How can I monitor the IP connecting to my ntp

1

I want to install a ntp monitor so that I can see whether some ip have Malicious activity, but I failed to find one on the web, could you recommend one for me?Thanks. Server OS: Ubuntu Linux

2

There are still hundreds of FortiGate firewalls sending request bursts to the NTP pool.

I use tcpdump to capture NTP requests.

If you’re running chrony, this may be of interest chrony improves client stats output for easier abuse detection - Shaun's Blog

1 Like