Hello. I’m running a server in the pool, and it’s mostly a quiet place. But 3 to 4 days ago I started getting a coinsiderably high amount of requests from one host: 18:39:39.642792 IP (tos 0x10, ttl 59, id 33756, offset 0, flags [DF], proto UDP (17), length 76) 78.26.151.96.33417 > 37.57.97.11…

This is probably a different broken client. It looks like systemd-timesyncd. It has a bug causing requests to be sent in an infinite loop. The rate depends on the hardware. On my servers I see this every few weeks. You can confirm it’s timesyncd by looking at the sequence of its transmit timestamps…

Uncommon load question: many packets from one IP

Server operators

stevesommars October 8, 2021, 4:41pm 4

See the details I posted.

What is the cause of the demand spikes?

NTP bursts from FortiGate firewalls

Topic		Replies	Views
Buggy ntp server?	18	1726	April 3, 2020
Getting hit hard... 83.85.79.213 Server operators	1	1716	April 20, 2017
More abusive NTP clients, this time from Germany Server operators	13	913	April 12, 2024
Realistic max packets/sec per source IP? Server operators	21	1486	May 25, 2020
Are you seeing high rate, sustained NTP bursts coming from one IP address Server operators	0	663	February 7, 2024

Uncommon load question: many packets from one IP

Related topics