 9.5) 31 *
11.3 ( 9.5 - 13.5) 26
16.0 ( 13.5 - 19.0) 41 *
22.6 ( 19.0 - 26.9) 45 *
32.0 ( 26.9 - 38.1) 99 ***
45.3 ( 38.1 - 53.8) 100 ***
64.0 ( 53.8 - 76.1) 342 ************
90.5 ( 76.1 - 107.6) 1277 *********************************************
128.0 ( 107.6 - 152.2) 717 *************************
181.0 ( 152.2 - 215.3) 261 *********
256.0 ( 215.3 - 304.4) 306 **********
362.0 ( 304.4 - 430.5) 63 **
Clients distribution by amount of time client was active (in hours):
bin ( bin range ) count
1.0 ( 0.0 - 1.2) 7244 *********************************************
Clients distribution by time since first request (in hours):
bin ( bin range ) count
1.0 ( 0.0 - 1.2) 7244 *********************************************
Active clients distribution by time since last request (in secs):
bin ( bin range ) count
1.0 ( 0.0 - 1.2) 22
1.4 ( 1.2 - 1.7) 13
2.0 ( 1.7 - 2.4) 10
2.8 ( 2.4 - 3.4) 12
4.0 ( 3.4 - 4.8) 27
5.7 ( 4.8 - 6.7) 42 *
8.0 ( 6.7 - 9.5) 61 *
11.3 ( 9.5 - 13.5) 80 **
16.0 ( 13.5 - 19.0) 114 ***
22.6 ( 19.0 - 26.9) 149 ****
32.0 ( 26.9 - 38.1) 204 *****
45.3 ( 38.1 - 53.8) 266 *******
64.0 ( 53.8 - 76.1) 227 ******
90.5 ( 76.1 - 107.6) 241 ******
128.0 ( 107.6 - 152.2) 285 ********
181.0 ( 152.2 - 215.3) 368 **********
256.0 ( 215.3 - 304.4) 463 *************
362.0 ( 304.4 - 430.5) 565 ***************
512.0 ( 430.5 - 608.9) 1594 *********************************************
724.1 ( 608.9 - 861.1) 371 **********
1024.0 ( 861.1 - 1217.7) 250 *******
1448.2 ( 1217.7 - 1722.2) 10
2048.0 ( 1722.2 - 2435.5) 13
2896.3 ( 2435.5 - 3444.3) 2
Inactive clients distribution by time since last request (in secs):
bin ( bin range ) count
1.0 ( 0.0 - 1.2) 0
1.4 ( 1.2 - 1.7) 0
2.0 ( 1.7 - 2.4) 0
2.8 ( 2.4 - 3.4) 0
4.0 ( 3.4 - 4.8) 0
5.7 ( 4.8 - 6.7) 0
8.0 ( 6.7 - 9.5) 0
11.3 ( 9.5 - 13.5) 0
16.0 ( 13.5 - 19.0) 0
22.6 ( 19.0 - 26.9) 0
32.0 ( 26.9 - 38.1) 0
45.3 ( 38.1 - 53.8) 0
64.0 ( 53.8 - 76.1) 2
90.5 ( 76.1 - 107.6) 0
128.0 ( 107.6 - 152.2) 2
181.0 ( 152.2 - 215.3) 7
256.0 ( 215.3 - 304.4) 13
362.0 ( 304.4 - 430.5) 19 *
512.0 ( 430.5 - 608.9) 170 ***********
724.1 ( 608.9 - 861.1) 393 ***************************
1024.0 ( 861.1 - 1217.7) 316 *********************
1448.2 ( 1217.7 - 1722.2) 101 ******
2048.0 ( 1722.2 - 2435.5) 182 ************
2896.3 ( 2435.5 - 3444.3) 650 *********************************************
Locked abusive clients count (global):
1146
Requested at Mon, 19 Jan 2026 00:47:16 +0300 via monit2