I want to install a ntp monitor so that I can see whether some ip have Malicious activity, but I failed to find one on the web, could you recommend one for me?Thanks. Server OS: Ubuntu Linux
There are still hundreds of FortiGate firewalls sending request bursts to the NTP pool.
I use tcpdump to capture NTP requests.
If you’re running chrony, this may be of interest chrony improves client stats output for easier abuse detection - Shaun's Blog